Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File:                     1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier:          8AckkGlTxTRRSSriJF43tFg6//NVSHfb+xEqwVjHf6A=
Subject key identifier:   B7:9E:90:02:A7:2D:60:B6:41:A9:9D:E1:8D:2F:79:18:60:E7:7E:59
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer:       /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial:       018F2D2997563D440CD9E044D91CFA9BCDEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number:          0AC5
Signing time:             Tue 30 Apr 2024 04:00:51 +0000
Manifest this update:     Tue 30 Apr 2024 04:00:51 +0000
Manifest next update:     Wed 01 May 2024 04:00:51 +0000
Files and hashes:         1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: b95+yowe6z8ta0G0HvoTmYQi8GMcAZFj2022aV6EyLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:29:97:56:3d:44:0c:d9:e0:44:d9:1c:fa:9b:cd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
        Validity
            Not Before: Apr 30 04:00:51 2024 GMT
            Not After : May  1 04:00:51 2024 GMT
        Subject: CN=b79e9002a72d60b641a99de18d2f791860e77e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:33:de:76:53:ab:0f:26:6b:21:3d:0c:f5:
                    27:da:c0:de:99:4e:6b:73:70:85:19:68:e7:f8:c5:
                    0b:a4:f5:05:ad:35:f6:55:69:32:b0:11:dd:5b:a4:
                    a1:91:45:c7:67:7f:45:a9:8a:e1:3b:fd:02:9b:18:
                    ed:93:32:37:ab:bc:a9:f1:a3:33:f6:7f:6c:45:5f:
                    e9:62:9e:ce:6f:30:e6:cc:eb:43:38:70:9b:15:9c:
                    f4:fe:7f:c5:99:f4:ed:e9:84:4b:22:3e:48:5c:b5:
                    dc:b7:58:12:69:47:f1:9b:f4:ea:66:e7:8f:60:6d:
                    80:f1:d2:f5:95:45:d2:1e:98:4f:5e:2f:92:9c:ea:
                    bf:ae:d9:fa:01:49:f9:4b:81:8a:58:84:18:44:c2:
                    54:59:c5:54:6e:e8:eb:30:ad:78:b8:1a:ef:b8:2a:
                    73:fa:ee:f3:1f:55:db:af:81:9c:f1:00:82:ae:15:
                    b8:d2:43:89:be:9b:6b:a2:87:d9:2d:ad:91:3d:04:
                    6b:37:5f:b6:84:d7:53:d4:5e:ec:4b:f3:d7:ba:9a:
                    d9:1c:80:3c:6b:40:f1:89:ea:4a:70:2c:9d:4a:71:
                    8a:2a:0d:a6:32:e3:00:f2:3e:0d:7b:6b:5e:01:fa:
                    d3:b6:6d:c2:0e:0a:ab:67:55:04:01:1a:04:b3:e0:
                    67:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9E:90:02:A7:2D:60:B6:41:A9:9D:E1:8D:2F:79:18:60:E7:7E:59
            X509v3 Authority Key Identifier:
                keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5b:4a:a1:e5:bd:1d:c4:79:7f:4b:c6:9f:83:3a:e6:af:af:
         39:3c:08:1b:d2:20:c2:f5:00:ab:41:38:8d:fe:11:10:b2:b2:
         bc:0d:6e:82:7a:b8:59:70:f8:6a:8f:59:f9:32:f9:7e:19:52:
         0c:28:e3:c3:6f:82:4d:63:90:90:4a:98:8c:76:73:8c:bf:1a:
         29:e9:de:c1:54:f6:0c:9c:d2:95:3c:a9:dc:c8:4f:57:7b:c2:
         bb:8d:c8:e8:78:40:ba:ac:50:a0:70:40:f8:28:d4:1f:b0:3f:
         7a:28:a7:2d:bd:37:d7:a4:11:fd:23:68:a5:2f:57:d6:ef:05:
         a4:a8:ce:d6:43:31:5c:19:05:32:68:2e:4f:5a:56:52:38:c7:
         a8:18:0b:ff:b0:1e:6f:88:c6:77:f3:20:d7:86:42:eb:d7:8a:
         fe:a1:68:5e:2e:a9:af:4d:7c:b3:c8:68:62:ce:e9:f9:07:74:
         88:d4:65:ae:7c:87:43:ff:61:33:79:df:5c:ba:24:1d:09:82:
         5f:cd:f1:e4:e9:81:2b:a9:21:0f:d8:18:9a:32:a7:70:ff:cb:
         3f:6c:08:6b:91:d3:d9:70:8b:3a:a9:cb:66:0a:4a:26:0f:6e:
         5d:7e:72:06:ea:2f:e5:f6:a6:25:39:84:e4:37:59:55:55:7d:
         a5:8f:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:20:52 2024 by rpki-client on console-fra.rpki-client.org