Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
File:                     MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft (raw, json)
Hash identifier:          ahZQiJtSjFI915/OcuovyU6tWNO/fg8tJYblzjINYxI=
Subject key identifier:   29:21:3E:C7:33:54:8B:93:FD:95:E2:76:28:33:3F:5D:3E:25:C0:8E
Authority key identifier: 30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F
Certificate issuer:       /CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
Certificate serial:       018F87486A991D23B5C637760E5F8330EDD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
Manifest number:          04FF
Signing time:             Fri 17 May 2024 16:00:20 +0000
Manifest this update:     Fri 17 May 2024 16:00:20 +0000
Manifest next update:     Sat 18 May 2024 16:00:20 +0000
Files and hashes:         1: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl (hash: 3jCN/KznxMjKknKcNvr6mMlDLV7TNc90xXAeGeUE11o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:6a:99:1d:23:b5:c6:37:76:0e:5f:83:30:ed:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
        Validity
            Not Before: May 17 16:00:20 2024 GMT
            Not After : May 18 16:00:20 2024 GMT
        Subject: CN=29213ec733548b93fd95e27628333f5d3e25c08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:aa:56:aa:df:75:a1:87:5a:94:04:3f:2a:
                    7a:cd:0b:7b:41:be:7d:45:0d:26:06:38:68:99:cf:
                    da:a8:0a:ae:95:25:8e:45:e2:74:01:d6:4d:23:c2:
                    95:ff:a3:a2:8a:9d:d5:22:78:ee:7b:71:2c:ae:7b:
                    96:ba:96:3d:92:b8:e8:a7:23:74:c8:75:6c:2a:7c:
                    75:68:40:a2:71:59:42:dd:96:b8:3c:63:1b:46:c8:
                    6d:9b:6d:af:ea:cd:b4:53:ff:1c:70:ca:c7:8a:9e:
                    13:b8:b3:91:8f:e6:8e:47:4d:ad:d3:8c:4a:de:42:
                    cc:a9:8e:46:9b:ec:9c:97:43:41:e3:2d:50:71:04:
                    b9:51:c4:e7:1f:25:02:af:ad:38:7f:c4:bc:77:ec:
                    e0:08:4f:27:86:f4:18:35:14:37:2c:a0:87:df:1e:
                    44:cf:05:51:be:64:75:c8:63:91:d7:2a:00:b5:fa:
                    28:a4:32:ba:1e:f5:d2:65:42:b4:07:02:82:d4:0c:
                    3d:9b:c3:ef:af:bf:52:46:ec:4a:9f:6a:51:6f:d9:
                    20:61:b4:50:cd:5e:af:6f:5f:c1:f2:92:68:d0:18:
                    d0:c6:5c:5a:e9:45:4b:7a:a5:40:26:05:0f:81:9d:
                    08:6a:53:37:a6:13:77:97:e5:50:b5:75:cd:36:2b:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:21:3E:C7:33:54:8B:93:FD:95:E2:76:28:33:3F:5D:3E:25:C0:8E
            X509v3 Authority Key Identifier:
                keyid:30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fb:2c:27:00:b3:48:e5:79:03:b5:ca:3d:5f:ba:de:bc:69:
         89:81:6e:94:4e:15:bf:0a:72:45:2f:f5:8a:6a:ce:e5:7e:76:
         ee:f4:39:0f:18:40:42:fd:fd:c3:3f:ce:8f:70:90:46:05:6c:
         b5:65:88:de:08:7c:d7:9f:b9:d2:bd:00:fe:fa:9d:1e:7a:8b:
         fd:14:8d:fd:52:82:b3:c9:bd:ef:78:f0:1a:7b:33:a0:9d:88:
         d4:44:ab:c3:70:b8:90:03:34:8f:0a:9b:40:2a:13:ad:07:2d:
         2a:a6:eb:34:bb:6c:c4:bb:59:c3:1a:56:84:38:8e:c4:84:af:
         6c:d4:92:c5:74:3a:02:e3:88:c9:1b:cd:cb:95:45:92:e4:c7:
         a8:50:b7:c9:a3:11:05:7c:7a:a5:de:0c:92:23:81:ed:4d:4c:
         04:ea:a6:a3:1f:67:8b:5d:fc:4f:09:58:21:79:f9:1c:6b:cd:
         1b:88:a9:29:39:1c:ea:c7:64:30:be:1e:ba:b9:15:cb:f3:89:
         e4:cc:a5:ab:76:72:6f:9c:99:e3:23:d0:8c:5a:9f:9a:7e:be:
         da:2f:1a:6e:f5:f3:bb:42:9d:f1:7b:fd:60:f7:26:10:b4:a6:
         bd:01:31:9e:44:6b:c3:4e:fa:1f:13:1e:9f:12:b5:0b:b3:b1:
         7f:2f:f0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:25 2024 by rpki-client on console-ams.rpki-client.org