Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File:                     oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier:          l7MWM6LIQEt1gxpY6kPB0Z75WWAu6fep02Y5Ddd7TEQ=
Subject key identifier:   4C:CB:41:D2:69:CA:B5:2B:3B:27:38:86:47:B1:59:F6:71:B3:B5:03
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer:       /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial:       018FB26A40358909FF00295C9A68997C3A85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number:          018F
Signing time:             Sun 26 May 2024 01:00:58 +0000
Manifest this update:     Sun 26 May 2024 01:00:58 +0000
Manifest next update:     Mon 27 May 2024 01:00:58 +0000
Files and hashes:         1: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: MiHS66lSVVvN799QYd+knoqWitvJZSEvAHOmk/MGNfw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:6a:40:35:89:09:ff:00:29:5c:9a:68:99:7c:3a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
        Validity
            Not Before: May 26 01:00:58 2024 GMT
            Not After : May 27 01:00:58 2024 GMT
        Subject: CN=4ccb41d269cab52b3b27388647b159f671b3b503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:fc:ff:e6:de:ae:75:f6:2f:26:ff:91:7c:
                    50:49:3c:37:da:39:41:93:5c:d1:46:8b:4c:4f:f0:
                    42:07:6d:d7:37:aa:c7:0c:de:e8:4b:24:ee:cf:41:
                    8a:79:98:be:70:6a:2e:dc:7e:94:6c:69:ff:84:72:
                    87:cb:fc:da:6b:1b:09:fd:98:84:54:eb:3e:26:39:
                    19:0b:68:fd:60:64:d7:79:a4:a9:23:3d:fb:59:84:
                    b8:f4:82:54:2e:32:ef:1c:29:75:b8:7d:57:26:88:
                    96:4e:28:a8:26:bd:42:31:b8:ac:14:1f:e3:2e:05:
                    c3:26:d0:98:ef:e5:ad:68:7d:97:36:00:36:13:00:
                    fd:08:8e:3f:3a:74:30:0b:42:fb:ca:aa:0e:15:8a:
                    2a:c6:94:d3:a7:11:6f:f2:ce:df:8e:72:4b:a9:69:
                    38:59:0b:73:ea:4d:bf:ca:53:85:3b:c5:09:de:ad:
                    6f:34:cb:5c:e4:f0:0b:0b:58:a3:f3:ea:c2:47:97:
                    5b:fa:9f:65:3a:6d:8d:c1:8a:95:d0:79:cd:66:ec:
                    63:48:10:b9:4a:db:42:ba:a8:2e:ee:b0:e1:30:a7:
                    13:12:4b:4c:74:19:0f:30:12:ae:31:bb:2c:7a:49:
                    d9:85:e4:9f:5a:6b:6d:10:54:eb:bc:9e:d3:bd:36:
                    96:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CB:41:D2:69:CA:B5:2B:3B:27:38:86:47:B1:59:F6:71:B3:B5:03
            X509v3 Authority Key Identifier:
                keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e8:5a:dc:1f:cf:00:c5:8a:1b:8d:2d:7b:88:02:d5:66:95:
         71:9c:cd:fb:30:b2:3c:97:4e:9e:b9:67:9a:ee:33:dd:bb:bd:
         44:f1:81:4b:73:41:17:ea:8f:44:1e:31:da:7d:b1:cb:91:4b:
         81:49:59:47:1a:72:cb:42:5f:0d:97:15:24:f6:44:a3:7f:3c:
         0a:51:57:e9:a8:0f:b6:d3:db:4c:0b:37:23:98:15:63:13:5d:
         88:62:09:01:14:83:41:5e:77:0c:12:47:07:05:5f:d1:4b:ed:
         5e:c1:02:08:d0:cc:7a:27:cb:ae:7f:e5:c3:60:ab:1c:fd:de:
         63:1a:bd:14:72:38:01:ba:12:8e:23:bc:a3:be:99:b4:6c:7e:
         81:4c:32:51:45:c2:16:91:f8:f2:f2:a7:bf:31:85:c7:25:4f:
         f8:2f:66:e3:2c:03:e9:b9:dd:c3:99:37:08:46:aa:7c:4e:5d:
         14:01:6c:5e:5f:7d:85:67:b0:4b:45:2d:e1:9a:97:9a:79:11:
         44:c9:35:98:3d:1f:24:2d:31:f2:fc:9c:e0:5e:6e:f4:ba:37:
         7d:e0:a2:82:22:00:09:42:23:79:20:57:23:ec:73:f9:d7:27:
         8e:10:26:2b:6c:c6:fd:c7:db:d0:fd:2a:87:cc:0f:ce:bb:00:
         22:43:94:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:14:22 2024 by rpki-client on console-fra.rpki-client.org