Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File:                     VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier:          AXt9VgE4nP5YFf3zwsmNDk4yRZrAWoiJv12LLpFYN50=
Subject key identifier:   03:8C:9F:CA:7F:A1:42:68:91:86:66:96:94:DF:EF:98:3C:32:3A:A5
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer:       /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial:       018F87ED081B7EE56E3BEEB23B505E3B88B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number:          0FF7
Signing time:             Fri 17 May 2024 19:00:09 +0000
Manifest this update:     Fri 17 May 2024 19:00:09 +0000
Manifest next update:     Sat 18 May 2024 19:00:09 +0000
Files and hashes:         1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: G02LMdLC1hF62C2W6mRPPlmZbEf1AiB7e4NsPPluv1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:08:1b:7e:e5:6e:3b:ee:b2:3b:50:5e:3b:88:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
        Validity
            Not Before: May 17 19:00:09 2024 GMT
            Not After : May 18 19:00:09 2024 GMT
        Subject: CN=038c9fca7fa142689186669694dfef983c323aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:39:c4:be:23:15:a6:8d:38:76:ff:9a:8f:
                    7c:16:21:75:c6:20:0c:46:8d:7e:f8:70:98:4c:27:
                    37:7a:f5:a9:2a:41:75:15:a5:96:1f:0e:0e:44:e3:
                    3a:80:2b:40:2a:68:61:c7:00:98:3c:48:aa:ac:9f:
                    8c:98:52:cd:65:bc:d0:c4:cd:1b:06:a7:18:86:f5:
                    20:b6:8d:cd:9d:9c:6d:47:f7:b7:f0:fd:8a:9d:24:
                    0b:f2:73:da:48:76:54:5b:6c:e3:04:a8:3a:26:0c:
                    14:a6:28:86:5a:32:09:32:af:de:d1:53:80:82:42:
                    d4:02:a0:ce:8e:4e:71:b2:d6:0e:45:29:bc:28:78:
                    b6:8b:7a:49:53:07:90:8d:3e:b4:5f:dd:ca:24:5c:
                    a0:aa:5b:98:28:97:e0:b9:fd:f0:23:1a:ea:a7:59:
                    89:3b:8f:ec:bf:29:99:b1:b9:cd:23:2c:6d:67:47:
                    1a:8e:da:a5:69:e4:c9:e4:dd:e4:d4:ca:92:85:9d:
                    5d:85:22:f7:3c:46:7d:b8:1e:8c:16:a3:14:bc:41:
                    24:18:a3:cd:5d:f5:bf:5d:43:be:79:5e:e4:90:83:
                    d9:bb:31:6a:84:cf:3d:db:9c:64:7d:31:86:82:34:
                    21:31:dc:48:03:9e:b7:aa:7e:79:dc:c5:01:c2:b2:
                    71:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8C:9F:CA:7F:A1:42:68:91:86:66:96:94:DF:EF:98:3C:32:3A:A5
            X509v3 Authority Key Identifier:
                keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1e:da:cb:6f:27:b0:04:d4:19:dc:eb:73:c8:c5:68:eb:4c:
         76:2c:30:00:b6:74:2e:d1:1c:b8:37:79:86:18:3b:c4:60:ac:
         ff:ca:a7:af:71:44:f2:5f:e3:da:91:be:01:19:12:81:a8:3a:
         d1:90:0b:e2:b0:cf:9e:83:7d:b0:52:c7:2b:75:8d:31:91:62:
         5b:be:50:6a:d4:ae:8c:a7:9a:b5:08:e4:c8:25:55:03:4b:d5:
         ae:74:21:6b:c4:e9:7f:6b:e8:73:ab:1f:90:2a:78:48:c4:ee:
         db:35:89:b5:ee:5d:1a:56:cf:2f:02:18:09:73:db:47:e2:42:
         fb:24:36:b7:00:e5:db:00:76:fe:c2:01:78:6f:67:89:42:13:
         35:87:db:5a:ce:0d:17:4c:68:0b:85:f5:52:4d:0c:34:f6:22:
         16:b9:3c:bc:6a:8b:e4:c4:61:f8:fe:c4:f7:52:d8:37:b6:f1:
         7f:c5:4c:a0:2b:f0:f0:67:2c:c3:07:db:e7:84:ef:86:ed:aa:
         85:72:8c:d9:c7:bc:b2:21:ab:dc:be:69:09:dd:46:91:b0:28:
         65:5a:8b:6e:e5:c0:26:89:75:15:5f:2d:ab:18:8d:ad:49:fb:
         ce:cc:de:77:df:3f:f7:8e:32:a8:61:12:fe:50:b0:ec:2b:2f:
         5e:f6:0b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:25 2024 by rpki-client on console-fra.rpki-client.org