Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File:                     AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier:          UWWXqEWCJUynxF8XQELk7tqKwcqbT71/UZwNUkzY6f0=
Subject key identifier:   64:1F:C9:C5:25:4F:74:47:CD:A1:A1:67:BF:57:5A:45:ED:DB:17:3C
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer:       /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial:       018F3DE6DD0DE5ADEE510E7E05F1C5926D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number:          0B4A
Signing time:             Fri 03 May 2024 10:01:30 +0000
Manifest this update:     Fri 03 May 2024 10:01:30 +0000
Manifest next update:     Sat 04 May 2024 10:01:30 +0000
Files and hashes:         1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: Kd1I28mPFDzrHO47+igI07OHdaJHLSZtQV7Ez4gSTQE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e6:dd:0d:e5:ad:ee:51:0e:7e:05:f1:c5:92:6d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
        Validity
            Not Before: May  3 10:01:30 2024 GMT
            Not After : May  4 10:01:30 2024 GMT
        Subject: CN=641fc9c5254f7447cda1a167bf575a45eddb173c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:8a:28:4b:db:09:cf:1d:4f:18:8f:3f:0b:
                    e7:1a:b7:52:8b:9f:30:0e:9b:cf:df:79:6f:4a:29:
                    e0:b2:21:a5:f1:86:30:89:d6:b4:12:81:44:d9:60:
                    e1:7a:f1:dc:a8:4f:19:cd:50:9b:63:0d:21:19:48:
                    37:98:5b:7f:c9:63:2a:b5:c3:71:9e:64:c5:e0:d7:
                    c7:44:43:82:2f:db:19:4d:b1:60:9c:a1:7b:74:41:
                    88:db:8f:da:00:03:fa:ec:b1:a5:8e:5d:7f:f2:c5:
                    10:36:68:23:0d:12:b1:a2:b9:fa:1e:3c:82:ff:de:
                    dd:b0:1b:43:8f:6b:66:f9:e3:37:dc:ac:41:b2:dc:
                    d6:6a:cb:63:6c:4d:c2:22:35:ab:58:50:62:a2:7a:
                    63:7e:bd:18:12:82:f2:ed:25:e2:71:b8:1c:2f:b7:
                    01:1e:30:be:ae:55:0f:10:c5:2f:98:03:9c:d6:cd:
                    7a:42:25:f4:e7:03:a0:64:ab:63:e7:7a:ab:32:ed:
                    ea:79:df:80:c4:10:e5:88:e0:2b:52:56:ed:4c:f1:
                    5c:74:d8:20:0b:14:a4:81:16:c8:cf:af:7b:06:26:
                    54:d8:db:d7:0d:bf:de:62:e9:71:4b:9e:0a:49:fb:
                    83:f6:68:41:d2:19:e5:3f:dc:ba:3f:ab:97:ef:d3:
                    f7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1F:C9:C5:25:4F:74:47:CD:A1:A1:67:BF:57:5A:45:ED:DB:17:3C
            X509v3 Authority Key Identifier:
                keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bb:32:e9:35:5b:3b:4b:a1:a6:c4:23:57:26:03:89:00:09:
         9d:50:8e:e9:76:ae:64:db:ab:06:d1:0a:44:25:46:f4:8a:3b:
         c3:50:d0:12:80:cd:b2:ef:6a:f8:eb:22:ec:41:2d:9d:e9:b7:
         ff:d8:68:08:b3:9c:b2:22:21:ad:ea:82:cd:65:70:86:36:82:
         bb:68:09:f2:a7:eb:f6:92:e4:23:9b:6b:7d:d2:61:2a:b1:77:
         0f:04:64:8f:ee:f6:bb:d2:78:be:ba:20:f6:d3:03:6a:d7:cc:
         33:a0:e9:18:98:4f:e1:fc:d3:73:c2:4e:59:e2:01:1c:e8:c4:
         07:df:65:bf:70:e0:0f:25:a4:05:09:4d:4d:62:f5:1d:a4:20:
         de:1a:f7:cb:10:47:e8:24:6e:5a:e7:96:cc:24:9d:56:73:b2:
         9a:0d:92:f5:a5:b0:00:cd:fa:24:eb:92:a9:56:0d:24:37:2e:
         6c:01:fd:1e:91:f6:59:c1:26:5a:be:52:d9:d5:90:27:67:85:
         db:ff:5b:6d:2c:f7:03:50:00:c4:d5:9d:16:94:0e:24:70:17:
         3e:74:4c:f9:66:8d:c3:b9:ee:f3:62:90:9d:2c:e0:f1:95:68:
         70:fb:1b:bd:be:cf:68:0b:46:3c:20:be:d8:6d:51:04:24:ce:
         23:51:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:16:02 2024 by rpki-client on console-fra.rpki-client.org