Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
File:                     hVLmDnmh3nUzQ9eBW4cMloDArn8.mft (raw, json)
Hash identifier:          KeQsLC43JL0A4WNoeXt8iAFDJKeygO3dT36Boua41yI=
Subject key identifier:   D6:DF:6B:9D:01:05:EE:09:18:17:34:70:92:05:AF:9A:43:92:80:56
Authority key identifier: 85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
Certificate issuer:       /CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Certificate serial:       018F874ACFE9CC8BE293137E6F2C60B84F8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
Manifest number:          0749
Signing time:             Fri 17 May 2024 16:02:57 +0000
Manifest this update:     Fri 17 May 2024 16:02:57 +0000
Manifest next update:     Sat 18 May 2024 16:02:57 +0000
Files and hashes:         1: hVLmDnmh3nUzQ9eBW4cMloDArn8.crl (hash: loGFsAjqcBgr0mKcmDRHG1gcB9GODvVzm5Ql/dwFb98=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:cf:e9:cc:8b:e2:93:13:7e:6f:2c:60:b8:4f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8552e60e79a1de753343d7815b870c9680c0ae7f
        Validity
            Not Before: May 17 16:02:57 2024 GMT
            Not After : May 18 16:02:57 2024 GMT
        Subject: CN=d6df6b9d0105ee09181734709205af9a43928056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:16:03:9d:5e:27:c5:e0:04:96:a6:85:b2:
                    1a:82:e0:71:46:6f:91:33:89:bb:88:46:32:66:98:
                    79:b7:2b:0f:94:62:fa:88:e7:0b:e7:1a:aa:78:c6:
                    a0:17:00:1a:4c:2c:83:ff:ff:24:1f:26:a7:eb:10:
                    d6:f9:c0:3b:a1:2f:db:21:89:e6:87:a9:ce:36:9e:
                    b2:e1:6c:af:a8:21:5b:d4:03:f0:28:6d:81:84:19:
                    89:f2:eb:fc:ff:fb:52:cb:ac:a7:d4:76:94:02:d5:
                    47:2f:d1:49:93:a8:73:e6:1f:0b:0e:c3:90:42:f7:
                    bd:88:a0:68:b1:e9:88:8e:d3:b6:b4:ba:a7:7d:13:
                    a7:7b:1b:c2:89:70:53:76:ec:8e:3b:d5:d7:26:17:
                    ad:b6:40:c2:0c:e4:0f:44:44:06:48:0e:c5:15:4b:
                    00:17:e6:37:0a:cd:f7:44:49:58:73:99:d0:36:9b:
                    63:9e:e2:23:d1:75:31:86:a1:16:8c:c5:c6:6d:08:
                    e4:8a:81:67:16:8d:7d:64:a1:c3:d8:0d:48:e6:0b:
                    cb:f1:61:6b:a6:2e:18:79:f3:56:54:b9:34:47:84:
                    69:a2:ee:e1:91:8a:d8:34:3d:1d:4e:e2:fd:af:38:
                    9e:54:a7:87:28:f4:05:37:a9:4e:e1:57:72:55:56:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DF:6B:9D:01:05:EE:09:18:17:34:70:92:05:AF:9A:43:92:80:56
            X509v3 Authority Key Identifier:
                keyid:85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c1:c1:31:a2:c9:01:e1:9b:4d:30:7d:08:4e:ed:d4:a2:74:
         00:9d:7f:b7:43:ed:12:0d:b9:82:44:1d:96:54:5a:95:e1:1d:
         e6:cf:4b:8f:63:ea:5c:0c:05:47:8a:75:b4:7f:2a:c3:4a:2d:
         d3:65:41:05:86:fb:92:e9:f0:b7:f2:8d:be:03:10:d9:4e:d1:
         63:f8:60:0d:8f:f2:50:d3:12:df:63:33:58:2b:e0:67:be:8e:
         db:d2:d6:09:e9:c5:63:a0:51:82:8b:51:7e:8e:7c:71:5b:31:
         26:43:b4:00:cd:59:6d:3a:83:ef:ff:6a:a6:74:41:b3:c1:4d:
         bd:45:e9:13:fc:5f:cf:09:db:4f:bf:c1:dc:17:74:7d:4e:9c:
         47:48:7e:4e:3f:b7:c1:6d:05:87:9b:e4:20:d3:fb:89:37:49:
         2e:f1:f5:f3:f5:40:1b:32:42:1b:dc:81:86:ca:af:69:30:9b:
         e1:93:53:e8:10:86:84:06:a5:7a:06:a8:09:de:6c:78:25:b6:
         9e:6c:3c:a7:a0:92:f3:27:fe:f4:10:61:97:d3:8e:e8:bd:91:
         fa:44:75:80:b2:27:a4:59:a3:ce:73:90:24:1f:d3:8b:a6:33:
         1c:14:08:00:15:b7:cb:f7:9c:a5:f3:3f:d9:ba:38:41:d2:a8:
         dd:f6:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:04 2024 by rpki-client on console-fra.rpki-client.org