Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
File:                     mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json)
Hash identifier:          03zS7zkDdjeafSbnQXcctYjcBxU2nvC6GAUYd61segI=
Subject key identifier:   62:E6:59:AB:27:19:93:5E:43:7B:38:F2:DF:6A:C9:7E:AE:5F:65:DD
Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
Certificate issuer:       /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Certificate serial:       018F877F46EDD51DF27BDD36E5131B271823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
Manifest number:          4C
Signing time:             Fri 17 May 2024 17:00:16 +0000
Manifest this update:     Fri 17 May 2024 17:00:16 +0000
Manifest next update:     Sat 18 May 2024 17:00:16 +0000
Files and hashes:         1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: ThXOBQDBy04Ce4Ol76SKMo1W0DS5jjo5IFKeuLUniJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:46:ed:d5:1d:f2:7b:dd:36:e5:13:1b:27:18:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
        Validity
            Not Before: May 17 17:00:16 2024 GMT
            Not After : May 18 17:00:16 2024 GMT
        Subject: CN=62e659ab2719935e437b38f2df6ac97eae5f65dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:37:b9:4f:7a:e8:f5:21:68:fa:83:fa:33:
                    10:00:15:b9:ee:83:2c:af:91:d4:86:e0:2a:07:9d:
                    55:86:99:4a:ce:e9:9f:bf:fe:24:98:8e:c7:3a:1b:
                    d6:4c:6c:a1:b0:7f:4f:70:74:06:86:0f:ec:65:3c:
                    af:d4:3d:9b:16:17:87:9a:f6:43:d7:9d:c7:e7:05:
                    d9:51:a8:ea:db:07:b3:22:17:42:41:82:1e:eb:6a:
                    05:8e:62:1c:fe:e7:b9:18:f0:05:a9:65:2d:b8:e0:
                    fe:fa:18:34:6a:a7:0b:a6:21:d3:89:53:5c:36:44:
                    e8:38:24:ae:e5:fe:9e:53:41:11:d8:97:64:3d:24:
                    84:ed:3f:cc:73:2f:46:24:33:8a:5b:f2:4e:54:1d:
                    4f:94:25:ec:d1:5a:25:30:9e:2a:76:7f:91:98:11:
                    48:97:d1:1a:97:57:92:0b:33:6f:70:ab:0d:09:b7:
                    3c:0f:d7:cd:2c:41:16:1f:a4:81:96:6c:ac:d6:cc:
                    a5:a8:af:69:4e:79:24:7c:9f:4f:46:7d:01:a5:9e:
                    34:97:cf:51:dd:47:7b:48:c8:4f:e4:62:12:ee:db:
                    47:28:b2:13:6c:26:13:db:92:6f:14:80:59:96:81:
                    18:6d:45:ff:3a:67:df:ff:4b:5c:ff:24:eb:9e:fa:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E6:59:AB:27:19:93:5E:43:7B:38:F2:DF:6A:C9:7E:AE:5F:65:DD
            X509v3 Authority Key Identifier:
                keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ba:4f:7f:ca:ec:97:03:e8:0e:e7:d1:9d:60:4a:5a:99:fb:
         f6:f6:80:16:08:a2:6f:6f:c0:58:03:43:fc:e9:b1:7c:d4:1e:
         4f:04:c0:d0:3a:b0:39:37:a7:7e:47:f8:bd:40:8f:c4:23:f3:
         26:ac:26:d7:3d:b3:38:02:b2:c0:5a:fc:d4:95:fa:dd:ba:1c:
         74:e7:93:29:56:d3:7c:3d:91:fe:15:85:3c:1d:86:31:65:fe:
         63:26:a0:1f:9b:02:9a:ba:f8:9f:13:b1:c5:3e:7e:77:90:cf:
         02:f9:e3:61:46:c4:91:e4:8f:54:eb:7b:f8:57:1c:cd:a7:31:
         ce:5b:81:b9:12:cd:8d:a2:e5:bf:f1:06:3b:a0:ea:18:8a:d1:
         29:1c:a0:4c:81:3d:50:b6:99:5a:ca:62:01:28:f3:a2:cd:6e:
         f7:e4:39:43:c4:c8:b8:e1:31:04:a8:54:59:fe:d2:0b:5a:f1:
         59:87:72:46:1b:6c:5f:ce:85:97:07:1c:41:05:21:fb:70:4c:
         c7:0f:3e:61:17:a1:85:41:ff:9d:84:33:97:e6:43:33:3a:47:
         b0:f3:d2:85:18:3d:f6:ef:d6:77:0c:1a:72:9a:af:ac:d2:44:
         40:8d:7b:a4:59:b6:96:cb:3b:c6:fa:b6:b5:5d:38:69:dc:34:
         4f:c0:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:41:57 2024 by rpki-client on console-fra.rpki-client.org