Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File:                     5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier:          ZrXbIa7H5hOe4TQGzQrv3tR2m7IK94lNvgKNoaxrxqs=
Subject key identifier:   A9:98:79:B7:65:D0:9E:93:C2:1C:B4:90:9D:F7:4E:5A:62:39:DF:F3
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer:       /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial:       018F5136A0DA106B7F851991DC8C9944F120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number:          09C4
Signing time:             Tue 07 May 2024 04:01:25 +0000
Manifest this update:     Tue 07 May 2024 04:01:25 +0000
Manifest next update:     Wed 08 May 2024 04:01:25 +0000
Files and hashes:         1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: OQ6uNZ1NqZniooj8VbO6T8cKa1CJPvvNbgztvH9sogE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:a0:da:10:6b:7f:85:19:91:dc:8c:99:44:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
        Validity
            Not Before: May  7 04:01:25 2024 GMT
            Not After : May  8 04:01:25 2024 GMT
        Subject: CN=a99879b765d09e93c21cb4909df74e5a6239dff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:d7:33:4a:91:b8:a7:04:37:cf:fb:17:46:
                    bf:db:2c:a8:f2:1a:e7:dd:50:b5:02:85:bb:b2:d9:
                    57:6b:50:41:d4:47:f1:40:83:2e:b8:a3:6b:0c:63:
                    07:17:ee:24:ef:21:7c:77:0e:31:59:ac:c1:a2:32:
                    ff:6a:79:69:b7:e5:ec:3d:63:98:b4:c4:7c:53:9a:
                    89:0d:44:ad:e3:fd:8d:3b:3a:0e:3f:61:db:60:32:
                    95:88:a7:f6:c0:57:be:10:67:64:ab:83:54:4d:82:
                    91:5c:16:6c:cb:de:5f:07:57:81:5e:87:09:98:0b:
                    a2:8a:06:f7:64:47:71:27:95:63:f1:76:1e:1c:b0:
                    44:3a:24:69:5a:02:d2:84:8f:58:c9:71:7e:21:0f:
                    3b:53:07:f4:07:08:e9:02:ba:ae:dd:5d:9d:a5:07:
                    67:7a:fb:58:31:80:c3:cb:45:73:39:a5:70:db:03:
                    09:f2:0f:71:c2:12:5a:c6:7c:fd:b9:95:83:b7:b2:
                    27:05:a2:ae:7e:01:e8:1c:a9:0a:e0:41:27:7d:8b:
                    e1:79:38:a4:67:65:e9:37:28:c3:98:8b:fc:c4:f9:
                    48:96:69:59:17:48:2f:ef:e4:b3:3d:e9:e8:e7:a0:
                    90:7f:bf:15:e2:22:21:a2:93:d0:44:10:f0:f4:a5:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:98:79:B7:65:D0:9E:93:C2:1C:B4:90:9D:F7:4E:5A:62:39:DF:F3
            X509v3 Authority Key Identifier:
                keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f4:c2:38:24:d1:5e:69:3e:0f:c3:19:5a:59:b9:ec:27:63:
         c9:07:ff:0b:92:b9:d4:3c:0d:0f:9f:f7:9a:6a:3c:01:72:44:
         28:27:f6:ce:c7:41:de:0e:b3:81:2a:6b:7a:c6:3a:40:3a:5b:
         4f:cb:4e:b3:31:8f:ea:82:12:04:76:07:b5:e2:8c:f1:14:ad:
         31:67:cf:b2:78:4f:0a:ae:b5:44:b3:65:db:1a:45:1b:4c:d6:
         d4:eb:10:2a:92:3f:c1:b6:d3:04:b1:43:c6:d4:c6:63:b8:72:
         a8:16:95:ac:d4:59:9a:95:c3:27:2d:6b:da:61:9a:72:e2:19:
         2d:f8:2a:9e:b5:a3:ea:78:e6:fa:61:3a:d6:60:13:d8:4d:ac:
         01:07:ea:d3:47:1c:0b:af:62:2c:70:e4:c9:2f:f0:07:dc:cc:
         61:42:06:34:ec:00:91:78:95:1a:bd:41:9f:5b:b2:72:e2:24:
         09:56:82:fc:b8:25:b4:bb:41:58:7a:cb:ec:97:52:f1:b5:e2:
         02:68:14:ba:67:ad:ae:d7:a4:ed:a9:33:b9:03:37:70:c3:9b:
         fd:0e:81:0c:59:6c:d6:90:d1:ed:83:66:a5:c3:e6:58:e8:5b:
         ca:68:53:75:b7:53:39:9e:56:80:ed:8b:5e:63:57:86:9f:64:
         30:f2:0b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:33:16 2024 by rpki-client on console-ams.rpki-client.org