Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
File:                     EDfew086MutlAvFmKoKiD4teohw.mft (raw, json)
Hash identifier:          t5u1vs9XB3jWF+ZMCykkiMtMQYtbTk+V/+DInHLjEVo=
Subject key identifier:   36:D7:A7:54:98:24:0A:4B:FC:9C:D4:32:1A:BC:79:D8:86:48:E8:77
Authority key identifier: 10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C
Certificate issuer:       /CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
Certificate serial:       018F441F81EF36060E142111CE38B1365F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 15:01:06 +0000
Manifest this update:     Sat 04 May 2024 15:01:06 +0000
Manifest next update:     Sun 05 May 2024 15:01:06 +0000
Files and hashes:         1: EDfew086MutlAvFmKoKiD4teohw.crl (hash: 0SDEvvciMlsQTPaGOb8ap52tSK9C+Vf60munDS+/W9Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:81:ef:36:06:0e:14:21:11:ce:38:b1:36:5f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
        Validity
            Not Before: May  4 15:01:06 2024 GMT
            Not After : May  5 15:01:06 2024 GMT
        Subject: CN=36d7a75498240a4bfc9cd4321abc79d88648e877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:0d:3c:f0:5a:97:eb:37:2e:71:99:61:19:
                    73:ad:cf:95:b0:35:64:b7:03:88:99:f3:e6:f0:d1:
                    68:b3:4b:14:51:1f:3d:bf:db:07:8d:f9:3e:62:7f:
                    03:ec:bb:d4:3a:72:92:61:c0:8a:a2:a6:09:c1:c5:
                    c2:07:a4:ca:b4:17:1d:a7:af:f0:6e:b4:75:d5:c8:
                    6e:d8:bd:12:4d:cb:c0:f5:e6:bc:e0:78:0d:99:e5:
                    03:0a:3c:14:86:c3:02:2c:01:7c:e8:cd:e2:b5:1d:
                    8c:0d:11:41:f3:4b:9c:06:8f:f3:22:30:75:c3:4d:
                    73:7c:f6:b3:96:dd:f2:f7:6d:46:6f:3c:8a:2e:73:
                    7c:95:d1:f0:74:bb:da:42:cd:5f:e7:3a:2e:07:68:
                    e1:4c:15:a9:69:ca:f1:17:18:10:4f:ab:08:04:6a:
                    cf:f9:cf:33:aa:7f:ce:90:c3:5e:15:56:d0:0d:79:
                    b4:39:42:cc:cd:f4:44:fb:85:c9:16:92:ec:c6:b5:
                    19:f8:a3:c6:e0:ca:5e:12:6b:68:a1:f9:ac:1b:83:
                    14:fc:d3:86:49:d0:0f:5b:ab:36:d3:93:8c:4b:f6:
                    97:c6:1b:4d:08:5e:ca:b4:54:e9:ce:3e:79:a2:7c:
                    f5:29:27:15:c8:3b:93:dc:82:92:d7:40:78:e4:2c:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D7:A7:54:98:24:0A:4B:FC:9C:D4:32:1A:BC:79:D8:86:48:E8:77
            X509v3 Authority Key Identifier:
                keyid:10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:61:d8:72:e5:56:49:06:42:d8:be:9f:79:c2:c4:b4:77:b9:
         b8:35:f9:a2:d2:ac:a3:a6:23:3d:b4:d0:b4:64:6b:2a:94:3f:
         7a:4a:9b:3e:55:b6:91:a1:d3:2e:e4:0f:7b:cf:6b:48:e1:b3:
         ba:33:5e:93:12:51:7e:42:04:3f:6d:bc:87:66:b5:c2:ea:8b:
         72:77:d7:3c:92:f8:1b:ce:68:86:23:b8:39:32:3d:a6:c4:8f:
         ae:21:87:00:86:ee:67:13:56:cc:b6:d4:21:4b:38:41:cd:c9:
         16:9d:ac:ef:22:9f:9c:48:70:9c:88:b3:71:12:3e:58:d6:82:
         fe:93:a5:c3:68:5f:31:41:78:a3:84:a2:04:2b:c2:31:90:4e:
         9d:8d:0e:67:f1:9b:b1:71:b4:62:ba:fa:18:80:54:63:c2:83:
         a9:1d:20:65:ff:9e:4c:99:fc:f8:59:41:95:71:94:fe:cd:f9:
         c9:32:6c:a5:77:0f:8f:4d:29:c8:42:6d:83:61:61:a1:64:d8:
         5e:7a:c1:47:0f:de:5a:9d:12:f3:b5:8f:f3:f1:78:5a:dc:a9:
         1a:1c:fc:b7:9b:5a:2c:b9:cc:26:f7:0c:d4:48:bb:16:db:02:
         1f:cb:b9:1b:a8:ea:ba:e8:5f:49:72:a7:d5:fc:a6:85:de:41:
         2c:69:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:17:23 2024 by rpki-client on console-ams.rpki-client.org