Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
File:                     5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json)
Hash identifier:          eqtZ5KXYmXoZxn2CNdEi8T+VnTSlWtNl+ESrfxjsyc0=
Subject key identifier:   8B:AA:7D:EB:72:D9:3C:09:2F:DC:3F:58:B2:1F:78:7D:3E:4B:11:F0
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Certificate issuer:       /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial:       018F3C9D2792EC0E103BBB818A9DD1A3667B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
Manifest number:          114E
Signing time:             Fri 03 May 2024 04:01:23 +0000
Manifest this update:     Fri 03 May 2024 04:01:23 +0000
Manifest next update:     Sat 04 May 2024 04:01:23 +0000
Files and hashes:         1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: VUxncwo5Q6SN271enr4COhhbVL2EMYJgi1uFMT+czOE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9d:27:92:ec:0e:10:3b:bb:81:8a:9d:d1:a3:66:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
        Validity
            Not Before: May  3 04:01:23 2024 GMT
            Not After : May  4 04:01:23 2024 GMT
        Subject: CN=8baa7deb72d93c092fdc3f58b21f787d3e4b11f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:40:39:69:47:84:03:d7:4b:1a:92:6d:ab:
                    e8:06:23:de:5d:b6:87:c9:67:3f:4f:43:99:78:47:
                    5e:02:03:d9:a6:7c:e1:28:78:7e:e0:56:5c:b0:3a:
                    ce:b3:a1:00:8f:96:b2:2a:15:b9:0e:86:7d:ad:62:
                    43:43:8e:81:87:69:2b:85:9f:0c:79:bc:62:08:70:
                    1c:fb:69:94:b9:2f:90:28:d7:f0:42:01:79:4b:05:
                    af:e8:6f:d6:cc:d7:86:8e:08:a0:b9:54:24:94:c6:
                    33:3d:5f:4a:18:21:13:56:3c:34:7d:d5:c4:28:50:
                    f5:00:32:c4:49:fc:5d:43:8b:bd:4d:43:11:7c:c7:
                    d0:83:9d:be:e9:1c:6c:fb:d6:86:53:b0:8d:7f:f2:
                    3a:72:86:79:1c:d8:d4:83:99:fa:d2:1c:3d:9b:ee:
                    e4:97:bf:64:b3:ae:7c:27:82:18:f0:23:a5:b2:44:
                    20:97:37:8d:a3:3e:54:05:ba:5a:73:81:ce:bb:6d:
                    1c:f7:b0:7e:2a:01:7c:26:be:8a:a8:5f:72:e0:aa:
                    77:27:77:a2:57:ff:70:b6:db:2d:0c:e0:aa:6b:7f:
                    1c:d5:e8:6f:d4:ec:2f:d8:81:1e:10:ec:9d:dd:6c:
                    d3:0e:16:d2:67:e5:12:60:12:cd:fc:4e:6f:41:dd:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AA:7D:EB:72:D9:3C:09:2F:DC:3F:58:B2:1F:78:7D:3E:4B:11:F0
            X509v3 Authority Key Identifier:
                keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c3:64:c0:62:04:78:09:e3:b3:b9:a3:b5:2e:2c:57:79:fb:
         d4:42:fd:4d:f2:66:5d:93:c6:35:b7:f0:ed:b7:15:c8:a3:9f:
         5d:42:4f:ef:90:c2:7c:e9:09:40:a1:53:71:03:e0:3e:42:0e:
         47:06:7d:2a:ab:6f:09:81:d8:6d:13:3c:65:3a:ce:e7:a5:7e:
         29:95:93:27:87:d2:86:a6:0a:f1:90:d3:9b:d1:f1:e1:1e:c5:
         05:04:f3:bf:9e:73:7f:0c:ea:66:9d:09:2c:d9:cf:94:b4:90:
         a1:f6:36:4e:89:98:08:70:0e:d7:f3:ea:01:ec:2b:39:80:ea:
         e1:28:67:ba:f0:04:36:51:b8:45:86:8b:28:b4:8e:23:13:fe:
         f9:9d:40:fe:99:bc:c3:8b:31:66:8a:16:3e:a6:45:ef:a1:8f:
         38:d1:4c:83:58:c5:12:46:f9:e3:c5:dd:ca:30:bc:e0:9d:ed:
         17:2b:b7:57:8c:88:5a:8a:e5:fb:de:e7:d7:d7:cf:10:2a:ec:
         cd:df:32:6c:c6:14:2b:3d:91:cb:aa:7b:fb:00:62:79:8b:a1:
         19:0e:1f:ab:c9:cd:f2:cb:da:29:44:fa:3c:ad:e3:95:49:b8:
         54:7c:95:38:0e:eb:16:2a:12:2e:54:4e:33:96:83:69:c8:10:
         7a:39:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:28:00 2024 by rpki-client on console-fra.rpki-client.org