Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1b3bc0-faed-48fb-b3f0-08b62b8efe71/1/goIekswnAHYZMDmOI4DCOqR1XxY.mft
File:                     goIekswnAHYZMDmOI4DCOqR1XxY.mft (raw, json)
Hash identifier:          tAloUb//C9zCsVtFheMgQLmnYIC618C+N9G0aiGS5X4=
Subject key identifier:   9A:91:9F:05:92:52:64:BA:BB:B4:AE:F4:67:F5:C7:A1:48:C0:04:6B
Authority key identifier: 82:82:1E:92:CC:27:00:76:19:30:39:8E:23:80:C2:3A:A4:75:5F:16
Certificate issuer:       /CN=82821e92cc2700761930398e2380c23aa4755f16
Certificate serial:       018F874A5DD25E25105809C41237609948C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/goIekswnAHYZMDmOI4DCOqR1XxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/1b3bc0-faed-48fb-b3f0-08b62b8efe71/1/goIekswnAHYZMDmOI4DCOqR1XxY.mft
Manifest number:          022D
Signing time:             Fri 17 May 2024 16:02:28 +0000
Manifest this update:     Fri 17 May 2024 16:02:28 +0000
Manifest next update:     Sat 18 May 2024 16:02:28 +0000
Files and hashes:         1: goIekswnAHYZMDmOI4DCOqR1XxY.crl (hash: VGDBJUxd/KpJOfJCCdqCoABZv4sA/IRsIIC8ZnQXMro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/1b3bc0-faed-48fb-b3f0-08b62b8efe71/1/goIekswnAHYZMDmOI4DCOqR1XxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/1b3bc0-faed-48fb-b3f0-08b62b8efe71/1/goIekswnAHYZMDmOI4DCOqR1XxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/goIekswnAHYZMDmOI4DCOqR1XxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:5d:d2:5e:25:10:58:09:c4:12:37:60:99:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82821e92cc2700761930398e2380c23aa4755f16
        Validity
            Not Before: May 17 16:02:28 2024 GMT
            Not After : May 18 16:02:28 2024 GMT
        Subject: CN=9a919f05925264babbb4aef467f5c7a148c0046b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ac:7a:be:e2:06:4d:ca:67:e3:d3:9e:7c:f6:
                    58:87:2e:8f:1c:09:3f:58:60:fb:f4:14:36:10:08:
                    b1:94:1c:04:32:4c:25:e8:30:49:8d:c9:13:34:5f:
                    84:0c:ba:14:60:c2:f0:36:cb:c1:9f:1d:fe:ee:c4:
                    e5:33:41:38:80:4f:e6:a5:5d:6b:3c:bd:f2:b4:38:
                    21:27:81:a8:cd:e2:09:29:30:8a:b2:cf:c3:fb:1a:
                    48:6d:c0:ef:50:b2:f4:a6:aa:7b:d4:75:f2:83:f4:
                    cc:6f:6a:78:37:55:f2:14:81:bb:2e:49:c3:16:83:
                    72:e8:ef:2d:4b:3f:9f:32:5e:3d:a6:91:38:16:11:
                    7e:10:8e:69:88:a7:cf:6b:b4:51:2c:ec:3a:c1:8e:
                    aa:78:d6:99:1e:2c:01:4e:07:77:01:e1:19:1c:06:
                    39:4b:36:c7:38:fb:69:ef:8c:f3:84:b3:59:10:13:
                    bb:ae:c4:e4:5c:71:0d:0d:44:8e:df:0b:57:3b:a4:
                    90:a5:18:5f:b3:82:16:a0:bb:d7:8b:ad:5b:21:58:
                    1a:d7:f4:28:ab:d3:c1:0e:c1:8f:d7:b6:e7:f4:6b:
                    e3:94:82:37:96:18:ab:a4:b7:df:91:5c:ba:9e:c0:
                    cc:28:6a:40:56:94:51:d8:5e:e5:40:04:0c:7c:08:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:91:9F:05:92:52:64:BA:BB:B4:AE:F4:67:F5:C7:A1:48:C0:04:6B
            X509v3 Authority Key Identifier:
                keyid:82:82:1E:92:CC:27:00:76:19:30:39:8E:23:80:C2:3A:A4:75:5F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goIekswnAHYZMDmOI4DCOqR1XxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1b3bc0-faed-48fb-b3f0-08b62b8efe71/1/goIekswnAHYZMDmOI4DCOqR1XxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1b3bc0-faed-48fb-b3f0-08b62b8efe71/1/goIekswnAHYZMDmOI4DCOqR1XxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:fe:cc:cb:58:a0:e8:83:c7:ff:8e:38:db:2d:41:80:1d:03:
         6c:a6:ff:df:40:1b:31:06:16:e4:3a:15:89:15:07:ce:f7:3f:
         46:3c:60:65:ce:c6:89:2c:f6:55:e0:35:2e:5b:7f:c6:1c:ea:
         b9:67:d7:d8:d3:33:8d:53:81:3f:38:15:04:7a:6f:65:21:f2:
         ca:1b:dd:c2:3a:20:6d:d1:aa:1a:3a:a4:8a:01:a4:15:cd:6f:
         3e:b1:de:01:4c:2d:79:df:51:e7:b9:3b:67:c8:47:46:00:a0:
         c8:6c:35:f7:6b:3f:cd:4b:5e:f9:68:02:c6:49:51:27:11:b6:
         af:88:05:6e:52:d6:d9:54:2f:b6:07:df:09:18:4e:67:3a:79:
         0d:ec:f4:85:b4:60:0a:13:94:b8:68:e6:d0:76:82:34:da:e2:
         cc:09:c1:10:41:50:de:06:8f:25:95:d3:4d:f7:b6:ce:93:29:
         dd:01:c2:e6:1a:e4:2f:a4:5f:e2:30:83:c1:d8:76:5c:60:87:
         35:f2:2f:7b:fc:52:1f:78:ce:0e:54:b0:95:f8:2f:57:19:55:
         9c:5f:02:e5:70:e1:f3:05:0a:34:b4:c4:33:45:e0:a9:b0:2d:
         a5:0b:e2:04:9d:e3:96:c3:4c:94:8e:56:4c:9a:85:7c:b7:ae:
         91:42:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:54 2024 by rpki-client on console-ams.rpki-client.org