Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File:                     5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier:          ko33KSe57dYRTp3IkUsz3MeILsTx0M66NUDqCaNCRHU=
Subject key identifier:   C0:C9:60:2F:69:68:E1:D1:63:0F:CC:F1:B1:AF:49:37:2E:55:34:12
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer:       /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial:       018F3BF954C5B1B6541FD46F9A43AB52EF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number:          114C
Signing time:             Fri 03 May 2024 01:02:26 +0000
Manifest this update:     Fri 03 May 2024 01:02:26 +0000
Manifest next update:     Sat 04 May 2024 01:02:26 +0000
Files and hashes:         1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: AqkuUqnzbsOiFsq90GB+nGB/wBasB01G+Ldz2bVr6PA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:54:c5:b1:b6:54:1f:d4:6f:9a:43:ab:52:ef:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
        Validity
            Not Before: May  3 01:02:26 2024 GMT
            Not After : May  4 01:02:26 2024 GMT
        Subject: CN=c0c9602f6968e1d1630fccf1b1af49372e553412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6d:9f:03:93:13:26:4b:1c:44:e4:3c:25:df:
                    d8:76:82:13:2c:f0:15:7f:69:a2:a5:07:58:eb:97:
                    93:10:7e:da:cd:f6:20:f5:62:63:18:c9:2f:94:2b:
                    12:9d:c6:02:0e:e1:92:b2:b2:ff:10:8f:b3:a6:94:
                    d1:ef:66:d2:06:c4:51:38:81:6d:6b:ce:1a:f9:74:
                    4c:50:4b:b7:0e:54:89:22:47:bf:5e:61:a5:ab:f9:
                    b5:3d:f6:2e:08:a1:40:77:ae:f1:e9:49:84:b4:c8:
                    6b:54:ec:37:fa:79:d6:d5:14:46:9c:01:cd:b4:dd:
                    ed:23:2e:33:3c:63:1e:a0:f8:b8:f5:25:71:5b:07:
                    fc:80:6c:ef:b8:f9:bd:25:26:77:21:db:90:c3:e6:
                    65:6d:3a:f5:98:d1:81:04:f1:1a:48:55:22:4c:93:
                    e6:0f:26:8c:d6:da:5e:00:da:84:f9:c5:80:17:7a:
                    6c:d0:f5:47:9e:62:1d:99:68:55:f3:3c:5e:86:cb:
                    d4:8a:22:d3:54:6c:24:76:3b:c1:68:16:a4:88:2a:
                    f3:a0:e4:87:e3:64:74:e7:2f:6b:3d:d2:40:bd:fb:
                    46:93:34:77:19:78:86:c4:5f:00:ff:09:77:26:d2:
                    dc:24:93:2d:75:f5:41:bb:8c:f9:4f:44:1b:02:d8:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C9:60:2F:69:68:E1:D1:63:0F:CC:F1:B1:AF:49:37:2E:55:34:12
            X509v3 Authority Key Identifier:
                keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:fe:69:5e:1b:23:56:ed:20:58:43:cf:4e:f0:a2:8f:b4:96:
         3e:de:48:66:c7:06:48:6a:d7:91:fd:2d:93:62:68:4c:07:09:
         77:e9:ca:63:5b:41:7a:2f:1a:f2:a4:1d:46:56:7f:37:da:8a:
         c6:f5:5d:10:ac:93:03:d6:ce:2f:b0:58:4a:ff:03:8c:d4:4e:
         ef:c4:1c:0f:1b:c3:05:86:15:18:b4:bf:6b:c0:eb:ff:bd:1e:
         f9:ed:d4:fd:48:82:2a:ff:14:f1:7a:1b:5f:9a:de:00:bb:17:
         3a:09:38:37:d3:a9:32:b4:32:9d:8f:63:46:d4:e4:ee:78:2b:
         56:eb:36:e7:f7:7a:58:5a:8d:40:6b:d1:e6:47:37:07:58:65:
         ec:48:99:cc:aa:da:44:72:80:68:09:5e:e7:96:b0:df:3a:47:
         3b:1f:eb:04:fe:56:65:72:44:d7:97:76:f6:d3:5f:54:78:41:
         3f:a6:0a:26:f8:16:5a:84:1f:d8:76:6f:4d:c1:f2:f1:f6:3a:
         52:04:69:0d:20:ff:27:12:39:12:6b:6e:78:cb:15:47:a8:dc:
         e8:25:24:9b:a5:bd:e3:f7:77:c1:09:1e:b6:de:ca:a3:9a:ef:
         f9:cc:74:75:8f:11:ac:92:9b:76:e8:e7:54:58:85:40:17:b1:
         a3:63:14:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:35:09 2024 by rpki-client on console-ams.rpki-client.org