Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
File:                     griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json)
Hash identifier:          RvPq8ZipYFn7pmR+jhCci7hke35OZpYEWlMxr1zX31Q=
Subject key identifier:   8A:CF:8D:44:3D:DC:5E:B2:EC:6E:32:B4:98:32:86:B2:B3:4E:7D:F6
Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Certificate issuer:       /CN=82b888791e47f17bbea1f51b9c976977624f041c
Certificate serial:       018F87B6B82C60A3C2DC010F9D41BD14EFA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
Manifest number:          F5
Signing time:             Fri 17 May 2024 18:00:49 +0000
Manifest this update:     Fri 17 May 2024 18:00:49 +0000
Manifest next update:     Sat 18 May 2024 18:00:49 +0000
Files and hashes:         1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: 3avIWeuGLIoOGGt630xn6RrW9GkgVrGz3UtdmZlgtRk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b8:2c:60:a3:c2:dc:01:0f:9d:41:bd:14:ef:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c
        Validity
            Not Before: May 17 18:00:49 2024 GMT
            Not After : May 18 18:00:49 2024 GMT
        Subject: CN=8acf8d443ddc5eb2ec6e32b4983286b2b34e7df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:89:75:6c:8a:8d:ee:17:f6:11:d7:67:72:
                    85:39:4d:b1:c1:a9:f1:bd:c8:9d:84:a9:dd:94:ad:
                    b2:da:c6:55:cd:e1:7c:4b:2c:98:37:74:e9:e8:15:
                    a2:f6:96:dc:95:a0:52:7c:6f:80:77:38:1b:c3:ba:
                    fb:6b:b2:2b:b2:4e:f4:7a:cd:ce:8f:68:a7:fb:ef:
                    5c:27:08:ea:8f:69:08:e2:5b:62:f0:a7:be:6c:b9:
                    ee:a0:59:70:4c:fa:98:f7:98:47:4f:b6:6f:43:37:
                    4b:49:a3:50:fd:7f:66:fc:5d:32:14:70:84:6d:24:
                    2c:98:2d:b6:3c:31:88:92:10:e0:08:75:de:77:c6:
                    ee:69:8e:b9:b8:e9:2b:fa:a4:5b:db:43:89:ed:2b:
                    4e:0b:a7:c3:f7:26:ab:60:c5:4c:f0:bd:ee:ac:3a:
                    9f:e4:54:89:a6:61:48:1f:1a:3f:8c:3d:b1:4e:a5:
                    ef:6e:45:2e:2a:fd:88:22:89:e5:e4:d6:12:a7:ad:
                    c0:16:26:70:53:a1:a3:19:44:a4:e1:cd:e9:b9:22:
                    82:0a:0b:66:36:03:3f:e4:ce:9e:da:11:20:8e:b8:
                    6f:9a:25:a1:ce:22:f5:97:e0:13:95:5e:4d:1e:ab:
                    4e:f1:26:92:9b:10:c4:73:63:c8:25:34:22:8f:60:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CF:8D:44:3D:DC:5E:B2:EC:6E:32:B4:98:32:86:B2:B3:4E:7D:F6
            X509v3 Authority Key Identifier:
                keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:55:db:eb:44:03:3a:a4:08:10:06:98:09:01:55:d3:94:7f:
         e6:3e:4a:31:39:4a:c9:fc:f5:1c:99:1d:07:c5:a9:a7:ab:12:
         3d:51:c0:9d:59:a7:e2:f4:15:9c:1c:98:16:2d:0a:62:91:ab:
         21:bf:2d:49:a8:c3:c0:2d:21:2a:5e:2b:0d:84:00:41:9d:e0:
         bd:73:d2:61:d3:8f:81:29:ee:94:95:4a:7e:97:20:2d:c6:6d:
         bb:44:c7:2d:4a:21:73:c5:d8:5e:c6:d6:ad:f4:14:b1:d2:bc:
         53:59:5b:73:bb:c3:6d:fb:e0:f3:6d:45:af:b8:a4:81:bc:56:
         47:b7:c5:f6:d0:51:18:19:21:59:72:f4:a8:0f:7a:71:08:ae:
         1a:6e:24:3a:08:8f:10:e4:bd:cf:3c:2d:56:d9:03:89:be:e9:
         f7:24:79:5b:a1:3c:6c:42:29:a9:34:30:ce:4f:d7:f7:f4:e2:
         f8:41:2b:e3:88:6d:d4:97:04:f1:1e:2a:c1:d6:6c:fa:36:15:
         51:dc:3e:c9:ca:07:0d:6a:48:af:6f:48:cd:66:b5:61:c1:24:
         60:6d:28:a8:15:17:56:18:69:f5:be:90:4a:d6:35:76:f9:0b:
         3e:63:a6:f5:c0:0d:b0:db:ed:b3:8a:dc:a9:5d:04:80:68:27:
         e9:e9:4a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:42:52 2024 by rpki-client on console-ams.rpki-client.org