Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File:                     Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier:          vo9pNe91r5XNQEnZ0PH4FQsNP2/StOsJuo34OA1jjwo=
Subject key identifier:   AC:A0:3F:2D:F5:08:8F:1F:D7:47:4C:E1:EB:B0:7E:25:43:15:C8:55
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer:       /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial:       018F53929002E375461D23FC06CD3F9C0719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number:          0737
Signing time:             Tue 07 May 2024 15:01:04 +0000
Manifest this update:     Tue 07 May 2024 15:01:04 +0000
Manifest next update:     Wed 08 May 2024 15:01:04 +0000
Files and hashes:         1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: ptwlP/UG5sHePXt+rsNXjShWsg+7PjMcHJ9+nbtU15c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:92:90:02:e3:75:46:1d:23:fc:06:cd:3f:9c:07:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
        Validity
            Not Before: May  7 15:01:04 2024 GMT
            Not After : May  8 15:01:04 2024 GMT
        Subject: CN=aca03f2df5088f1fd7474ce1ebb07e254315c855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:fb:1d:59:1a:37:e6:67:f6:73:85:7b:e1:
                    2d:d4:02:59:bc:36:58:3c:2d:aa:38:d6:1b:7c:95:
                    eb:93:81:6a:42:1d:41:98:e4:5c:aa:0a:32:a7:d0:
                    d1:b0:76:d0:1f:35:63:50:06:3a:9d:47:18:1d:3a:
                    d6:23:8a:cb:b5:e7:05:8b:04:0f:d0:ec:34:86:3a:
                    b4:80:95:24:b1:e5:bd:3d:0d:4f:15:a4:fb:64:06:
                    0d:db:85:6b:d7:c9:11:ae:55:9b:8f:12:c0:c2:f1:
                    03:b4:41:13:96:8b:89:7b:43:bf:e4:3b:c5:1a:9e:
                    d2:61:6a:bf:46:a9:e1:96:1d:3d:ca:66:44:68:ab:
                    e1:09:e1:db:a9:54:ff:b9:a9:7f:80:eb:84:5c:18:
                    26:ac:b0:9a:08:c8:41:13:ab:e8:c0:99:94:8e:d8:
                    c5:bb:24:d5:b3:8d:b8:54:dc:d2:1d:4d:2f:97:9b:
                    31:88:cb:cc:6a:64:7b:f8:66:20:e1:26:08:04:fd:
                    7b:5f:de:16:19:14:a6:5a:5c:57:46:ba:4a:5c:9b:
                    97:f2:da:ac:90:7f:f9:8f:8d:83:5b:9c:97:ae:8f:
                    ba:b4:87:1a:eb:70:fe:da:5b:ee:40:1a:1e:ee:93:
                    a7:fd:53:50:58:cc:84:5d:a4:65:34:e6:c2:05:46:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A0:3F:2D:F5:08:8F:1F:D7:47:4C:E1:EB:B0:7E:25:43:15:C8:55
            X509v3 Authority Key Identifier:
                keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ac:a1:91:3e:35:76:89:ff:97:13:a7:4a:74:a8:01:94:d2:
         1c:3c:39:ab:7d:27:79:a4:a9:ac:6e:ec:ef:d5:cb:23:56:47:
         32:36:72:f8:4b:f6:f7:6d:1e:3b:df:1e:8a:bd:fe:82:f5:82:
         cc:41:01:e1:a1:bb:e8:7c:c8:00:6d:ec:80:af:53:44:24:66:
         d6:8e:35:81:38:bd:a4:ab:0a:d7:7c:3e:a9:18:c1:42:a8:15:
         7c:cd:45:4f:cb:29:4b:01:3f:c9:a9:84:de:c1:f9:36:f6:4b:
         22:57:a9:35:91:a6:dc:6d:03:9b:59:cc:49:f1:ff:5b:3b:46:
         a1:20:4b:7c:17:23:e1:8d:d8:98:eb:2c:95:e7:65:6f:cc:08:
         b4:58:0b:33:5a:06:97:d3:0e:a6:83:a0:c4:60:a3:a4:14:bd:
         1e:b6:19:ad:c9:76:31:4e:43:de:f5:98:f2:5a:a0:f8:c1:9d:
         2b:15:94:ac:51:ca:bb:61:a3:ca:87:ac:b9:fc:74:d8:14:ec:
         ef:fd:05:cf:2a:f0:6a:8b:4d:a3:d4:51:40:c7:25:27:fd:f5:
         2b:fb:ed:31:bb:b9:94:11:78:44:4d:d4:eb:c2:cf:70:d9:54:
         e8:a8:f6:6a:6e:a8:a2:c2:37:38:91:7b:77:55:0f:8a:2e:0b:
         42:7f:93:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:33:01 2024 by rpki-client on console-ams.rpki-client.org