Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File:                     564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier:          WdRp0TfDDFKIfWW7Gq2TfCw1Cja1O/eVh9E9RVwP3VU=
Subject key identifier:   1A:04:2D:82:6B:E6:38:1C:9B:7F:13:98:C5:C5:EE:85:57:B5:21:2F
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer:       /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial:       018F362F0A4CA342A0C8536DAC60B1B4A3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number:          114B
Signing time:             Wed 01 May 2024 22:03:23 +0000
Manifest this update:     Wed 01 May 2024 22:03:23 +0000
Manifest next update:     Thu 02 May 2024 22:03:23 +0000
Files and hashes:         1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: DNgTbr+eWMGmp8+/0t3VZJbU0k+ho47ur6CEynn0KIw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2f:0a:4c:a3:42:a0:c8:53:6d:ac:60:b1:b4:a3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
        Validity
            Not Before: May  1 22:03:23 2024 GMT
            Not After : May  2 22:03:23 2024 GMT
        Subject: CN=1a042d826be6381c9b7f1398c5c5ee8557b5212f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:b6:01:09:8d:ac:84:34:92:ec:6e:98:1c:
                    09:23:0d:6c:5c:89:3c:ab:fd:ee:36:15:dc:88:93:
                    58:29:03:72:8e:83:ef:bc:a9:d4:c3:3c:70:20:b6:
                    bd:34:35:17:83:41:a2:99:c5:c8:55:17:50:ec:81:
                    42:ca:25:96:5b:9f:65:13:60:31:9c:ef:d7:54:23:
                    ab:72:dd:85:59:6c:f2:cb:fa:4d:68:ae:75:f5:19:
                    74:9d:fc:94:f8:ba:6c:46:cc:a6:5d:ed:7a:f4:2c:
                    ed:9d:be:7e:a9:3b:1c:34:d8:f8:8c:c3:0f:61:06:
                    cb:21:c6:e5:13:ac:69:f0:2a:aa:76:1e:01:4c:5f:
                    25:f8:b5:03:4b:df:44:da:18:95:ac:64:24:a1:b7:
                    34:a9:ee:65:c5:96:ed:1b:4a:cb:24:b3:f1:4b:7e:
                    58:ed:55:be:be:8e:13:b3:cb:83:80:35:bb:d2:41:
                    5c:7f:f4:c4:0f:67:bc:89:33:d8:c5:9d:2e:73:93:
                    d7:ff:11:74:f1:1a:d6:ab:c7:bd:c5:32:4c:05:10:
                    f8:9a:f7:74:41:c5:1c:1c:c8:e4:62:0b:c7:a9:1e:
                    80:11:72:eb:5d:01:53:b1:93:a2:ea:66:74:29:fb:
                    94:da:74:4e:c4:ca:a5:6e:30:3d:d4:ad:3b:80:45:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:04:2D:82:6B:E6:38:1C:9B:7F:13:98:C5:C5:EE:85:57:B5:21:2F
            X509v3 Authority Key Identifier:
                keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:58:68:00:7e:f7:6a:f0:96:98:b1:06:dd:03:17:b4:7f:21:
         45:20:0d:43:23:61:c2:4c:19:0c:a3:e4:f2:d9:3d:d9:cc:df:
         22:77:d5:6d:ec:97:f1:b2:48:fc:c4:7f:f7:aa:56:4e:89:7a:
         39:81:ef:54:a8:21:f6:10:2c:80:08:e4:09:ed:e6:ca:b1:79:
         37:68:50:02:19:c7:57:15:46:77:05:5f:43:42:47:62:3f:9b:
         75:50:fe:12:fc:f2:33:73:31:ef:d5:91:cf:28:e6:51:07:40:
         65:a7:d4:83:84:e2:e2:fe:97:b3:52:cb:c1:40:22:45:01:91:
         ef:95:47:b1:b1:39:19:fa:cc:24:3b:24:9a:97:cb:6a:1f:6a:
         31:55:79:01:ad:6d:26:4d:b2:5d:b1:c0:11:82:50:f2:c5:51:
         8c:b4:12:32:41:55:45:b4:21:06:30:fe:93:f2:6f:60:9f:0c:
         4a:e3:c2:bb:6d:ed:40:81:8f:32:72:af:40:60:d4:26:64:d0:
         46:16:a7:57:23:a0:77:ba:7c:21:98:14:1d:a5:dd:e8:6a:00:
         6b:07:a4:3d:c8:30:e8:51:9c:e1:fc:14:4f:3b:7a:70:e1:b7:
         06:f0:9b:07:fd:bf:30:54:db:7c:91:76:53:25:c2:93:25:ce:
         c0:f7:36:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:07:38 2024 by rpki-client on console-ams.rpki-client.org