Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File:                     DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier:          iUFUJ74ORwJy3Nm0882zhWVAGHuwNSXu9K+NhknKxq0=
Subject key identifier:   8E:51:6A:9C:1B:D7:F4:23:74:D0:57:D6:3C:9B:F9:05:E9:9F:BD:A0
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer:       /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial:       018F38891BF20A509E7D3F0F579C5EB88D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number:          0DFD
Signing time:             Thu 02 May 2024 09:01:00 +0000
Manifest this update:     Thu 02 May 2024 09:01:00 +0000
Manifest next update:     Fri 03 May 2024 09:01:00 +0000
Files and hashes:         1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: OYp/wAqp6PtPNItc7b6ddb3SGIXeCsrQlsxvm8KfuX4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:89:1b:f2:0a:50:9e:7d:3f:0f:57:9c:5e:b8:8d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
        Validity
            Not Before: May  2 09:01:00 2024 GMT
            Not After : May  3 09:01:00 2024 GMT
        Subject: CN=8e516a9c1bd7f42374d057d63c9bf905e99fbda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:fc:1c:2e:97:58:16:96:20:76:06:4f:c1:32:
                    70:27:be:40:ca:5f:d4:61:b0:76:d8:2d:8d:a7:2c:
                    a6:fe:89:76:dc:3d:75:a7:95:20:77:4f:68:75:7f:
                    b5:53:b9:69:20:b8:9e:2f:d7:37:cc:95:90:c8:8e:
                    2d:b1:18:c5:7e:c6:27:fe:0d:60:0c:aa:f8:ed:1a:
                    1d:e1:7d:25:5f:63:7d:cf:26:96:0a:3a:ca:6d:e1:
                    ad:2e:ec:fc:52:36:38:cc:20:9a:7c:af:4f:dd:59:
                    d1:5c:c0:89:11:e9:ec:26:19:f6:4e:e3:70:c4:b8:
                    6f:2b:2b:10:92:22:a7:3a:98:be:51:6c:a0:d6:a1:
                    c2:93:f8:27:4e:23:ad:f3:1f:45:24:fa:34:75:c3:
                    f4:00:51:09:95:70:28:7d:8f:cd:16:b9:b7:8c:d3:
                    99:6f:a3:88:f4:15:aa:41:16:38:dc:ed:79:49:ad:
                    da:61:c0:8f:50:54:66:92:b4:ec:48:9e:7d:68:a0:
                    75:d3:c6:6f:01:22:45:c2:3e:42:94:89:03:13:2d:
                    a9:c0:41:87:91:d4:e0:83:43:36:44:8e:80:c0:20:
                    39:41:ce:d9:a1:fc:04:60:02:89:ea:e1:0c:8e:88:
                    0f:46:9e:52:cf:84:16:0e:8c:13:07:93:75:07:6e:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:51:6A:9C:1B:D7:F4:23:74:D0:57:D6:3C:9B:F9:05:E9:9F:BD:A0
            X509v3 Authority Key Identifier:
                keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:28:04:c0:21:20:11:74:bc:3a:a4:63:f0:97:9e:ea:6b:7d:
         fa:b6:0f:18:28:a0:9b:ba:3f:31:6d:fc:90:be:96:f5:bc:85:
         1b:22:ca:a8:fe:ef:41:9a:bc:81:91:7f:97:09:de:19:34:d9:
         30:2c:8a:73:2b:c2:3b:db:49:24:7c:62:7b:92:40:19:12:56:
         58:3f:36:0c:21:4f:df:7b:a5:49:3c:47:3a:f8:e0:ae:04:4b:
         85:c7:63:3d:bf:e3:92:77:ab:10:ec:ab:d6:59:15:ed:2b:dc:
         b9:73:35:3e:99:01:28:d0:79:d0:4d:e6:8c:77:45:fa:cb:75:
         8f:e6:b5:d6:b2:a0:8f:06:6b:39:b1:05:22:14:8e:4f:06:40:
         46:1f:27:f1:3e:7e:2d:77:15:ea:3d:38:96:ad:18:5c:86:7b:
         cb:99:11:32:02:1f:39:87:92:7d:75:a0:84:00:02:7d:8c:f2:
         13:6b:1e:43:6b:9b:fe:c0:73:d9:79:61:4c:82:e8:41:5b:81:
         29:af:c3:dd:da:db:5c:06:5a:a6:f1:78:1d:aa:c3:c8:4d:50:
         b1:43:07:06:79:cf:da:47:3d:c8:45:ea:1e:f9:29:d5:00:f1:
         cc:b1:88:f9:fa:01:11:49:74:03:4f:37:62:2f:a7:35:dc:9b:
         7a:90:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:13:48 2024 by rpki-client on console-fra.rpki-client.org