Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6fa417-3ae6-43ac-a844-a7c62eba7bc0/1/1s5abikpiZKz5F-MlICVSbpE7yQ.mft
File:                     1s5abikpiZKz5F-MlICVSbpE7yQ.mft (raw, json)
Hash identifier:          8ghtBciDKz6lJ2QXaz1S0HOUpsbEfCYNbECoaBBpJVs=
Subject key identifier:   4D:CC:91:3D:2B:0A:AA:83:C5:39:10:98:10:C4:34:C0:03:A0:3D:87
Authority key identifier: D6:CE:5A:6E:29:29:89:92:B3:E4:5F:8C:94:80:95:49:BA:44:EF:24
Certificate issuer:       /CN=d6ce5a6e29298992b3e45f8c94809549ba44ef24
Certificate serial:       018F874A713C5491F9F88A42CF61D56206A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1s5abikpiZKz5F-MlICVSbpE7yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/6fa417-3ae6-43ac-a844-a7c62eba7bc0/1/1s5abikpiZKz5F-MlICVSbpE7yQ.mft
Manifest number:          01A4
Signing time:             Fri 17 May 2024 16:02:33 +0000
Manifest this update:     Fri 17 May 2024 16:02:33 +0000
Manifest next update:     Sat 18 May 2024 16:02:33 +0000
Files and hashes:         1: 1s5abikpiZKz5F-MlICVSbpE7yQ.crl (hash: IMRbzUQudGsZ9Vhx8IlsUOFKBCsTxzXAYChsZR2L7tI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/6fa417-3ae6-43ac-a844-a7c62eba7bc0/1/1s5abikpiZKz5F-MlICVSbpE7yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/6fa417-3ae6-43ac-a844-a7c62eba7bc0/1/1s5abikpiZKz5F-MlICVSbpE7yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1s5abikpiZKz5F-MlICVSbpE7yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:71:3c:54:91:f9:f8:8a:42:cf:61:d5:62:06:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ce5a6e29298992b3e45f8c94809549ba44ef24
        Validity
            Not Before: May 17 16:02:33 2024 GMT
            Not After : May 18 16:02:33 2024 GMT
        Subject: CN=4dcc913d2b0aaa83c539109810c434c003a03d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7f:ac:15:9b:91:15:92:d2:ce:8a:ee:87:e2:
                    49:7d:e6:a0:cc:15:3a:f7:71:92:1b:af:52:a6:77:
                    ba:cd:5c:8c:7c:97:80:82:8d:15:d5:79:53:5a:35:
                    c5:05:d7:43:13:f9:2e:9d:bd:9c:2f:13:ae:fc:e9:
                    5e:b2:6c:44:30:69:f6:b7:a9:e5:57:ea:3a:90:ac:
                    57:13:0c:e7:a7:94:7e:5d:be:a8:3a:4e:d7:e7:6e:
                    e4:19:e6:77:92:f5:e5:46:0d:19:a9:69:82:2a:1e:
                    ef:3b:4f:45:6f:9e:9b:7e:df:62:86:1d:ee:c3:7b:
                    3b:c5:1f:64:1c:12:da:60:6d:6c:22:63:ad:86:6a:
                    da:d4:de:28:38:0e:15:fe:3b:f2:7d:08:e9:6b:46:
                    a7:5d:bd:a0:f5:8f:b5:a3:0b:ac:e9:ed:04:ce:7f:
                    07:e9:84:36:07:39:43:60:5d:07:b3:3d:0d:bd:85:
                    f3:dd:cc:e4:1f:b2:dd:aa:be:b6:85:19:54:ef:28:
                    d8:1d:9c:4e:1e:42:9e:15:4d:3a:7e:e4:46:10:f2:
                    5c:a0:3d:02:5e:e8:15:0e:6d:ce:df:a7:24:93:77:
                    ae:06:f3:2f:6c:b0:8a:14:19:3b:5d:b0:d0:8a:67:
                    32:5c:7c:25:9e:da:70:99:2e:74:0d:55:4f:7b:18:
                    d5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CC:91:3D:2B:0A:AA:83:C5:39:10:98:10:C4:34:C0:03:A0:3D:87
            X509v3 Authority Key Identifier:
                keyid:D6:CE:5A:6E:29:29:89:92:B3:E4:5F:8C:94:80:95:49:BA:44:EF:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5abikpiZKz5F-MlICVSbpE7yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6fa417-3ae6-43ac-a844-a7c62eba7bc0/1/1s5abikpiZKz5F-MlICVSbpE7yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6fa417-3ae6-43ac-a844-a7c62eba7bc0/1/1s5abikpiZKz5F-MlICVSbpE7yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:78:c6:0f:5a:bc:a5:20:58:b0:a6:d6:4b:08:c1:aa:74:
         d8:b0:ef:40:d0:d9:26:fc:61:1d:c1:53:42:8d:13:73:75:56:
         f9:d9:4f:fc:48:1f:23:7e:d2:1d:e3:89:f7:ee:a5:68:57:95:
         da:3b:95:48:74:be:68:7c:a6:89:f0:54:f2:2f:cb:63:4a:03:
         6f:8e:94:04:b9:8e:be:da:b1:97:b1:ea:33:e9:36:f4:f0:b4:
         c0:9d:fa:e0:13:4e:83:fe:d5:f6:02:13:80:e9:1e:21:87:ad:
         0c:15:77:bc:b3:1e:48:a1:9a:da:62:e4:56:da:56:19:bf:da:
         98:8c:87:39:23:84:eb:2b:23:56:5e:6a:da:cb:92:37:4e:1f:
         8d:69:be:2d:67:85:09:04:a9:f1:bf:2a:e4:30:df:8e:33:3f:
         af:a2:c1:1b:c7:27:c8:5e:fa:eb:2a:14:2b:d3:6b:e1:19:f5:
         01:50:8f:29:e3:3a:af:75:75:3a:8e:52:be:02:c7:66:32:c4:
         ba:41:ff:5a:2c:92:85:ab:60:63:54:7d:f1:00:f7:47:d4:08:
         e8:cf:8b:4f:ec:6d:0f:74:0b:79:49:af:dc:cc:5c:b2:58:ab:
         e8:c7:8e:a2:72:75:13:ce:10:89:64:50:ed:a1:c1:cb:9f:84:
         89:15:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:16 2024 by rpki-client on console-ams.rpki-client.org