Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
File:                     dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft (raw, json)
Hash identifier:          nRb68zsb4KNzUf1g+oGtv0ymh03y3MncNqRB6LeTch4=
Subject key identifier:   5B:87:80:03:F1:69:D9:62:15:52:D7:6C:6E:1B:8C:0F:1D:37:5C:18
Authority key identifier: 74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
Certificate issuer:       /CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Certificate serial:       018F874885A1DEF07FAF1CEEBC0BA62B113B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
Manifest number:          036D
Signing time:             Fri 17 May 2024 16:00:28 +0000
Manifest this update:     Fri 17 May 2024 16:00:28 +0000
Manifest next update:     Sat 18 May 2024 16:00:28 +0000
Files and hashes:         1: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl (hash: TJ6RehSsVuccmmNlS3PsKM66UyEi1eg7AnH2pG6F4y8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:85:a1:de:f0:7f:af:1c:ee:bc:0b:a6:2b:11:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74230d142eec7f6a99b0db4096f93a0420483fe6
        Validity
            Not Before: May 17 16:00:28 2024 GMT
            Not After : May 18 16:00:28 2024 GMT
        Subject: CN=5b878003f169d9621552d76c6e1b8c0f1d375c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:6b:71:8e:9b:82:07:2c:3a:52:70:80:d3:
                    c5:c2:e0:62:ec:2b:26:d3:4f:ae:a1:1b:07:79:bd:
                    26:ce:31:12:55:6c:a9:47:cf:93:60:af:a0:ce:d0:
                    54:c4:7a:0d:64:87:a6:b9:2b:b4:87:93:c1:ba:24:
                    03:ad:8c:7a:49:26:5a:a5:b6:8f:e9:6f:b9:df:90:
                    7a:87:56:ed:6d:af:50:b3:02:24:f9:89:9c:fd:6b:
                    2e:d5:f1:ae:4a:93:e8:19:98:64:f3:3b:d3:5b:d2:
                    23:28:3e:0f:aa:be:5a:1b:45:f5:24:e6:be:d2:87:
                    a8:e7:30:e4:1c:c1:f2:ba:9f:e4:7b:91:fa:7e:46:
                    60:c8:66:ec:f4:1a:02:a4:e5:6f:01:a8:21:7a:22:
                    f5:05:01:d7:fd:d6:1e:1f:52:69:56:1f:c2:9f:7f:
                    9a:36:7c:af:3f:27:81:55:8b:96:34:0b:74:3b:af:
                    71:32:d9:b6:76:da:39:98:ad:89:b5:9a:03:71:32:
                    91:86:ff:69:d8:d4:10:c4:33:a9:8c:df:29:09:e7:
                    15:28:47:9b:2e:5a:44:0a:80:61:40:7f:fa:95:e7:
                    69:aa:4f:77:d4:d5:9c:ff:1e:a4:d4:b9:48:fa:a7:
                    72:03:88:53:f4:3f:b9:37:f9:ae:b8:ff:05:25:ae:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:87:80:03:F1:69:D9:62:15:52:D7:6C:6E:1B:8C:0F:1D:37:5C:18
            X509v3 Authority Key Identifier:
                keyid:74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e5:83:9e:d4:bb:f4:e5:ad:d6:e8:b2:ee:62:af:88:3a:3c:
         c4:c3:43:a2:bc:de:e9:d0:d3:9e:2c:19:04:06:0d:b9:2e:35:
         27:92:af:58:0e:99:27:f3:44:dd:ae:c1:a1:8f:90:83:c9:6e:
         a1:0d:7a:98:e1:f9:30:bd:b5:fb:20:0e:19:65:a5:7b:db:8d:
         2e:85:07:f5:5a:dd:bf:53:cf:c4:f6:ae:fb:2f:09:47:0a:97:
         af:ad:2f:05:26:70:5e:f9:ac:81:ab:b7:72:45:0f:8f:b7:e2:
         bf:30:9d:2b:aa:be:75:66:9d:09:90:e9:10:79:c5:27:29:41:
         b8:2d:54:74:38:2d:d3:91:a6:ee:38:8b:24:46:42:aa:0e:66:
         c4:24:58:d4:d9:58:5f:ac:82:78:10:91:b9:77:42:b6:3d:3d:
         ec:2f:b0:09:28:02:8b:43:9a:2e:08:86:3e:36:aa:9b:ac:89:
         95:23:78:28:f0:f8:69:16:52:f0:9c:bc:2d:a4:92:dd:25:3d:
         0f:37:eb:12:88:a7:fb:a0:90:ec:b9:85:50:2f:e0:6a:a5:16:
         fd:db:65:6a:97:2c:12:01:3c:77:9d:cc:f4:b1:32:69:ee:11:
         5f:26:da:bc:c6:c0:85:31:4e:18:c3:f3:9c:dd:35:f3:3f:28:
         45:87:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:06 2024 by rpki-client on console-fra.rpki-client.org