Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
File:                     b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json)
Hash identifier:          hzduMYbPtsmstt/KEZJfldeJmjKfNz3YkQXDOdY1K9A=
Subject key identifier:   A6:55:89:CC:E3:69:FA:78:1D:7C:FE:28:A0:66:B5:C8:EB:16:CC:EA
Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
Certificate issuer:       /CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Certificate serial:       018F889204628B570BBBDED762748D58EB6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
Manifest number:          0E0A
Signing time:             Fri 17 May 2024 22:00:21 +0000
Manifest this update:     Fri 17 May 2024 22:00:21 +0000
Manifest next update:     Sat 18 May 2024 22:00:21 +0000
Files and hashes:         1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: AdZMomWun06L/hy7IEI3tIWV4V/1j4AD1r2qi6ZscGc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:04:62:8b:57:0b:bb:de:d7:62:74:8d:58:eb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d
        Validity
            Not Before: May 17 22:00:21 2024 GMT
            Not After : May 18 22:00:21 2024 GMT
        Subject: CN=a65589cce369fa781d7cfe28a066b5c8eb16ccea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:41:84:88:76:77:a9:bd:fc:7c:6b:c9:28:
                    03:e4:2d:7b:d0:77:b4:3f:dc:33:cc:6d:75:69:a5:
                    f7:21:0d:42:e6:81:b8:71:7d:c1:2a:b6:8d:5b:c1:
                    e7:76:92:fc:2a:13:f0:09:03:00:3f:38:3d:29:15:
                    3e:c2:ee:0d:2c:8a:ee:09:4f:2f:29:a3:dd:71:71:
                    b5:a7:0b:a1:cc:6a:61:8c:51:e6:76:85:c9:5d:ed:
                    22:77:c2:39:75:3a:9e:2b:b9:32:b6:9a:2e:13:d5:
                    75:03:df:79:a6:1a:4b:c3:2c:b9:61:ac:e7:0b:53:
                    32:bc:cb:db:70:1b:7c:58:f4:d5:04:ee:c3:d9:01:
                    ef:31:61:e2:2e:bc:db:3d:4b:30:32:6c:3f:cf:d8:
                    5b:3f:07:ad:28:4d:82:46:db:11:ac:65:fc:2c:d3:
                    52:4b:39:b1:1b:db:f5:5d:3a:71:fb:4b:76:e5:0d:
                    0c:b9:b7:ce:6c:fd:5f:bb:b4:52:30:aa:3a:de:65:
                    29:29:0b:47:44:b9:62:6c:ff:a2:17:b6:28:dc:9b:
                    f3:fa:b3:c6:17:a1:b9:0b:ae:11:7d:bf:54:76:e1:
                    7c:b1:6c:0c:1e:1c:f3:ed:e9:5e:d9:6e:0e:44:c9:
                    f2:3c:da:1f:7c:57:21:b2:88:cd:8e:35:8f:de:f1:
                    c8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:55:89:CC:E3:69:FA:78:1D:7C:FE:28:A0:66:B5:C8:EB:16:CC:EA
            X509v3 Authority Key Identifier:
                keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:22:68:91:57:5a:0e:09:ec:0f:6f:7e:fd:79:87:db:8b:fb:
         51:97:bd:f5:77:15:75:22:1e:c6:0a:bc:f9:e6:e9:cc:82:45:
         26:6b:91:d3:2f:55:80:21:f4:a8:0a:2d:04:2c:12:a3:07:1e:
         88:84:a5:e0:cc:30:dd:10:af:34:bf:b1:7f:7e:ca:40:16:33:
         61:62:6c:7f:19:2e:ea:86:56:36:85:0e:0d:cc:16:d6:fb:68:
         cd:d7:de:b9:d0:c7:8a:97:59:2f:ed:ce:ca:8c:91:83:64:ce:
         d7:f6:c9:0e:86:ed:13:f5:8c:c7:32:df:a4:58:1b:27:15:2e:
         32:11:ae:f6:55:70:2c:72:a4:48:db:9a:b9:5a:ae:1a:35:bc:
         2f:eb:52:78:9f:b5:6f:ee:cb:ee:89:d6:68:2d:23:ac:1a:eb:
         20:be:99:b3:cc:55:de:9e:05:30:28:19:4d:a7:78:3f:6f:05:
         5a:28:9e:f2:f0:23:64:37:5e:fd:a1:98:85:2d:f6:3a:99:59:
         4f:45:19:c4:86:73:2c:e9:8c:d4:75:ba:90:ac:cb:40:c3:df:
         fb:cf:b9:f7:f4:50:49:f2:96:c1:68:a4:97:1c:c1:f4:74:9e:
         74:0f:29:13:ea:dc:9b:0a:7d:5e:43:d8:07:30:a1:5b:c6:96:
         ea:60:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:50:25 2024 by rpki-client on console-fra.rpki-client.org