Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/038449-a99b-4e9c-8ed6-46127fd95aaa/1/0kNgnAcZXiAiEHIziNHC5IGAqt0.mft
File:                     0kNgnAcZXiAiEHIziNHC5IGAqt0.mft (raw, json)
Hash identifier:          teSB5HMBQ+cjBdybLjwyBwmnaTyj/SRWu/LgQiqZ5NE=
Subject key identifier:   20:AE:54:3A:C0:FE:21:33:F0:D7:70:ED:46:C7:FA:5C:DE:EE:AC:72
Authority key identifier: D2:43:60:9C:07:19:5E:20:22:10:72:33:88:D1:C2:E4:81:80:AA:DD
Certificate issuer:       /CN=d243609c07195e202210723388d1c2e48180aadd
Certificate serial:       018F5325DB0B6BACBCACA97CC72D9F5302B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0kNgnAcZXiAiEHIziNHC5IGAqt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/038449-a99b-4e9c-8ed6-46127fd95aaa/1/0kNgnAcZXiAiEHIziNHC5IGAqt0.mft
Manifest number:          05FF
Signing time:             Tue 07 May 2024 13:02:20 +0000
Manifest this update:     Tue 07 May 2024 13:02:20 +0000
Manifest next update:     Wed 08 May 2024 13:02:20 +0000
Files and hashes:         1: 0kNgnAcZXiAiEHIziNHC5IGAqt0.crl (hash: ndUwiVkHYZOv/v4DslfqVv7KwipONjyuxCSfZXaHubA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/038449-a99b-4e9c-8ed6-46127fd95aaa/1/0kNgnAcZXiAiEHIziNHC5IGAqt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/038449-a99b-4e9c-8ed6-46127fd95aaa/1/0kNgnAcZXiAiEHIziNHC5IGAqt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0kNgnAcZXiAiEHIziNHC5IGAqt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:25:db:0b:6b:ac:bc:ac:a9:7c:c7:2d:9f:53:02:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d243609c07195e202210723388d1c2e48180aadd
        Validity
            Not Before: May  7 13:02:20 2024 GMT
            Not After : May  8 13:02:20 2024 GMT
        Subject: CN=20ae543ac0fe2133f0d770ed46c7fa5cdeeeac72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:65:86:6a:cf:c7:40:93:b0:af:df:e1:ea:
                    f6:e6:8f:c6:41:64:43:ff:74:b4:39:c1:fd:02:f5:
                    0c:50:c2:34:55:fc:1e:ca:c9:ca:36:f3:38:47:d3:
                    6c:51:8d:49:03:83:15:6e:c8:92:ae:7d:de:59:92:
                    3b:a0:0f:ee:e3:76:e5:e0:88:75:43:19:02:fd:76:
                    9d:8e:e8:ea:93:95:e5:22:b0:91:89:f9:f3:b9:8b:
                    7b:d3:e0:e2:38:d3:92:4d:03:c9:84:ef:67:49:d2:
                    8d:cb:ed:c9:82:ed:0c:b9:e7:60:b4:5b:b0:17:0b:
                    74:55:d4:b2:56:60:55:37:ad:4d:da:53:52:01:a3:
                    8d:b8:f9:6e:22:c4:8d:92:5e:6d:7a:a4:b4:7c:65:
                    0b:85:5f:49:17:07:55:37:60:6e:f4:ac:23:73:0f:
                    56:bb:72:10:00:ca:7f:be:60:8d:c8:ba:f0:2f:27:
                    e1:2d:26:a4:6a:21:0c:0e:e2:f6:5a:48:56:75:c7:
                    c3:44:76:34:eb:b8:8b:7a:f2:b9:55:b1:aa:6a:fc:
                    88:cd:0e:4f:8b:5f:5e:ec:f1:d4:7b:08:8a:d1:bb:
                    d4:ea:82:4f:e5:40:bf:7c:2e:da:54:a4:a2:e8:d8:
                    b3:60:d8:01:c9:5e:bd:9e:72:38:0d:ea:e2:16:70:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AE:54:3A:C0:FE:21:33:F0:D7:70:ED:46:C7:FA:5C:DE:EE:AC:72
            X509v3 Authority Key Identifier:
                keyid:D2:43:60:9C:07:19:5E:20:22:10:72:33:88:D1:C2:E4:81:80:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kNgnAcZXiAiEHIziNHC5IGAqt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/038449-a99b-4e9c-8ed6-46127fd95aaa/1/0kNgnAcZXiAiEHIziNHC5IGAqt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/038449-a99b-4e9c-8ed6-46127fd95aaa/1/0kNgnAcZXiAiEHIziNHC5IGAqt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:15:a5:89:f5:3d:85:2a:51:29:8f:98:a5:53:9d:2d:d3:
         3e:fe:b4:52:af:bf:01:7f:69:e3:b3:23:c6:9c:02:6a:a6:8d:
         ff:84:9d:2a:cb:0c:14:28:23:a1:b0:7d:61:98:d9:8c:50:f8:
         df:16:37:ec:5d:38:77:96:2b:73:4c:59:48:22:d5:a3:1e:49:
         76:e5:02:0a:5b:bd:30:ad:2f:52:79:21:4e:15:cb:b8:6d:b7:
         e7:6f:c9:c2:bf:e3:77:13:de:48:d4:fd:75:b7:67:53:d6:ad:
         2a:e1:83:4f:33:1f:c1:19:83:cb:ef:80:66:6f:cf:84:1a:8c:
         70:87:a0:d6:f1:f1:cf:2c:26:e6:6d:34:41:72:fa:a1:0a:a8:
         df:a5:de:55:60:49:86:8b:c7:e2:87:91:bb:5a:49:0e:a9:24:
         b0:ca:31:2c:a9:af:d5:9a:71:b4:6c:e3:69:1d:a4:5f:53:3e:
         bb:06:bd:3c:2b:50:07:76:9f:02:fe:d0:04:f0:9e:96:04:ed:
         5a:52:34:8c:4b:02:af:d2:b7:e6:2d:53:29:6a:9d:e0:7f:db:
         65:84:50:97:42:bf:6d:7e:b7:6d:03:d5:ff:1a:1c:1c:af:37:
         51:4a:98:2f:cd:e3:24:da:3d:bd:22:88:14:b1:6b:30:6d:04:
         59:b8:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:36:07 2024 by rpki-client on console-ams.rpki-client.org