Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft
File:                     iF7nSXYIGvmeHXt0Btio9fbA97k.mft (raw, json)
Hash identifier:          JjoHGQyH5SV88bqZorlzr9JNOzK0YFPovJrk2Y59bmQ=
Subject key identifier:   40:CA:EF:94:C1:8F:B8:CC:03:9C:EE:3E:61:CC:DA:BB:6A:6A:36:B9
Authority key identifier: 88:5E:E7:49:76:08:1A:F9:9E:1D:7B:74:06:D8:A8:F5:F6:C0:F7:B9
Certificate issuer:       /CN=885ee74976081af99e1d7b7406d8a8f5f6c0f7b9
Certificate serial:       018F99BC5ADEF504F96687F72751CEB21A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iF7nSXYIGvmeHXt0Btio9fbA97k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft
Manifest number:          012E
Signing time:             Tue 21 May 2024 06:00:09 +0000
Manifest this update:     Tue 21 May 2024 06:00:09 +0000
Manifest next update:     Wed 22 May 2024 06:00:09 +0000
Files and hashes:         1: iF7nSXYIGvmeHXt0Btio9fbA97k.crl (hash: r+XpTK1rwSMkByyUE9u/qwl7KVX1CxxC2P4C5EARIKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iF7nSXYIGvmeHXt0Btio9fbA97k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:bc:5a:de:f5:04:f9:66:87:f7:27:51:ce:b2:1a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885ee74976081af99e1d7b7406d8a8f5f6c0f7b9
        Validity
            Not Before: May 21 06:00:09 2024 GMT
            Not After : May 22 06:00:09 2024 GMT
        Subject: CN=40caef94c18fb8cc039cee3e61ccdabb6a6a36b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:34:09:b1:ac:50:44:2f:59:a1:d8:69:b8:
                    31:70:9e:ef:9d:65:7d:6a:ef:3f:9c:86:75:f9:69:
                    4c:70:0d:21:70:a5:d2:a2:f5:1e:05:ca:55:ab:59:
                    05:2f:2d:b4:8b:90:02:fd:e5:5a:cd:55:24:82:97:
                    9d:a1:02:62:5e:96:0b:2c:8a:72:aa:a1:eb:8c:80:
                    d5:57:1f:15:1b:8e:17:cb:54:ab:3d:bf:1b:12:b0:
                    b0:4e:27:3d:18:31:b2:64:2d:2e:c2:cf:05:73:68:
                    f4:fb:8b:e9:61:b7:7e:72:b7:9c:fc:fd:21:56:a0:
                    92:a4:54:cf:5b:ff:13:cc:1d:60:dd:e2:9b:a0:6b:
                    3b:87:f3:29:c9:68:5a:49:de:d9:51:5c:85:db:a5:
                    c8:5b:19:7f:be:c4:0c:63:b3:d9:8f:d3:b9:f2:dd:
                    b3:7b:59:ba:bc:8a:be:c3:b4:34:6b:84:cf:8a:2f:
                    69:ea:dd:a4:32:f0:88:e1:d3:64:d2:84:75:34:7c:
                    d2:f2:c3:8e:9e:70:49:d5:f2:a5:a7:2c:66:b9:83:
                    3c:c6:30:5b:16:11:3f:a1:95:34:8d:77:11:0e:04:
                    57:f0:b8:46:b3:2f:0d:5f:5b:47:13:e9:14:2a:e8:
                    4f:20:51:64:a0:31:d8:84:3b:46:a7:30:97:34:e7:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CA:EF:94:C1:8F:B8:CC:03:9C:EE:3E:61:CC:DA:BB:6A:6A:36:B9
            X509v3 Authority Key Identifier:
                keyid:88:5E:E7:49:76:08:1A:F9:9E:1D:7B:74:06:D8:A8:F5:F6:C0:F7:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF7nSXYIGvmeHXt0Btio9fbA97k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:fb:5c:16:76:14:05:19:ff:5c:78:65:cc:03:23:dd:e8:62:
         24:5f:b9:ba:81:85:97:8b:b3:9f:cb:09:1e:94:ba:0f:7f:be:
         2e:3c:82:98:59:58:59:54:55:42:d4:4f:f2:b6:01:7b:3c:9f:
         c8:d2:2c:c9:70:90:db:69:36:28:17:8c:61:69:78:94:f1:0e:
         62:30:0d:eb:3a:26:4e:c2:5a:21:57:62:21:18:b1:52:d3:3c:
         0e:9c:75:3c:c2:ff:2a:1e:88:ad:3b:41:94:41:fb:80:a9:7a:
         88:4b:02:ab:f2:b6:39:79:7b:02:2d:b2:0f:c4:78:97:43:99:
         de:be:99:e0:ef:62:d6:7a:37:01:e9:36:a4:16:97:45:95:c1:
         a5:8d:14:66:8d:8c:81:1d:b8:4f:b8:aa:1f:12:a6:1d:12:2b:
         1f:d1:e7:e7:24:34:8c:d5:73:dd:3d:f4:be:38:2f:52:9a:59:
         13:5f:7d:00:b8:71:66:0b:92:f7:e0:6e:e4:9e:7b:38:dc:9b:
         fd:86:56:26:7d:5c:5b:d8:53:15:c4:6c:b0:9c:8d:4c:17:65:
         db:79:10:d2:de:21:12:ff:af:23:54:b8:5b:6b:a4:60:de:9a:
         23:ef:1a:9d:3d:e8:66:98:b8:7d:5d:b7:50:6e:76:f0:23:cf:
         56:99:9f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:50:54 2024 by rpki-client on console-fra.rpki-client.org