Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File:                     D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier:          +8b60TjXXkQu7LInuw0oAktnogEWiPQ8MY0oLou74p4=
Subject key identifier:   AB:95:4B:F6:63:E2:D9:00:9A:C8:D0:C5:16:75:A9:95:7A:3A:E6:11
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer:       /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial:       018F381B348E8F92586FD8E4606C553E966D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number:          065A
Signing time:             Thu 02 May 2024 07:00:58 +0000
Manifest this update:     Thu 02 May 2024 07:00:58 +0000
Manifest next update:     Fri 03 May 2024 07:00:58 +0000
Files and hashes:         1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: T5zr7mT5gs4izoWSF1e4Kr2OAlqhGTaWY0hCfwDFrCQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:34:8e:8f:92:58:6f:d8:e4:60:6c:55:3e:96:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
        Validity
            Not Before: May  2 07:00:58 2024 GMT
            Not After : May  3 07:00:58 2024 GMT
        Subject: CN=ab954bf663e2d9009ac8d0c51675a9957a3ae611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:66:0f:3d:34:c6:25:44:e3:ec:fa:ad:3a:44:
                    a6:8b:c7:af:c5:77:2b:af:43:1e:2b:b2:ce:50:8d:
                    ca:05:f8:e9:e2:91:b1:51:dd:3f:8d:99:60:f4:85:
                    6f:16:85:42:96:22:fb:cc:fe:c6:4e:4f:f9:f4:8c:
                    66:24:6b:22:b2:d2:8f:bb:34:cd:03:d8:f0:85:0c:
                    dc:91:e9:1e:d3:5e:17:5b:46:fd:b6:24:67:c1:71:
                    1e:f9:56:33:c4:a5:d3:90:25:77:aa:9c:01:25:55:
                    bb:79:d2:11:a6:d9:18:f4:e5:90:9e:ed:b2:dd:89:
                    0b:22:41:41:64:a3:00:d1:68:2c:90:20:72:a5:90:
                    08:9c:52:a4:cb:43:1d:b8:98:09:d3:8b:cd:bf:e0:
                    91:8d:5e:1a:37:6f:c4:4c:63:bd:8c:52:dd:61:2e:
                    7f:ef:ac:7f:d2:2c:5a:60:7c:16:7c:62:46:39:8b:
                    80:83:d2:6a:ca:7f:2a:dc:b9:5e:fe:00:0f:d5:13:
                    cb:f9:98:f1:32:da:4c:ce:1a:5d:a3:86:30:13:90:
                    28:62:a3:53:9e:b9:0a:0e:de:36:69:68:48:fb:bf:
                    1e:a7:ac:82:53:9c:eb:19:03:2e:16:5a:cb:57:f1:
                    d2:8a:4d:e7:ce:34:80:98:ee:39:a3:b2:ca:f4:da:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:95:4B:F6:63:E2:D9:00:9A:C8:D0:C5:16:75:A9:95:7A:3A:E6:11
            X509v3 Authority Key Identifier:
                keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2b:ec:8b:f3:2a:36:e6:bd:8c:9b:b4:fb:e8:51:00:88:fb:
         a9:a8:fe:ef:3a:35:9a:2d:f0:89:49:3e:f4:17:35:33:15:17:
         7d:3e:b3:20:1e:34:68:bf:c8:e8:68:c3:c7:cd:19:95:fa:af:
         51:0a:2c:ad:cf:f9:15:69:4c:b4:1c:d8:df:0e:3b:a9:07:7d:
         08:78:8d:29:0e:f2:19:a9:e6:86:54:0b:c1:b4:b6:ca:4f:02:
         1c:c1:17:63:d4:2f:04:9e:1d:7f:c9:31:05:28:9c:e8:d1:a7:
         10:af:6b:18:f5:c3:bc:6d:6f:f9:f2:1d:a5:11:ab:ed:b0:b4:
         60:15:27:7d:1b:19:c9:1f:15:5d:68:e3:d9:af:ad:15:eb:8b:
         e0:1e:bd:63:c7:0d:3d:07:4c:be:24:3d:4b:0a:3e:de:ee:39:
         9f:95:61:d2:65:1c:b0:35:54:e0:db:8b:53:3f:8b:97:14:75:
         2b:35:72:46:6a:3a:81:20:28:9e:b3:86:97:18:2d:1c:57:35:
         64:31:60:85:8b:13:89:e3:62:d2:3d:ff:04:29:ea:b8:3f:73:
         e1:13:ee:82:5c:4a:b4:0f:9b:5a:87:86:fb:5a:bd:63:9a:50:
         37:87:c3:08:f0:a7:4a:5c:02:ee:80:e3:80:62:cf:2e:15:af:
         a2:05:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:08:22 2024 by rpki-client on console-fra.rpki-client.org