Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File:                     _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier:          MZy/G657JDzZHYKfVHZaf+Cw3BsFy92ry7eOUU8Xy2k=
Subject key identifier:   0C:AB:96:87:43:08:24:54:33:A2:23:F6:7D:09:0B:D3:9A:F6:2E:7E
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer:       /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial:       018F95A8AEDE826D23D26D6BE7B86C2AF002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number:          0F21
Signing time:             Mon 20 May 2024 11:00:10 +0000
Manifest this update:     Mon 20 May 2024 11:00:10 +0000
Manifest next update:     Tue 21 May 2024 11:00:10 +0000
Files and hashes:         1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: ot9Hri3jUl4gx1nSNiUWbjM5xOMMkGQm9ou9eiylKtk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:a8:ae:de:82:6d:23:d2:6d:6b:e7:b8:6c:2a:f0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
        Validity
            Not Before: May 20 11:00:10 2024 GMT
            Not After : May 21 11:00:10 2024 GMT
        Subject: CN=0cab96874308245433a223f67d090bd39af62e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:73:f9:15:68:ac:4d:c9:d7:fb:00:af:53:6c:
                    6a:9e:e6:d8:97:4a:45:8f:24:47:d1:2f:91:6c:41:
                    89:be:5e:66:13:d9:4b:ab:f2:14:89:15:ca:de:91:
                    24:88:4d:19:bc:ce:23:49:37:cd:a2:04:45:08:dc:
                    43:df:56:4e:46:e3:71:43:10:df:84:0d:23:6b:a3:
                    91:c7:65:d7:8d:81:2a:e7:c6:41:a1:f2:49:af:aa:
                    6a:2f:8d:02:8a:70:48:c3:7d:c4:84:97:ad:87:dd:
                    47:4e:28:01:8d:8c:6d:52:c7:52:03:4e:65:3d:c7:
                    68:6b:dc:2f:4b:b2:db:0e:94:57:9d:a2:ef:91:e7:
                    97:b7:a9:2b:55:dd:c5:4c:d1:6d:fe:2e:8a:97:26:
                    a8:f5:6f:ea:24:cd:5d:65:62:be:5a:7b:9e:23:a2:
                    fb:a3:48:a5:0c:57:9f:9d:ca:ca:cf:08:5f:81:7b:
                    94:07:b2:4f:21:bf:3e:2b:10:87:7a:8a:b7:1e:64:
                    59:66:c1:66:9e:3e:ce:38:60:0a:dd:50:1c:b7:56:
                    9e:59:09:51:2a:48:e3:9c:14:30:27:ae:45:57:f2:
                    c2:cc:58:6b:78:73:07:ff:67:69:24:18:f6:ce:ef:
                    12:ab:85:8d:b1:f0:2b:77:24:76:f0:7f:c2:81:6b:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AB:96:87:43:08:24:54:33:A2:23:F6:7D:09:0B:D3:9A:F6:2E:7E
            X509v3 Authority Key Identifier:
                keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:27:5a:dd:70:8a:15:21:ef:2d:50:23:ea:50:fc:e4:46:
         59:d6:01:fd:ad:6d:2d:86:0b:de:55:5e:42:65:1b:9a:1f:38:
         dc:9d:e5:ea:a4:16:84:4e:01:33:4c:a3:c5:9a:41:c9:40:89:
         7a:20:b5:6e:9a:2e:c2:0c:3b:00:91:d9:d2:78:f4:29:e8:6d:
         55:a0:0e:6e:f6:68:cf:eb:c0:d5:62:1e:6e:b5:31:e2:2f:f7:
         e4:bf:f2:4c:9d:97:6b:69:6d:bd:87:66:15:20:92:aa:d4:38:
         09:49:29:cf:c6:79:ac:6f:84:89:60:e6:ae:95:c6:71:a7:24:
         1b:67:f0:16:ae:19:21:6e:e6:f8:9d:2e:ba:38:52:69:8b:7b:
         00:2f:66:59:c3:b2:f2:be:f7:a6:cc:4c:3e:96:f2:3e:40:d6:
         65:7e:4b:3c:43:f0:23:9d:61:26:57:ce:86:b5:42:ba:43:b1:
         88:a6:f2:76:a6:4e:a4:1a:23:20:65:eb:2c:0f:10:93:a3:59:
         9a:43:db:96:bb:03:43:c0:04:d6:c7:b7:2d:31:4c:86:2a:b9:
         d3:a5:c6:c1:a0:36:22:4d:f2:a4:11:91:6f:c7:9d:51:af:37:
         c8:b4:dd:07:21:06:f2:59:d4:b3:0b:80:b4:a1:a4:8b:ea:35:
         b6:8d:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:30:25 2024 by rpki-client on console-fra.rpki-client.org