Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
File:                     Os5p2XnZoNxneVEGweVayhVHCH8.mft (raw, json)
Hash identifier:          F1rw7WCfkNc1no2fN2NoOmSoMtO3xCExoYt3SF4wD80=
Subject key identifier:   50:69:B5:26:F7:81:F2:E1:E7:1B:24:E1:39:AE:07:E0:39:96:6C:B2
Authority key identifier: 3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F
Certificate issuer:       /CN=3ace69d979d9a0dc67795106c1e55aca1547087f
Certificate serial:       018F87ED60C2C6B826A17826BD5DEFFA61E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
Manifest number:          1172
Signing time:             Fri 17 May 2024 19:00:31 +0000
Manifest this update:     Fri 17 May 2024 19:00:31 +0000
Manifest next update:     Sat 18 May 2024 19:00:31 +0000
Files and hashes:         1: Os5p2XnZoNxneVEGweVayhVHCH8.crl (hash: vEtasrNqROkBppEZNAMCeS+b85Thqa3eOsUTTacWFoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:60:c2:c6:b8:26:a1:78:26:bd:5d:ef:fa:61:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ace69d979d9a0dc67795106c1e55aca1547087f
        Validity
            Not Before: May 17 19:00:31 2024 GMT
            Not After : May 18 19:00:31 2024 GMT
        Subject: CN=5069b526f781f2e1e71b24e139ae07e039966cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:df:43:7d:64:56:81:a6:cf:49:23:6d:c7:
                    7a:e3:e4:d1:3d:2f:64:a5:aa:b3:43:55:37:d2:2a:
                    af:c9:e5:ea:26:7b:67:08:0f:c9:a2:89:fd:88:d5:
                    2e:b3:5e:cc:e9:a5:f5:c6:bc:b6:86:65:9a:75:95:
                    d8:09:14:5b:9c:77:35:0e:72:44:c6:be:34:36:9f:
                    f6:1c:64:51:fd:f5:9f:ea:c7:9f:fb:0e:3d:49:1b:
                    13:d4:e8:e9:4e:99:2c:eb:bf:95:a2:a5:96:aa:15:
                    e5:c1:83:9d:46:3d:79:11:46:d1:ea:6c:e9:6e:a8:
                    c4:ca:91:1d:e2:b8:7a:f2:d4:1d:fe:cf:ae:5b:f6:
                    6b:f8:25:5f:62:f3:9c:40:99:fc:43:19:c6:29:d0:
                    ee:2c:e0:60:3a:e1:4d:59:d4:87:74:f4:1f:a8:2b:
                    3e:5b:04:ec:d6:b3:69:ba:77:a3:54:14:91:e8:fc:
                    fe:26:b5:e8:a6:a4:b3:d7:12:45:42:0e:af:99:c4:
                    24:2a:0b:6b:81:fd:ab:de:5e:62:72:bd:f1:72:9a:
                    a9:59:44:f5:13:8f:d3:03:cf:ec:f8:53:fa:53:ad:
                    38:8c:2a:07:5f:2d:23:62:10:4e:73:8c:24:62:3b:
                    23:1f:17:80:1c:6f:ff:bb:b0:ca:ae:5f:f5:81:66:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:69:B5:26:F7:81:F2:E1:E7:1B:24:E1:39:AE:07:E0:39:96:6C:B2
            X509v3 Authority Key Identifier:
                keyid:3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4b:8a:f5:5e:11:93:0f:2e:61:5e:0f:64:47:a5:b3:2a:a5:
         60:92:fe:01:9a:9f:51:ec:6a:e5:8b:02:5f:0e:3b:0e:2d:e4:
         b1:e4:15:9d:d6:79:67:7e:3f:54:70:93:d0:09:ad:be:96:a5:
         ea:a7:27:e0:cb:03:ff:20:dd:78:15:fd:4a:7b:fe:46:26:60:
         e2:05:20:c5:92:ee:44:34:6a:9b:e2:e8:35:29:4f:ff:29:9f:
         a8:4f:7a:a1:6a:b9:e5:9b:22:81:f0:12:4a:87:51:3c:9d:6f:
         62:6e:46:70:c6:8f:92:f7:4c:86:8d:0e:7c:86:3a:8b:02:54:
         6a:83:15:2e:83:42:ba:92:64:4b:03:cb:47:16:c4:be:87:ac:
         3c:c2:6c:87:17:2a:5c:70:a0:bd:07:45:99:1c:6f:3c:c5:dd:
         58:8b:40:1f:72:d7:bb:5b:00:84:08:f4:e9:d8:2c:d8:d5:dc:
         4f:bf:75:1f:c7:6a:ae:74:a8:e9:88:b4:5f:51:09:74:77:30:
         48:26:72:c7:11:c2:12:b5:6d:90:a1:f1:01:17:0f:e7:6b:d0:
         5b:1f:06:27:8d:38:01:e6:64:d4:01:50:a4:ce:8a:5a:50:cf:
         f7:0f:7d:89:0a:ca:ad:28:c8:a2:4c:5e:86:a2:b3:8c:a0:85:
         5b:08:a0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:46:43 2024 by rpki-client on console-fra.rpki-client.org