Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File:                     AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier:          Z7Dxc7WXISkYGC/QUKkwUjHBSHYX/NgLrzF1GXrY+nY=
Subject key identifier:   D4:0F:30:C0:9D:60:FB:07:EB:D9:57:F9:F8:28:4F:61:61:49:39:6F
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer:       /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial:       018F3FD6358DEFA139E6BB080FF3258C0965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number:          0844
Signing time:             Fri 03 May 2024 19:02:33 +0000
Manifest this update:     Fri 03 May 2024 19:02:33 +0000
Manifest next update:     Sat 04 May 2024 19:02:33 +0000
Files and hashes:         1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: XwGXqH4dcihTB1Z7SDY8kAnegHTuMcm29g1X/rcpa/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d6:35:8d:ef:a1:39:e6:bb:08:0f:f3:25:8c:09:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
        Validity
            Not Before: May  3 19:02:33 2024 GMT
            Not After : May  4 19:02:33 2024 GMT
        Subject: CN=d40f30c09d60fb07ebd957f9f8284f616149396f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:e1:f6:98:ea:52:79:d3:5f:e1:c1:39:f0:
                    fd:c8:ca:22:5a:eb:e3:b5:57:ab:9e:b2:1a:42:ab:
                    6a:ca:05:80:0d:cd:d2:2b:c1:ef:24:98:ec:fe:ea:
                    f1:2b:76:bc:d3:a1:99:01:db:07:64:84:6a:af:ae:
                    49:ec:a1:33:e7:83:b6:59:7f:0c:4e:d7:52:bc:d7:
                    14:e3:e6:81:f0:63:54:74:fc:19:3b:b6:c3:10:14:
                    87:97:75:d1:5e:ee:ce:0d:df:8b:87:39:a5:87:56:
                    d7:ab:e3:4d:1a:79:83:a0:89:9d:e0:42:03:ac:7b:
                    10:c6:24:53:22:09:ea:c0:b5:8d:0e:13:84:09:3c:
                    db:b2:f5:a2:ac:c6:7a:14:ec:c3:66:61:30:a6:1c:
                    16:b7:81:20:99:bb:d1:e2:c8:35:bc:72:f4:50:68:
                    d8:be:54:18:41:ab:c0:66:c0:84:97:9c:c6:7e:21:
                    ad:37:5e:7f:34:45:85:69:59:c1:4f:ed:aa:7c:0a:
                    fa:0f:34:d9:1a:95:4d:f5:5d:17:2a:61:f1:a1:31:
                    8a:20:00:f9:19:28:59:9d:50:1e:01:d3:c3:d8:d3:
                    6f:1b:59:ed:6b:5a:84:07:1d:69:d6:29:db:72:7e:
                    6b:46:97:af:38:4b:39:04:7f:00:fe:39:5b:92:1c:
                    90:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0F:30:C0:9D:60:FB:07:EB:D9:57:F9:F8:28:4F:61:61:49:39:6F
            X509v3 Authority Key Identifier:
                keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:49:40:d7:9d:84:3d:16:75:8a:18:a8:c2:1e:02:08:db:00:
         6e:c6:3c:ea:94:dc:a0:7c:a8:4f:6b:c3:30:42:68:19:1a:0a:
         09:24:ea:7e:d7:e3:11:1d:98:24:02:ea:84:ec:02:ed:60:87:
         d3:ef:29:6f:42:1b:ce:d1:ae:09:4e:c9:aa:2d:71:3f:fd:8c:
         f8:d5:2c:0f:1d:5b:a0:d5:28:96:40:9e:52:e8:c5:b7:23:23:
         f8:af:d6:f4:c9:d4:5c:79:23:ba:71:5c:26:35:0e:29:3e:c4:
         39:02:aa:77:b9:ac:0a:79:ab:06:f8:01:27:c9:68:40:2f:5a:
         fa:28:66:79:20:8a:1c:6c:81:5f:17:b4:f7:61:7d:14:a3:fc:
         0a:5c:e4:c1:f0:58:01:3c:31:37:e4:0d:08:88:77:01:7f:d3:
         76:35:87:8a:bf:5f:f7:98:49:89:26:19:36:d6:e2:44:7d:28:
         b2:c0:9e:1d:29:bc:c1:a8:3e:62:31:4e:e8:cb:15:12:57:b9:
         3e:70:a6:7a:b1:6a:80:8a:a8:93:74:69:d0:33:ab:a3:bb:30:
         e8:19:8c:24:53:94:5d:f6:e0:22:70:f9:41:a0:e0:e4:74:6b:
         e5:93:4c:e5:ae:95:b2:84:29:a1:cd:f4:38:3d:3f:f7:60:f5:
         88:4d:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:07:36 2024 by rpki-client on console-fra.rpki-client.org