Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
File:                     cegLwpz58rQKwwJOD3I126LVelQ.mft (raw, json)
Hash identifier:          /8cflFfKZr5r7vp+OI9dl7t56fSPPgLGUca2xo8dCl4=
Subject key identifier:   10:FD:7C:A0:53:6F:79:A0:00:20:92:E0:1D:B8:59:1B:5E:2E:15:16
Authority key identifier: 71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
Certificate issuer:       /CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Certificate serial:       018F87ED2CAE576022407534FD88238A7C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
Manifest number:          C7
Signing time:             Fri 17 May 2024 19:00:18 +0000
Manifest this update:     Fri 17 May 2024 19:00:18 +0000
Manifest next update:     Sat 18 May 2024 19:00:18 +0000
Files and hashes:         1: cegLwpz58rQKwwJOD3I126LVelQ.crl (hash: fM1+GdwrWZaRXOLK8nFa8+HZ4HFk0zv1gzKD7XqH3t0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:2c:ae:57:60:22:40:75:34:fd:88:23:8a:7c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
        Validity
            Not Before: May 17 19:00:18 2024 GMT
            Not After : May 18 19:00:18 2024 GMT
        Subject: CN=10fd7ca0536f79a0002092e01db8591b5e2e1516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:67:bb:db:48:5e:3a:25:12:52:6f:e3:33:
                    4c:2d:8a:a2:5d:3e:15:e8:b6:58:8f:fe:25:c7:f9:
                    99:98:3d:fc:d2:e4:8a:7c:b8:fe:dc:b6:05:ed:f3:
                    ba:6b:2c:f2:8f:11:ff:ed:b4:4f:6a:1d:08:5c:f4:
                    93:28:d1:c7:fa:5e:27:19:08:31:ab:80:bb:91:47:
                    a2:6e:03:65:18:19:27:9c:ae:c5:2c:5a:6d:38:94:
                    e9:c6:2f:c5:e1:88:84:51:f7:31:c1:4b:15:ae:46:
                    58:32:95:55:32:a4:5c:d4:8f:8f:8c:7e:65:6d:bc:
                    5a:cb:72:16:22:aa:a3:d0:e1:1f:d6:41:21:77:d9:
                    ad:9f:11:08:41:b5:b4:d7:cf:79:d2:16:3c:cd:68:
                    e1:be:45:e0:57:bc:17:46:26:c9:05:0d:1a:bd:4e:
                    0c:a1:f2:1d:19:9d:84:c7:c1:09:97:b3:c0:1c:70:
                    fa:d1:be:12:6b:2e:92:aa:13:11:f0:e7:16:c5:1a:
                    77:24:8f:4f:1c:40:6b:72:78:15:92:e1:60:f7:0c:
                    2c:93:98:29:2e:25:21:96:1b:fc:29:ae:ba:b6:42:
                    85:08:b1:7e:16:a3:1c:3e:bd:32:e2:6e:2c:f9:bd:
                    32:fe:06:0d:1e:24:d1:75:bb:27:c1:6e:08:18:37:
                    e6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FD:7C:A0:53:6F:79:A0:00:20:92:E0:1D:B8:59:1B:5E:2E:15:16
            X509v3 Authority Key Identifier:
                keyid:71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:cb:42:33:61:ac:2a:8a:bf:78:c6:9f:bb:b3:db:0b:b4:b4:
         db:3b:dd:9d:43:75:c3:1b:0f:40:40:0a:30:4c:cb:ef:a4:8c:
         84:e4:d2:62:b2:6c:e0:8e:8f:48:ee:f7:db:28:40:ea:92:e7:
         d7:73:d6:78:cc:58:a9:7f:76:56:d5:6b:8c:8d:0a:c4:a6:99:
         bf:79:16:03:05:34:07:7d:68:36:c1:fa:3f:0c:f8:38:0c:49:
         f8:8f:2a:a9:bc:c8:40:44:03:56:29:9e:bf:0e:58:d0:15:6e:
         40:1f:63:25:43:7e:fa:66:90:e9:e5:98:31:55:a9:9a:bf:a0:
         8f:e1:e4:ef:0e:e9:44:05:50:6f:26:65:a0:67:d1:e8:35:5c:
         8d:f7:d5:a2:f2:b6:8f:b9:c6:73:73:6c:0c:ea:d5:c2:3d:c2:
         cd:65:c7:cb:84:3e:e6:84:65:75:54:cc:70:e7:c3:66:9a:66:
         ff:03:43:41:b3:2e:84:a8:b9:5d:22:76:69:d7:80:41:ec:7a:
         76:9f:b3:fa:b1:be:c2:8f:88:5e:55:b1:55:18:3a:6d:5a:dd:
         f6:41:f4:b9:14:c4:df:5b:0f:75:0f:79:42:3e:41:95:af:dc:
         73:0a:5f:b5:a7:6f:7c:2a:62:8f:cc:61:6a:d8:d2:bc:9a:46:
         95:be:b1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:34 2024 by rpki-client on console-fra.rpki-client.org