Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File:                     7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier:          qbKUotbukYpZHMozD/z0ex61QBx2bL3eOOHdWTOGbEw=
Subject key identifier:   C0:3F:14:5F:45:6E:80:16:71:F5:3B:DD:EF:7E:99:C2:D2:27:DB:26
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer:       /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial:       018F45A25D7FDFF85315CF3E0CD58E1A9DBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number:          0562
Signing time:             Sat 04 May 2024 22:03:39 +0000
Manifest this update:     Sat 04 May 2024 22:03:39 +0000
Manifest next update:     Sun 05 May 2024 22:03:39 +0000
Files and hashes:         1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: j/whk+UW4Uoe66tdCUvDjXNyrngABlVA5/3YRXdB4L4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:5d:7f:df:f8:53:15:cf:3e:0c:d5:8e:1a:9d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
        Validity
            Not Before: May  4 22:03:39 2024 GMT
            Not After : May  5 22:03:39 2024 GMT
        Subject: CN=c03f145f456e801671f53bddef7e99c2d227db26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:78:3b:75:8a:25:7c:89:15:d6:0a:5d:f1:
                    97:5e:62:30:89:be:4f:37:46:a6:98:b5:7b:b4:99:
                    fd:70:6a:99:99:29:a4:3b:aa:f3:5c:31:4e:7d:7b:
                    84:36:6d:ba:87:ad:bc:32:80:cd:df:31:2a:b3:2b:
                    61:ea:af:f4:96:65:ca:8c:a0:1e:79:0a:16:2e:b9:
                    a4:30:f8:6f:10:a6:90:d8:f8:5b:89:61:c6:dd:d7:
                    c2:d7:5d:f0:f8:52:a5:94:d3:83:66:69:14:f4:0f:
                    9e:8f:0a:54:76:9c:9f:00:6a:29:aa:df:90:54:55:
                    7d:f4:e4:63:e8:c2:01:78:ba:e5:ab:c3:ca:b7:84:
                    64:b2:13:25:cd:54:20:67:07:c2:49:d6:09:3b:36:
                    d8:cd:ef:12:39:85:24:b0:3c:2b:8f:e4:7e:56:d9:
                    3d:81:03:da:29:af:32:1f:20:0a:53:e5:51:3f:9f:
                    2b:a6:83:98:4b:9e:91:bd:0c:ea:06:52:08:bf:46:
                    04:74:31:64:ab:a1:1c:ea:ac:3e:c5:35:ce:26:40:
                    91:73:1e:bd:e1:00:5a:f8:e3:7b:b8:0a:44:b1:6a:
                    61:7d:bc:74:93:fc:c2:13:c0:eb:be:48:92:a7:ce:
                    ad:3c:cf:d3:b5:a4:f7:7a:d8:fa:1f:b4:8b:ae:b3:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3F:14:5F:45:6E:80:16:71:F5:3B:DD:EF:7E:99:C2:D2:27:DB:26
            X509v3 Authority Key Identifier:
                keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8b:e8:71:9e:3d:e9:4f:75:65:f7:01:e3:35:a3:b1:ba:1c:
         15:0b:f5:59:6a:4d:94:00:40:69:90:00:6f:17:c3:e6:d7:e5:
         cf:0f:17:73:6e:7b:11:76:82:e4:51:63:14:0c:14:54:98:21:
         af:31:07:48:d8:f8:ce:8e:1a:bf:fe:b5:bb:9a:f8:2f:f7:42:
         60:78:f5:89:a3:4a:f1:8b:db:17:05:1d:77:02:c8:ff:7e:30:
         4b:3a:9a:6d:a2:c7:4d:10:a7:d5:80:dd:a4:bf:c4:e0:bc:cd:
         c4:01:7e:2c:2b:df:71:79:bb:ad:34:6d:68:13:9e:b2:43:e2:
         4b:ac:1c:f9:8d:10:78:c5:db:50:e9:87:ec:76:a0:0f:ab:d8:
         80:03:24:13:34:04:3a:3e:d2:1c:7b:a4:97:ff:28:02:ac:9a:
         80:c3:c9:26:22:39:cc:a2:dc:1c:9a:25:c1:c1:06:b4:1e:83:
         bb:8f:ab:2d:74:de:72:90:4f:12:41:8a:2a:95:9f:6d:8b:3c:
         e1:33:30:40:3d:39:10:bd:8c:4f:22:dc:ee:77:72:60:e8:f3:
         71:55:a5:b5:30:a4:d4:49:d9:20:a7:6c:18:40:d3:ec:4c:3c:
         57:7c:a0:06:f4:49:fd:80:0a:a7:e4:e3:a5:2b:f1:3b:0f:76:
         57:1e:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:17:33 2024 by rpki-client on console-fra.rpki-client.org