Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File:                     8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier:          q4Yn3aMZjk4PnWEl8vGzBNXg9aU/wTyY39X8kCIo0ik=
Subject key identifier:   39:7C:EC:4E:BD:DB:12:55:1A:1C:10:9B:46:82:5F:31:6E:0C:CE:07
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer:       /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial:       018F4AC65715D35D5AE058850AF4DE98DB2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number:          0BDA
Signing time:             Sun 05 May 2024 22:01:03 +0000
Manifest this update:     Sun 05 May 2024 22:01:03 +0000
Manifest next update:     Mon 06 May 2024 22:01:03 +0000
Files and hashes:         1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: qrEfPP27Kqzgg6CtkMyhka6Ifojbj1gPQ6OweBygZUs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c6:57:15:d3:5d:5a:e0:58:85:0a:f4:de:98:db:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
        Validity
            Not Before: May  5 22:01:03 2024 GMT
            Not After : May  6 22:01:03 2024 GMT
        Subject: CN=397cec4ebddb12551a1c109b46825f316e0cce07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:68:50:00:55:a2:73:13:59:73:1a:cb:c9:
                    d3:69:b2:ba:1d:a7:ab:07:9a:37:a1:ad:80:53:4a:
                    03:95:fe:46:2d:76:34:92:e4:b1:a2:2b:89:2f:64:
                    48:8e:9a:cd:b0:e6:dc:ab:2e:d6:c4:df:b4:85:81:
                    95:35:91:01:6f:e1:0f:92:db:b5:22:12:6c:c5:f2:
                    ca:64:e3:75:c9:53:62:b1:23:f6:07:db:b4:41:1e:
                    0d:57:60:e7:da:50:9b:6e:02:38:76:8a:21:d9:60:
                    37:ab:22:28:9c:19:0b:23:50:5b:3b:b9:ac:31:c7:
                    6a:a6:ec:61:d6:fd:f3:cc:27:65:fb:1b:33:10:2e:
                    eb:2c:58:de:84:f1:3e:9d:f0:60:e6:df:79:a1:68:
                    f9:74:8e:a3:96:68:33:a7:49:e3:45:23:b2:25:a4:
                    0e:e9:1e:7f:3a:67:61:2c:aa:9c:8b:2c:ae:bb:42:
                    13:7c:6e:70:f2:18:10:98:0d:e5:de:4b:0f:32:82:
                    a0:80:9a:cb:04:bf:93:3d:c9:ee:4f:55:27:c7:87:
                    1d:66:8a:70:7f:96:58:1e:46:1c:f1:2d:97:d8:9a:
                    05:e6:a0:b6:88:97:2f:d7:5c:89:2c:04:6d:54:f0:
                    d8:35:a5:ce:eb:85:60:dd:53:cb:4d:92:9c:8f:e3:
                    6c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:EC:4E:BD:DB:12:55:1A:1C:10:9B:46:82:5F:31:6E:0C:CE:07
            X509v3 Authority Key Identifier:
                keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:18:c5:47:15:ea:72:de:bf:6b:11:d3:29:e1:99:53:42:d0:
         03:ad:46:6c:d8:dc:58:9c:86:b3:c4:6c:d6:34:6c:f4:b4:b6:
         50:92:5d:64:c8:f7:66:48:1c:a3:28:9c:0f:74:12:70:5f:f0:
         a6:d7:99:83:6d:95:54:75:69:34:29:74:c9:ef:c1:38:d6:57:
         07:2c:c0:5b:83:02:ba:a4:e6:b1:9f:4e:95:88:31:43:32:60:
         aa:c7:05:02:db:f3:c5:12:da:49:00:e5:88:a5:a5:82:12:3e:
         93:54:a7:2f:3f:be:c8:ab:fc:3a:0c:08:84:69:68:0d:a8:f3:
         14:d8:d7:ad:55:13:f2:a2:85:78:4c:c3:f9:09:db:b3:91:e9:
         f5:48:48:14:17:60:f9:84:df:63:21:c7:78:b6:8b:33:54:d9:
         a4:ce:a5:8c:30:61:b4:16:b6:c1:a1:d5:dd:57:9e:40:f4:c4:
         68:00:75:31:06:79:25:5b:94:9d:0e:18:9e:f4:ff:e1:f4:e8:
         8a:27:be:d6:71:02:59:50:cb:b9:ff:1d:b0:99:59:7d:85:7e:
         0d:99:ad:33:b8:0b:03:04:30:04:73:31:78:24:d2:a0:c9:f4:
         7e:1b:b9:18:2f:e6:d9:1c:f1:60:3a:62:d9:31:d8:57:65:c3:
         28:c1:08:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:51:05 2024 by rpki-client on console-fra.rpki-client.org