Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft
File:                     32d5WjuqRaia2o3afoTpa7euB4c.mft (raw, json)
Hash identifier:          Y0hUFHR8r/TJcqZvkM2T9Xf1ZzmJNhzcb8ZmmGJnGMk=
Subject key identifier:   9F:86:91:84:6D:33:6F:BA:C8:DE:C4:BC:D1:29:01:EA:8B:B3:9F:B2
Authority key identifier: DF:67:79:5A:3B:AA:45:A8:9A:DA:8D:DA:7E:84:E9:6B:B7:AE:07:87
Certificate issuer:       /CN=df67795a3baa45a89ada8dda7e84e96bb7ae0787
Certificate serial:       018F23138E8052E789FAE7ACB05B49AF5AF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32d5WjuqRaia2o3afoTpa7euB4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft
Manifest number:          05BC
Signing time:             Sun 28 Apr 2024 05:00:35 +0000
Manifest this update:     Sun 28 Apr 2024 05:00:35 +0000
Manifest next update:     Mon 29 Apr 2024 05:00:35 +0000
Files and hashes:         1: 32d5WjuqRaia2o3afoTpa7euB4c.crl (hash: 69vwlxtWbrY5Lx+fpJifgIQj1h3JEs8L6S74q95CrLM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32d5WjuqRaia2o3afoTpa7euB4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:13:8e:80:52:e7:89:fa:e7:ac:b0:5b:49:af:5a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df67795a3baa45a89ada8dda7e84e96bb7ae0787
        Validity
            Not Before: Apr 28 05:00:35 2024 GMT
            Not After : Apr 29 05:00:35 2024 GMT
        Subject: CN=9f8691846d336fbac8dec4bcd12901ea8bb39fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6d:a2:a4:ad:55:b4:0f:8f:10:80:26:35:cd:
                    6f:eb:63:fb:3a:ec:dd:ee:81:1b:d0:1c:d3:c5:c2:
                    40:e2:2c:6f:6d:5b:01:a3:93:88:53:c8:9e:1d:db:
                    c3:cc:b6:74:d0:93:78:55:7c:c2:4f:67:13:6f:47:
                    6f:b3:ca:f5:5d:08:6f:da:d8:ad:cd:a3:32:50:47:
                    76:1e:ac:0e:88:f2:02:1d:bc:85:c7:4c:94:f1:b1:
                    06:89:c4:bd:8e:2f:b7:59:55:d0:29:c6:b4:3b:d5:
                    6b:84:08:16:fe:44:e9:73:6a:f5:a2:4b:58:23:61:
                    f9:4c:77:06:4e:5b:38:05:4a:2c:85:3d:80:58:f7:
                    ee:22:e0:fd:cf:e2:71:e2:76:fc:e8:6b:91:39:44:
                    d8:40:5d:6e:41:c0:47:4d:0f:fd:66:9c:aa:5f:a9:
                    bd:16:c6:cb:4a:b0:4b:0d:d4:ed:c0:4d:93:07:e1:
                    33:85:f8:18:60:38:a1:3c:71:9d:e9:da:85:d1:a4:
                    0f:9d:69:6e:d7:9e:4c:b6:6e:0f:ab:c7:90:0e:c8:
                    a3:fd:3a:88:c7:73:ab:cb:8a:de:b5:f7:64:43:a1:
                    e9:36:64:b0:8c:7e:fd:e0:f5:a5:51:0e:3e:fa:81:
                    88:cb:fb:21:58:86:4a:91:b7:de:5f:b5:06:c2:35:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:86:91:84:6D:33:6F:BA:C8:DE:C4:BC:D1:29:01:EA:8B:B3:9F:B2
            X509v3 Authority Key Identifier:
                keyid:DF:67:79:5A:3B:AA:45:A8:9A:DA:8D:DA:7E:84:E9:6B:B7:AE:07:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32d5WjuqRaia2o3afoTpa7euB4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:73:29:3d:a1:7a:d6:eb:b6:9b:16:b1:4c:2d:4c:24:38:f0:
         b3:cb:32:94:b8:c9:37:da:4a:5d:7e:e8:90:d3:fb:82:17:26:
         27:63:2e:60:83:4b:a7:98:f4:61:68:3f:92:b5:70:27:15:6c:
         92:ac:06:b0:25:b2:3b:a4:6a:76:14:42:bf:b6:4a:dd:41:2c:
         98:41:00:8e:6a:60:eb:f4:c7:65:82:89:4d:89:91:da:b3:49:
         95:c0:07:d1:80:7a:57:4a:40:42:0b:5d:2d:a0:ca:b8:7a:2b:
         0c:fd:f4:d4:7e:a9:ef:43:05:d8:86:0c:89:42:ff:ac:5f:06:
         34:ed:6b:b5:95:d9:a6:7c:2c:64:39:df:57:65:6e:92:7d:5e:
         82:cb:35:9e:ba:48:ec:3a:da:71:e2:ca:66:a3:86:85:55:ce:
         25:d1:59:a1:70:1d:14:4e:f3:d4:70:fc:59:75:17:8c:59:b8:
         f9:79:f8:32:ca:39:c7:a8:b3:f0:42:f6:97:ce:f0:d5:56:bb:
         e4:c3:0f:84:38:be:09:7b:75:01:93:d3:d0:38:6e:e7:4a:6f:
         f4:e1:dc:62:f3:9f:a5:c9:64:0e:40:f6:a8:95:7b:ea:27:e0:
         85:ae:3e:d1:24:1d:33:02:67:47:31:88:69:cb:43:3b:e4:6c:
         ed:ed:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:45:31 2024 by rpki-client on console-ams.rpki-client.org