Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File:                     _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier:          e3wJvvl7CXPKDbDe3sYPmmIKu6Z9o8CujC5U7emQROc=
Subject key identifier:   E0:73:79:61:F1:4B:C7:CC:2C:6E:CC:9F:3F:F2:A3:F8:15:04:6C:E1
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer:       /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial:       018F874A189359099EAFAF6B04DFB2883B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number:          08D8
Signing time:             Fri 17 May 2024 16:02:11 +0000
Manifest this update:     Fri 17 May 2024 16:02:11 +0000
Manifest next update:     Sat 18 May 2024 16:02:11 +0000
Files and hashes:         1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: QQ6tizDjdS/PhV/NFsb1UZ7UZjE22YSGbwA/TyOT2OQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:18:93:59:09:9e:af:af:6b:04:df:b2:88:3b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
        Validity
            Not Before: May 17 16:02:11 2024 GMT
            Not After : May 18 16:02:11 2024 GMT
        Subject: CN=e0737961f14bc7cc2c6ecc9f3ff2a3f815046ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:86:e9:26:72:14:1f:1f:61:e0:99:10:31:
                    9a:7e:64:b4:fe:bd:04:b0:d3:84:e0:c0:12:6a:6f:
                    a4:98:67:85:c0:a8:07:73:1e:d3:3e:96:e2:f4:71:
                    0b:82:41:b4:62:34:e2:72:6c:b8:dd:9b:46:be:ab:
                    42:8c:bc:7d:65:10:23:6e:0a:60:9b:89:1c:16:be:
                    f7:ad:18:83:eb:2e:f3:2b:db:25:8c:c5:bb:0e:4d:
                    c3:f9:65:8a:ef:c0:a1:9e:b7:58:fd:b7:10:12:33:
                    bc:80:ea:4a:3b:f1:dc:2d:6f:e8:f0:5f:32:60:8d:
                    ee:0e:fa:d1:3a:11:32:0e:63:8a:b6:9a:7d:1f:54:
                    c8:f1:85:36:51:e4:54:0b:dd:88:aa:55:2b:a1:17:
                    b2:e4:6a:21:70:cb:34:32:78:99:11:ea:ed:fd:8d:
                    14:d6:05:d0:1e:63:08:3f:10:c1:b0:73:3d:10:5d:
                    3b:ff:c2:d5:2f:e0:73:38:6a:5d:8b:df:52:28:f0:
                    f3:fc:6c:25:3f:d9:0d:02:9c:1d:53:52:02:a2:b9:
                    46:1d:08:0e:1c:e7:a8:b7:01:42:32:a6:2b:6c:06:
                    50:26:2f:fa:af:c1:fa:ff:3e:a3:fa:f4:3c:40:10:
                    27:7e:07:79:5b:75:a9:07:37:d7:f4:7f:44:df:8c:
                    3d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:73:79:61:F1:4B:C7:CC:2C:6E:CC:9F:3F:F2:A3:F8:15:04:6C:E1
            X509v3 Authority Key Identifier:
                keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f5:3d:5a:b4:87:8f:da:80:f5:13:5d:41:e8:51:bd:d9:3a:
         cb:98:fe:5f:5e:35:86:6b:6e:c5:41:bb:c0:36:af:9e:76:87:
         03:34:d1:d3:9c:d7:8d:5d:2b:35:df:64:13:31:f9:f2:eb:fd:
         32:ca:d0:bd:38:a6:a1:eb:34:1a:77:8f:46:96:cd:36:09:be:
         86:06:72:ee:84:db:57:ef:b2:fd:f8:b2:c2:5a:d4:cc:7b:1b:
         ca:47:e8:c5:ad:f1:25:32:44:c5:b5:a2:71:d1:df:5a:43:a5:
         79:2c:1b:94:91:68:dd:38:68:af:1a:d0:39:cd:87:af:08:3e:
         9d:b5:58:f7:a8:0a:37:eb:06:00:ac:99:a2:75:5d:52:f5:d4:
         80:b9:fa:d1:a3:cc:8e:bc:83:98:4a:53:6b:00:38:ea:1b:79:
         da:50:1c:0b:a7:95:94:82:5a:9e:cd:95:98:89:53:30:39:7a:
         9a:e4:0b:f1:4a:24:dd:19:47:d1:6f:4b:81:a0:6a:8e:1a:03:
         a0:a7:42:95:5b:bc:4a:6c:c8:98:df:21:b7:b9:41:b7:8b:51:
         0e:6e:93:8e:11:a3:0b:79:ee:d9:05:5c:7e:c8:78:d0:d7:42:
         27:d2:13:ab:73:cf:a5:ce:87:12:38:61:a4:31:67:bd:e9:30:
         ac:31:01:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:31 2024 by rpki-client on console-fra.rpki-client.org