Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File:                     8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier:          BsaQxNv4hb12Qu9O6v85NLRuQB5aHjXhSSBUmxEddwg=
Subject key identifier:   0A:9B:87:75:69:99:EC:82:CE:C7:49:DA:F4:4D:BE:FB:B3:B9:A0:86
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer:       /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial:       018F3EC2BF87830EF44C413FE109A12B6928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number:          114D
Signing time:             Fri 03 May 2024 14:01:41 +0000
Manifest this update:     Fri 03 May 2024 14:01:41 +0000
Manifest next update:     Sat 04 May 2024 14:01:41 +0000
Files and hashes:         1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: /9Kjcy+jPqgB0zj0umPcz9pYoBjUjMVd9SdmbJkj8KE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:c2:bf:87:83:0e:f4:4c:41:3f:e1:09:a1:2b:69:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
        Validity
            Not Before: May  3 14:01:41 2024 GMT
            Not After : May  4 14:01:41 2024 GMT
        Subject: CN=0a9b87756999ec82cec749daf44dbefbb3b9a086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:e4:fe:cc:95:99:da:f6:ec:0c:17:04:d1:
                    06:ac:5e:c3:36:c1:2b:aa:b8:ee:56:fd:a5:4e:6d:
                    10:e4:e5:a7:36:31:65:86:06:ef:91:5d:fd:55:2d:
                    cf:3b:35:d5:02:31:cf:91:c6:3d:6d:ec:58:1f:ab:
                    11:c7:93:21:b2:2d:7d:8f:9e:90:f3:51:20:86:66:
                    c4:d4:69:61:08:43:5e:70:57:ae:57:00:9f:b0:5d:
                    b3:e5:d3:e7:cc:32:96:e2:e2:52:01:20:bb:52:a2:
                    1f:e9:fc:6e:52:ab:d7:bc:ec:43:42:23:df:16:3d:
                    1c:45:b8:3c:e4:ad:60:15:65:e3:35:d0:61:03:ae:
                    eb:99:58:73:d8:92:96:77:3d:26:ac:75:f2:eb:8b:
                    29:48:7b:e4:ea:f1:79:54:ab:4e:71:ea:9b:f3:b9:
                    1d:67:de:2b:ec:2e:7a:07:9d:49:4a:d4:e9:c3:4e:
                    72:e5:cf:41:38:df:10:4e:c6:5c:b1:d8:43:a8:73:
                    f0:df:fc:24:a7:f5:61:b8:dc:24:bc:b8:21:de:37:
                    9c:6d:c5:69:89:58:dc:c2:e8:72:ec:c0:36:6a:bf:
                    e5:ba:6f:0d:a4:ca:d7:db:6e:08:1b:c9:69:05:a0:
                    c6:12:f1:69:e3:23:b8:27:52:0f:56:4b:53:06:b3:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9B:87:75:69:99:EC:82:CE:C7:49:DA:F4:4D:BE:FB:B3:B9:A0:86
            X509v3 Authority Key Identifier:
                keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d2:d7:b9:c9:2b:31:a0:6f:75:f6:64:26:e3:bb:70:25:f7:
         43:dc:1c:d1:32:41:19:a5:7f:84:9c:df:64:f3:cc:3d:d7:c1:
         35:75:a4:41:c0:b3:2b:dc:e0:69:9d:1f:26:18:67:3d:44:d6:
         e7:23:54:f1:c0:17:91:0a:07:ef:e7:5f:89:16:9e:58:82:98:
         04:a1:f4:1f:8a:84:f0:94:be:58:21:8e:b5:c8:ef:6d:f0:35:
         64:15:f0:b7:07:7f:6f:de:19:9f:ed:a7:7b:a0:55:df:9b:39:
         cf:dd:2a:0c:a8:1b:83:a6:c3:aa:e1:fa:26:48:0f:a2:28:3c:
         34:bb:79:43:6c:a5:9e:04:ea:43:c7:23:c4:25:8a:a1:e1:b2:
         74:7d:c6:31:c6:57:f5:80:91:85:c8:f4:09:ed:46:42:94:d4:
         b6:b8:a8:ef:eb:d2:fe:d2:bf:1f:2d:4e:aa:64:62:7c:85:08:
         45:8d:da:d7:eb:5f:97:90:30:d1:47:11:14:62:8d:d3:80:73:
         a7:86:a3:43:34:2c:c1:80:4c:b3:12:5f:c5:c1:21:9a:cf:5c:
         43:36:58:ab:2d:76:4c:aa:44:b0:66:87:1c:53:9a:d7:33:73:
         50:1a:29:21:be:29:0f:ab:6e:ae:93:d9:43:87:a4:48:0a:e1:
         8a:51:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:11:07 2024 by rpki-client on console-fra.rpki-client.org