Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
File:                     aXRbBMvmNgtewTo67LMvuIXUhvs.mft (raw, json)
Hash identifier:          l5OM9KJ6WlYojP4t/Ayib8XALVcEek1qc3KU1d9g3d8=
Subject key identifier:   F1:27:5C:DE:79:FF:B4:6B:19:64:AC:A7:F3:C5:70:73:84:3B:96:4C
Authority key identifier: 69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
Certificate issuer:       /CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Certificate serial:       018F87B629E9616AC766EF3CB457CE1A01F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
Manifest number:          0FA5
Signing time:             Fri 17 May 2024 18:00:13 +0000
Manifest this update:     Fri 17 May 2024 18:00:13 +0000
Manifest next update:     Sat 18 May 2024 18:00:13 +0000
Files and hashes:         1: aXRbBMvmNgtewTo67LMvuIXUhvs.crl (hash: aIAPMpvRWWF2OmrSM6lgmCtPJnH4Rvo2olUcdT9WbS8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:29:e9:61:6a:c7:66:ef:3c:b4:57:ce:1a:01:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
        Validity
            Not Before: May 17 18:00:13 2024 GMT
            Not After : May 18 18:00:13 2024 GMT
        Subject: CN=f1275cde79ffb46b1964aca7f3c57073843b964c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:f2:50:0f:a7:fa:69:be:3a:42:e3:1d:fd:
                    ff:5c:b5:3a:02:28:c6:3d:05:31:da:90:1d:2f:c9:
                    64:0f:9e:37:2e:73:83:89:79:05:db:c4:11:5c:3e:
                    90:36:ab:b2:62:fd:da:dd:de:16:9d:09:8d:e9:bc:
                    4b:25:84:9d:7e:cb:ff:50:e6:95:5b:41:b1:3d:ba:
                    37:9c:93:92:56:ce:e9:30:7b:38:78:0e:9e:81:83:
                    c1:f3:b2:c0:91:8d:b7:a0:f0:64:d9:a2:10:00:14:
                    67:28:d9:df:2a:7f:bc:5c:2c:ff:da:35:aa:0b:c5:
                    a7:5e:77:01:ca:61:15:94:86:07:b5:a1:e0:44:5e:
                    27:6a:7b:d6:b7:4b:d1:6b:d6:06:de:e2:41:de:8b:
                    e9:28:1b:58:d8:73:b6:7d:2c:d8:08:de:c5:e5:9d:
                    0c:df:24:3e:eb:75:8c:fa:08:ee:b2:4f:73:c9:8e:
                    9f:3d:13:8f:cb:9d:dd:6f:b7:85:fe:6a:3c:09:4b:
                    12:13:91:4c:0b:f4:7c:47:91:12:ed:a5:31:2c:f9:
                    01:26:ac:71:14:90:fb:5e:0a:ae:1f:3e:28:0e:0e:
                    a3:fd:21:c9:2a:67:48:fc:9e:10:17:ba:fa:ec:ca:
                    42:8a:b4:c8:3b:6d:dc:98:19:39:ba:b4:55:6c:b5:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:27:5C:DE:79:FF:B4:6B:19:64:AC:A7:F3:C5:70:73:84:3B:96:4C
            X509v3 Authority Key Identifier:
                keyid:69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5c:da:7c:21:1b:cc:05:96:6f:ce:ee:ff:2a:a4:2d:c3:b6:
         0b:34:e1:14:8d:8b:67:50:39:62:00:a8:ae:4b:2b:0a:be:fa:
         a2:c0:73:25:4e:1f:01:65:5f:d0:14:ca:4a:a9:99:f2:cb:50:
         50:04:8b:83:e5:16:af:f9:73:98:43:cd:a5:a3:24:59:39:42:
         fa:c2:4b:7b:f9:11:03:d9:6f:6a:7f:91:0a:32:82:12:e7:4d:
         e7:26:6f:a9:53:70:48:e1:52:a2:5e:31:43:7e:44:4f:09:51:
         84:35:2d:2d:b0:e1:f3:ea:d6:89:ce:9a:36:c8:6d:ba:84:fd:
         7a:4b:74:9b:af:44:bb:d1:7a:aa:74:0e:83:17:29:07:49:4e:
         38:2e:9e:f6:3d:38:2d:d3:60:56:c8:ac:56:43:62:ce:3d:3b:
         ec:1d:69:35:ec:75:20:01:da:8e:b3:dd:9c:96:a7:50:8b:50:
         4b:fb:08:c3:4d:76:45:79:24:f6:83:19:bc:3b:92:44:b5:3b:
         5d:f7:0d:d6:47:79:81:02:fa:da:76:25:7b:1f:14:4d:a9:6a:
         4e:d0:a0:05:70:37:4d:ca:29:e0:f8:aa:7a:62:f3:c9:71:11:
         fe:17:e8:a8:78:25:2f:83:cf:56:03:f9:96:5c:fd:82:ff:ee:
         0d:da:1c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:58 2024 by rpki-client on console-fra.rpki-client.org