Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.mft
File:                     4DGcxo0CrzwGK842pc0na2lwdyg.mft (raw, json)
Hash identifier:          H/1fdYONtbeiEExVc+SArGPwxFPyW8Zb+1JVD2mOIFY=
Subject key identifier:   F9:BE:F3:E6:83:19:F6:64:36:8B:EB:3F:53:6A:04:BA:DB:80:62:22
Authority key identifier: E0:31:9C:C6:8D:02:AF:3C:06:2B:CE:36:A5:CD:27:6B:69:70:77:28
Certificate issuer:       /CN=e0319cc68d02af3c062bce36a5cd276b69707728
Certificate serial:       018F546E4200FE3C8C2EACE44DC0E3E3961F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4DGcxo0CrzwGK842pc0na2lwdyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.mft
Manifest number:          0CEF
Signing time:             Tue 07 May 2024 19:01:02 +0000
Manifest this update:     Tue 07 May 2024 19:01:02 +0000
Manifest next update:     Wed 08 May 2024 19:01:02 +0000
Files and hashes:         1: 4DGcxo0CrzwGK842pc0na2lwdyg.crl (hash: 7AIgKGn2ea+c4gpB0sCjzdWrdUq/OGztHV9Yc1XngSs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4DGcxo0CrzwGK842pc0na2lwdyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:6e:42:00:fe:3c:8c:2e:ac:e4:4d:c0:e3:e3:96:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0319cc68d02af3c062bce36a5cd276b69707728
        Validity
            Not Before: May  7 19:01:02 2024 GMT
            Not After : May  8 19:01:02 2024 GMT
        Subject: CN=f9bef3e68319f664368beb3f536a04badb806222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ad:1f:ad:34:54:8a:52:65:ef:a2:88:22:5b:
                    c5:3e:1e:29:bb:57:b2:62:10:0b:b5:9e:81:94:59:
                    39:b0:06:67:2d:7d:6e:b9:17:58:f1:20:e6:b5:51:
                    81:5c:6b:d8:c3:a1:f7:1d:35:8d:bf:b7:f5:06:41:
                    cc:a0:f7:b0:b5:85:50:4b:bc:bc:77:c5:3e:e3:61:
                    b9:29:94:c8:6f:d5:bf:57:7b:8a:10:68:4c:98:7c:
                    32:36:ce:10:72:42:c4:34:61:4c:6c:42:27:a3:b9:
                    ff:42:44:14:b9:b4:25:f1:fd:9e:49:44:39:42:f9:
                    bc:6e:40:d4:a8:43:e4:19:1a:11:82:0f:47:b0:f8:
                    00:c8:34:ba:79:62:4a:29:96:34:89:16:07:e4:90:
                    8b:c6:15:fe:95:f5:9a:11:72:01:d0:6a:09:5d:be:
                    5c:67:62:41:3c:71:9d:09:4a:f1:ac:b5:43:b4:b7:
                    41:d8:63:97:5c:6a:55:6a:c1:85:d6:15:6c:88:05:
                    9c:19:de:27:4e:cc:5a:e5:8d:ad:53:be:08:73:d7:
                    f5:5c:53:be:d5:5a:3f:9d:46:98:1d:2b:e5:15:f1:
                    21:88:82:2a:cc:ac:42:22:f9:c8:fb:60:7b:1a:d8:
                    aa:24:91:9e:b9:5b:8e:d3:5b:26:20:5a:1b:2b:5b:
                    cf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BE:F3:E6:83:19:F6:64:36:8B:EB:3F:53:6A:04:BA:DB:80:62:22
            X509v3 Authority Key Identifier:
                keyid:E0:31:9C:C6:8D:02:AF:3C:06:2B:CE:36:A5:CD:27:6B:69:70:77:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DGcxo0CrzwGK842pc0na2lwdyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:80:71:a9:6a:7d:fa:3b:8c:02:27:b4:32:fe:5d:12:d6:5c:
         81:b1:a9:a6:42:ce:fb:f7:da:a6:76:64:e8:e2:c4:b4:b3:d2:
         93:ad:5c:5d:25:4e:46:06:5a:01:0f:14:d0:56:13:4b:df:11:
         83:31:a6:e6:19:f2:22:ad:2c:b2:37:10:d3:d8:37:6a:b8:a8:
         be:a0:63:16:de:b4:43:92:e6:1c:c5:23:95:88:b3:69:67:c3:
         96:87:5f:4d:50:d7:39:19:cd:7c:0d:61:a6:b5:65:35:10:d7:
         f9:3b:f5:80:1d:96:11:95:76:02:60:14:51:eb:fe:1e:45:2f:
         11:90:3e:d9:06:21:eb:be:fc:0b:6f:60:d9:1a:bd:4b:81:d8:
         a4:3a:b1:c4:64:4b:91:13:89:ca:be:a2:03:79:13:13:57:83:
         04:f7:ae:03:2b:d0:c4:7e:a2:f1:a1:10:69:72:e7:0b:84:77:
         51:00:be:14:cb:bd:07:38:1a:48:cf:02:98:bb:73:72:97:72:
         1b:d4:11:e9:d5:d3:62:f5:57:03:a5:01:f0:59:71:d5:66:91:
         ca:9c:a5:31:a2:c8:90:9c:65:0b:d3:c3:56:fb:e2:31:cf:29:
         50:bf:4c:d7:13:50:1b:b2:ad:71:c3:78:f9:db:e7:45:96:e6:
         13:07:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:31:24 2024 by rpki-client on console-ams.rpki-client.org