Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File:                     0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier:          8CNd9OCRLinQxUPwqPxzL2z5/uZe7eETCM8KGeTHrn4=
Subject key identifier:   7D:92:74:1F:0B:65:DC:24:01:CC:97:7B:23:7F:9C:69:D5:BF:D2:20
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer:       /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial:       018F3A0BF0FD06C1DCE1738C6CA3E5F045F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number:          055C
Signing time:             Thu 02 May 2024 16:03:32 +0000
Manifest this update:     Thu 02 May 2024 16:03:32 +0000
Manifest next update:     Fri 03 May 2024 16:03:32 +0000
Files and hashes:         1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: l4IB3Fxu0E7+lrj4ZeJGA7FBcCYH75weVUGyWfyFrJU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:f0:fd:06:c1:dc:e1:73:8c:6c:a3:e5:f0:45:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
        Validity
            Not Before: May  2 16:03:32 2024 GMT
            Not After : May  3 16:03:32 2024 GMT
        Subject: CN=7d92741f0b65dc2401cc977b237f9c69d5bfd220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:a3:9e:15:4e:97:9f:ee:96:60:29:04:92:
                    20:88:0e:06:d3:9e:74:46:74:49:2c:2b:86:fe:50:
                    00:54:88:fb:50:10:fe:c1:2a:a4:f2:3d:1f:01:11:
                    60:f4:c9:cb:fe:33:aa:c7:7f:98:3c:5f:d1:26:aa:
                    ca:98:ab:ed:38:14:2f:ae:f0:68:80:07:d2:db:78:
                    6c:49:f3:ad:92:1c:d9:c4:a2:5c:ca:53:3f:3c:eb:
                    08:fe:42:b5:a3:f7:fc:5a:f5:76:e3:99:1c:fd:57:
                    f8:fd:44:c8:6b:b7:af:b7:d4:e0:52:2a:60:b9:fb:
                    a5:21:72:75:ea:3b:10:da:3a:d2:12:fd:4a:80:d5:
                    2b:33:da:97:7c:90:57:b8:98:74:d0:9d:90:50:c0:
                    ea:7e:f2:78:cb:45:b0:6d:0a:dd:e0:fc:1f:5e:96:
                    4d:c4:ae:06:7e:e7:2c:55:79:b0:9b:b0:52:a3:69:
                    13:5e:8c:5d:55:cd:dc:39:4b:ff:fb:02:f4:22:d1:
                    28:c5:5b:dd:be:3b:47:23:97:31:1c:7d:ec:d3:57:
                    52:55:c0:91:78:72:49:84:33:d6:ce:6b:3f:ab:1c:
                    98:72:a5:7c:69:60:54:b5:31:7e:e8:26:fb:c8:d9:
                    f4:a6:fa:0b:ee:4e:75:42:51:77:11:a2:36:a6:82:
                    09:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:92:74:1F:0B:65:DC:24:01:CC:97:7B:23:7F:9C:69:D5:BF:D2:20
            X509v3 Authority Key Identifier:
                keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:35:29:ac:02:be:d7:e1:43:fa:d6:cf:97:e0:a0:ca:a7:59:
         b5:0a:55:51:15:c3:05:34:55:aa:ce:5a:ba:a5:b9:18:76:a0:
         0e:b2:ee:c5:81:86:a2:e9:9a:1d:71:c2:7b:4c:05:ca:3c:81:
         c2:35:ec:b1:b0:74:ba:cd:4c:18:cd:30:bf:81:1c:0c:35:b1:
         a8:6e:1f:f1:ba:02:ed:78:96:0e:62:33:30:f4:f1:da:e4:fd:
         9d:2c:2d:d6:50:86:bc:e9:15:5e:6a:fc:f6:e4:c1:5b:87:d9:
         fb:9b:7f:82:40:b3:4e:e4:bb:d9:c1:f3:e6:22:f6:fa:5d:27:
         59:12:07:70:0a:82:55:f5:e3:41:c5:2f:6f:f8:d4:a8:f2:4d:
         76:dc:e9:6a:fc:2b:1d:f1:47:9a:ea:4a:6b:07:4b:8c:a2:d9:
         c6:6b:dc:85:86:26:20:b9:b4:27:18:d9:ac:2a:cd:97:67:28:
         f5:85:95:5c:43:71:df:36:1d:e7:51:8b:c4:ba:fa:8c:8e:bd:
         40:c4:b6:2e:e0:fb:8b:62:32:5f:4b:d9:f7:d4:b2:a6:f9:a5:
         2e:af:56:52:81:27:f4:e7:93:34:94:a0:cd:67:87:a0:3b:ff:
         ef:9f:8f:0f:94:5c:3c:4c:63:8f:b1:af:e9:6c:30:ed:db:9f:
         48:b2:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:30:52 2024 by rpki-client on console-ams.rpki-client.org