Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File:                     6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier:          yK0e6Fq0MojpL1UB1fZt3HsD8G8+hq8E0TQzCDc+7kc=
Subject key identifier:   47:7C:27:81:C6:95:AD:02:14:A0:41:71:6A:79:26:85:AE:63:21:68
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer:       /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial:       018F3FD4DC967961593A0686A8601964DE6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number:          0C33
Signing time:             Fri 03 May 2024 19:01:05 +0000
Manifest this update:     Fri 03 May 2024 19:01:05 +0000
Manifest next update:     Sat 04 May 2024 19:01:05 +0000
Files and hashes:         1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: Z//TZKSlS2N6qH1lgICyEDAYvaP/H/V8BzZXvfEP4GI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d4:dc:96:79:61:59:3a:06:86:a8:60:19:64:de:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
        Validity
            Not Before: May  3 19:01:05 2024 GMT
            Not After : May  4 19:01:05 2024 GMT
        Subject: CN=477c2781c695ad0214a041716a792685ae632168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a2:4e:4e:fd:37:4f:65:23:36:a7:b3:9c:09:
                    62:cf:a5:48:25:58:04:b0:a8:57:eb:5b:2a:69:1d:
                    25:f7:a2:05:97:5d:d6:e7:21:c5:8b:31:a6:7f:78:
                    7e:f7:b9:5e:0a:12:1d:4e:06:7f:8b:31:03:cf:f1:
                    53:4d:61:70:ad:10:39:a8:63:d0:46:c3:af:8f:cb:
                    a0:1d:5a:2f:ef:71:6e:d7:ac:cd:f0:cd:8e:13:bf:
                    32:57:fe:db:48:28:87:04:47:5c:85:67:1c:c9:42:
                    3b:38:b0:7c:93:57:48:1e:3c:47:5a:9a:64:8e:f3:
                    91:18:63:f2:d5:21:52:d8:d9:ab:1b:86:63:1f:d8:
                    f8:51:89:ff:7a:d4:80:1b:66:90:59:1a:eb:20:1a:
                    37:b6:22:71:7e:f5:92:2d:e6:0b:eb:d0:8c:b0:df:
                    a3:69:ab:98:d4:3b:c3:6b:c8:24:a1:23:f8:e5:05:
                    80:9c:22:b8:f4:d9:fc:0e:d0:25:f3:27:f3:25:06:
                    f0:af:13:44:80:c5:f9:af:9a:64:b5:c7:fe:ce:43:
                    bd:5c:b9:a8:aa:98:10:d5:5a:70:b0:21:6f:76:12:
                    b9:89:34:f6:59:0c:9e:94:81:4b:a7:ee:05:c4:ba:
                    2d:a9:e7:74:eb:59:2c:17:ad:b4:01:14:72:37:43:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7C:27:81:C6:95:AD:02:14:A0:41:71:6A:79:26:85:AE:63:21:68
            X509v3 Authority Key Identifier:
                keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:95:05:0a:7e:99:ea:fc:55:19:3a:5e:62:42:19:16:71:cf:
         85:8e:4d:da:5b:5a:c1:1b:13:c7:4a:b6:01:67:57:e7:b0:20:
         45:a7:f1:d2:29:d9:4a:20:d1:df:1a:9e:5d:99:16:4a:5e:1a:
         b1:72:d8:3e:4d:65:e4:20:d2:55:89:25:4d:02:d2:8a:bb:9b:
         9b:64:08:00:d7:c9:5e:43:c8:0e:c2:7d:e1:70:52:8e:94:11:
         cf:e9:f6:8b:08:0d:d3:7c:ce:7d:95:20:dd:ad:f4:2e:67:65:
         60:08:e7:82:8c:b4:8c:b2:d8:37:39:d0:fb:3e:12:2c:1d:87:
         f4:f3:5e:aa:a2:d2:03:b7:e3:4f:97:02:cf:5a:61:b7:75:ce:
         69:42:df:36:b0:b1:1d:e8:11:47:d5:dd:15:d7:ba:7e:f8:33:
         92:1a:84:c3:01:b2:aa:22:2a:b3:da:6f:03:aa:69:77:45:f6:
         ba:36:c4:ac:a9:48:5d:92:cd:29:86:90:ce:44:50:9a:99:98:
         74:ed:10:40:56:bd:ae:d8:99:57:52:94:57:b7:60:d1:84:40:
         94:81:41:af:90:81:55:41:17:27:3c:ff:a1:b9:89:47:ea:7d:
         d1:d1:45:c9:4c:c2:13:43:de:3b:e0:6c:f9:2f:e5:dc:45:c0:
         db:c9:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:42:43 2024 by rpki-client on console-fra.rpki-client.org