Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File:                     DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier:          YKZ67SHPieNLL8mKlp0DwRemZph5i3NRrFRDS3mxPYM=
Subject key identifier:   5F:2C:36:DF:97:D5:65:96:17:97:F9:F2:A8:21:52:66:B6:10:7B:1C
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer:       /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial:       018F3CD41E63A6D360541FF0AA6A6AD4E05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number:          114F
Signing time:             Fri 03 May 2024 05:01:25 +0000
Manifest this update:     Fri 03 May 2024 05:01:25 +0000
Manifest next update:     Sat 04 May 2024 05:01:25 +0000
Files and hashes:         1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: BYQLHdQL7dXu6RiErdS5EpQpP8LJ1wJuF2NA0oWA8K4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d4:1e:63:a6:d3:60:54:1f:f0:aa:6a:6a:d4:e0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
        Validity
            Not Before: May  3 05:01:25 2024 GMT
            Not After : May  4 05:01:25 2024 GMT
        Subject: CN=5f2c36df97d565961797f9f2a8215266b6107b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:46:7c:ef:99:c8:8c:d2:ee:98:df:d7:f4:
                    21:28:d4:28:a0:8b:26:e5:62:29:14:4c:71:bc:6e:
                    06:70:f8:c4:d0:f2:3e:e9:be:e2:c3:f4:b5:30:ab:
                    40:85:00:45:f7:2b:45:c9:c8:f1:b9:55:70:9c:f1:
                    38:8e:22:af:21:9c:f9:23:fe:ae:70:c3:f0:04:e8:
                    60:93:f5:e9:df:65:8e:d6:36:30:07:54:c4:03:43:
                    57:b1:e9:21:89:19:ca:f7:e3:17:82:00:6c:f2:aa:
                    75:18:d3:36:1c:e6:8d:90:b0:d1:e9:d7:61:b4:f8:
                    78:2a:4f:a1:c7:7d:bb:d0:d0:c1:3e:fd:42:b1:79:
                    67:f7:79:87:0c:ca:83:d0:ae:8c:7e:2c:13:82:05:
                    33:6d:65:79:2b:65:55:64:32:50:67:5b:46:87:58:
                    e2:c5:f0:4f:89:b0:49:fb:c4:60:e2:c4:a0:55:cc:
                    39:8d:e6:eb:93:1a:c9:b9:0f:ca:3d:82:ba:cc:ea:
                    f4:48:3d:a2:5c:13:3e:a0:f9:51:26:0a:07:ad:ca:
                    e3:77:fd:de:07:5d:20:00:bc:0b:43:e8:d7:b6:6d:
                    44:85:7e:df:5b:08:83:f2:ff:e0:24:fc:91:1c:8b:
                    02:3f:1f:63:ab:51:9e:e5:b9:0b:51:81:fb:e1:75:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2C:36:DF:97:D5:65:96:17:97:F9:F2:A8:21:52:66:B6:10:7B:1C
            X509v3 Authority Key Identifier:
                keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:d2:57:26:29:be:30:be:18:8b:e1:15:9f:79:74:68:92:bc:
         e1:1d:09:b7:a9:e1:8d:3a:a3:05:34:d6:66:d6:82:a0:82:45:
         60:78:70:ba:e0:d3:c3:61:91:b6:7a:f9:b0:5b:3f:82:55:62:
         bc:5a:6e:b8:9d:f8:31:ef:b2:7a:fa:5f:ba:60:3f:8f:e5:76:
         70:03:95:fd:f9:0f:73:24:7a:3b:bc:a8:b9:52:c9:1c:44:c5:
         e5:73:2a:c6:8a:e8:13:b7:29:e3:8c:bf:6e:45:cf:9f:08:a6:
         33:07:fe:12:a7:d7:e5:f7:50:d6:b7:79:6e:cd:b1:b8:a9:f4:
         d3:28:25:a4:4b:c1:3c:c2:b2:93:d3:26:d1:47:08:7e:5d:65:
         65:8c:5d:ce:16:b3:a3:e9:49:03:47:ff:e7:9e:f7:39:59:1a:
         e7:16:93:a3:1d:87:7f:9f:2b:4e:ec:07:34:48:5b:40:9f:6f:
         52:ef:ee:18:0f:b5:3b:d8:80:1b:a9:84:96:84:e9:68:59:86:
         f8:67:0b:fe:61:b4:5a:48:6a:1e:83:0d:95:2a:2a:26:18:69:
         f2:ab:04:2f:cc:03:21:c2:97:44:13:1d:a9:69:5b:39:82:13:
         91:92:a5:a2:3d:93:69:03:4f:7c:2b:a4:79:d8:ec:f1:fc:46:
         9a:4c:aa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:27:32 2024 by rpki-client on console-ams.rpki-client.org