Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File:                     5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier:          6T5NVo8XeudpY+YFTvkJnRjnaOLS9lUg7JJJeg1XvJ0=
Subject key identifier:   34:81:E1:B8:FA:60:81:6D:E9:CC:60:84:CB:62:E3:93:16:15:D8:85
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer:       /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial:       018F41C5BD8FC3827F052853336E2E7D608F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number:          0A7B
Signing time:             Sat 04 May 2024 04:03:49 +0000
Manifest this update:     Sat 04 May 2024 04:03:49 +0000
Manifest next update:     Sun 05 May 2024 04:03:49 +0000
Files and hashes:         1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: 1t0BD/D5CP7526PAZyIEfPgbYHdndhzC7TVucV8lfhM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c5:bd:8f:c3:82:7f:05:28:53:33:6e:2e:7d:60:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
        Validity
            Not Before: May  4 04:03:49 2024 GMT
            Not After : May  5 04:03:49 2024 GMT
        Subject: CN=3481e1b8fa60816de9cc6084cb62e3931615d885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:89:07:d0:bd:95:8b:65:46:2a:d9:c8:db:
                    bf:1e:6a:a8:98:2a:d8:41:54:4f:83:9b:da:19:5c:
                    08:07:a7:08:f7:2d:0e:1b:46:bb:3d:c8:fb:2f:1f:
                    5f:d6:01:94:54:6a:9c:7c:c8:15:89:1d:70:90:8f:
                    5b:32:dc:b6:c0:d7:c0:2b:81:37:0f:ff:3d:b3:0b:
                    08:d6:3e:00:36:a1:87:8a:27:21:06:10:b3:d0:bd:
                    66:22:ea:95:4a:2e:72:9e:b3:a4:e1:c5:c6:85:45:
                    8c:38:c4:1d:d7:40:2a:ed:7f:f6:08:c1:d0:cd:49:
                    fa:95:73:01:fb:06:d0:22:83:26:87:88:7a:4e:71:
                    14:89:50:6a:40:39:09:94:3f:b5:55:9e:8f:cc:07:
                    99:8b:7e:df:2f:a3:7f:e7:97:ce:a1:b0:3b:db:55:
                    0a:13:1d:8e:1e:38:e4:fb:49:13:53:0a:3e:7a:1b:
                    29:9a:37:8a:84:fa:82:47:37:f7:22:6b:a9:81:7a:
                    79:9e:0f:92:f8:78:f0:06:11:9b:da:54:a5:de:5d:
                    da:4a:dd:a8:af:de:2f:61:dd:5a:0b:aa:a4:22:a5:
                    7f:d6:f5:5a:3f:7d:d4:f5:48:f7:10:83:a9:a4:69:
                    0c:37:10:26:ac:1a:67:47:b7:1c:40:54:54:3d:96:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:81:E1:B8:FA:60:81:6D:E9:CC:60:84:CB:62:E3:93:16:15:D8:85
            X509v3 Authority Key Identifier:
                keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:12:cd:d3:21:b1:1e:f4:35:21:cb:01:50:a1:10:a8:76:50:
         7a:49:c3:39:25:8e:69:e9:dc:f8:30:a4:d0:1e:94:f9:c6:42:
         69:01:e8:02:f5:e6:c9:a9:77:f9:e4:b9:e1:7b:54:e0:59:05:
         c7:bb:04:3d:6e:e5:81:fa:72:4e:b8:aa:d1:ed:05:f1:a0:2d:
         a5:cf:62:bb:45:2d:3f:7f:2d:4f:39:1c:5d:a8:bd:4b:00:ce:
         fc:90:4c:aa:7a:94:be:09:85:cf:4f:7b:1b:c8:23:9e:4b:0c:
         e9:d9:65:3c:2e:1c:06:0f:1b:f6:be:13:68:12:1a:da:cd:ef:
         d2:ae:a4:c2:bb:84:a2:c7:2d:fa:47:e1:9d:57:bd:59:f4:6b:
         67:78:41:2a:d9:22:90:d8:63:68:80:5a:ca:ce:46:e6:55:da:
         df:9c:77:18:5c:05:85:a7:9e:8d:a6:ce:9c:b4:d1:99:99:23:
         2f:da:ad:ed:aa:c6:0c:d3:27:94:ad:01:9e:3d:8c:2f:7a:aa:
         e9:5b:ef:2a:e0:84:c2:c1:fb:79:55:ed:12:b9:c9:ed:a7:a5:
         7c:5c:34:55:bd:f0:f4:10:13:d2:84:58:9d:a3:ed:60:6d:ad:
         b2:81:00:75:43:48:b2:de:ec:36:1c:55:1e:08:ac:2a:78:4d:
         24:1f:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:34:11 2024 by rpki-client on console-ams.rpki-client.org