Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/51MPsdgjZlLNpjo9EFdK_HUpw9c.mft
File:                     51MPsdgjZlLNpjo9EFdK_HUpw9c.mft (raw, json)
Hash identifier:          gq/YshBvG1AEPW9b/XJtbcOc5Rx8reiPfB6FJgCyqrM=
Subject key identifier:   B1:29:49:53:1A:A6:0E:4D:01:98:60:21:5B:A9:AE:55:C6:9C:D1:81
Authority key identifier: E7:53:0F:B1:D8:23:66:52:CD:A6:3A:3D:10:57:4A:FC:75:29:C3:D7
Certificate issuer:       /CN=e7530fb1d8236652cda63a3d10574afc7529c3d7
Certificate serial:       018F882400B2664BB01D9A03AA09E45B5F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51MPsdgjZlLNpjo9EFdK_HUpw9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/51MPsdgjZlLNpjo9EFdK_HUpw9c.mft
Manifest number:          68
Signing time:             Fri 17 May 2024 20:00:11 +0000
Manifest this update:     Fri 17 May 2024 20:00:11 +0000
Manifest next update:     Sat 18 May 2024 20:00:11 +0000
Files and hashes:         1: 51MPsdgjZlLNpjo9EFdK_HUpw9c.crl (hash: 8gEDhS1udT6qj++chpnIAoSgLnvSeUjRb48vg5yF1PU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/51MPsdgjZlLNpjo9EFdK_HUpw9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/51MPsdgjZlLNpjo9EFdK_HUpw9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51MPsdgjZlLNpjo9EFdK_HUpw9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:00:b2:66:4b:b0:1d:9a:03:aa:09:e4:5b:5f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7530fb1d8236652cda63a3d10574afc7529c3d7
        Validity
            Not Before: May 17 20:00:11 2024 GMT
            Not After : May 18 20:00:11 2024 GMT
        Subject: CN=b12949531aa60e4d019860215ba9ae55c69cd181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9f:01:c7:8d:7d:c6:3b:5f:24:a6:6e:b6:fd:
                    5e:d6:3b:6e:4a:a9:32:42:9e:1f:a7:ac:af:80:4a:
                    39:38:bc:51:4d:eb:53:af:0b:2f:c1:29:b2:90:07:
                    e5:79:44:8f:8c:c7:c0:a7:3a:b4:65:88:77:37:44:
                    b6:0c:03:bf:a3:1a:2f:a9:7b:14:fe:2d:1e:36:1b:
                    e3:5d:13:c1:48:f6:ef:71:a3:74:fb:83:de:6e:d0:
                    be:3e:97:65:cb:0e:d3:30:c5:31:78:84:4f:65:0e:
                    b6:b8:02:87:e0:4c:78:6d:b5:74:bb:4a:df:4a:48:
                    ca:0d:3a:74:a7:b0:a1:ab:18:ff:43:30:b9:6a:83:
                    0d:c2:bc:59:d9:61:e9:bd:2d:3b:8b:e9:44:3e:d9:
                    f8:b4:de:ad:3d:c7:62:75:f1:e4:f7:3c:8c:c5:f1:
                    2c:a9:b6:77:fa:bf:c8:c2:2a:82:b4:8a:d7:dc:3d:
                    ef:26:19:f0:f4:f0:8d:c9:bb:d0:7a:ee:04:9b:e8:
                    5f:bb:1c:94:cc:12:7c:4c:70:e9:e4:50:48:0a:7f:
                    fd:79:09:96:ba:70:69:35:bd:70:c6:e1:1a:8b:ef:
                    77:4f:de:6b:5c:32:01:eb:a8:3b:9d:7b:cd:66:22:
                    6b:c8:43:99:64:ea:10:26:3c:e5:4c:da:9d:aa:8f:
                    0c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:29:49:53:1A:A6:0E:4D:01:98:60:21:5B:A9:AE:55:C6:9C:D1:81
            X509v3 Authority Key Identifier:
                keyid:E7:53:0F:B1:D8:23:66:52:CD:A6:3A:3D:10:57:4A:FC:75:29:C3:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51MPsdgjZlLNpjo9EFdK_HUpw9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/51MPsdgjZlLNpjo9EFdK_HUpw9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/51MPsdgjZlLNpjo9EFdK_HUpw9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7a:03:af:01:ce:62:71:44:51:b5:30:8a:16:ec:b0:67:40:
         ba:56:2e:4b:b7:26:fd:ce:d1:8d:6a:81:03:2f:4f:c7:56:44:
         a9:fe:3f:f7:5e:c5:4e:f1:6e:e8:29:aa:20:59:73:69:40:97:
         b1:a4:92:dd:a1:f1:64:bd:f0:fe:3e:a7:3a:e6:75:d2:b0:59:
         c6:97:c5:17:82:2a:6a:28:dc:34:69:a6:ef:ab:cc:b1:6e:1d:
         e2:46:67:02:5c:c9:61:da:e0:c7:04:c5:0d:c9:e5:48:90:07:
         7d:ec:b2:26:57:10:36:a7:e1:16:96:e7:e7:a8:84:ba:45:76:
         20:d8:72:3b:cd:90:f6:0a:0d:0c:3c:c3:dc:45:39:ff:9c:2e:
         d6:6d:d3:57:16:17:52:ac:b2:b9:d5:88:11:62:e7:0b:cb:3c:
         bf:a8:74:a7:0c:ab:da:5d:4b:9d:bb:b3:fc:19:94:1f:47:56:
         31:19:4a:d7:1d:a7:66:04:20:47:c7:29:9c:43:9f:8a:27:03:
         f0:73:10:4c:c6:37:c5:02:7d:66:71:cf:3a:2b:b4:3c:58:a0:
         62:13:7c:fe:b2:83:99:88:59:93:8b:77:c7:42:c7:8e:b7:ab:
         32:f8:ee:5e:42:9d:bb:46:41:92:24:ef:35:a7:f8:6f:01:f0:
         f4:52:fd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:39 2024 by rpki-client on console-ams.rpki-client.org