Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
File:                     lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json)
Hash identifier:          FcU4NM1n1YIH+eB0k5iYC0o59CvdGuYfFMCtI31NcV4=
Subject key identifier:   90:76:2D:CF:82:78:A4:53:72:6D:B4:9B:3B:FF:EF:10:85:6C:92:89
Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Certificate issuer:       /CN=960e68c8389b09dc345464a400af276568e7f96a
Certificate serial:       018F87ED5AB5231E7951B02C11352FB17FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
Manifest number:          09FA
Signing time:             Fri 17 May 2024 19:00:30 +0000
Manifest this update:     Fri 17 May 2024 19:00:30 +0000
Manifest next update:     Sat 18 May 2024 19:00:30 +0000
Files and hashes:         1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: eUz09GFBLYSSW/MSDS83lA1o7kZGK9sSN0ukdVOJhec=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:5a:b5:23:1e:79:51:b0:2c:11:35:2f:b1:7f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a
        Validity
            Not Before: May 17 19:00:30 2024 GMT
            Not After : May 18 19:00:30 2024 GMT
        Subject: CN=90762dcf8278a453726db49b3bffef10856c9289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:31:61:47:be:58:02:05:5f:0c:be:21:3c:
                    6a:cb:4a:c9:c2:ca:76:3b:50:b4:61:c9:1b:b3:81:
                    d7:1c:9a:91:11:1c:d2:69:7a:9a:bc:cf:8b:11:24:
                    d9:89:3d:bc:0c:dc:ee:4d:2c:d6:dd:48:ef:de:70:
                    55:c8:4c:b4:a0:24:f1:32:ac:3a:3c:aa:20:75:a4:
                    76:9b:4c:36:77:8b:ae:8b:60:d9:52:fe:e0:cb:79:
                    c8:e3:1a:fb:96:bc:a0:6a:bb:27:cf:f0:6d:65:9c:
                    98:83:97:6f:01:5c:86:7f:53:45:cd:fd:a1:49:b0:
                    90:11:23:d2:20:41:23:01:68:8b:d9:54:fe:b1:8d:
                    a4:1a:20:d9:8f:35:93:30:73:e7:f9:05:9b:53:9a:
                    5f:7f:28:3c:41:32:6e:54:66:b0:f3:42:65:35:84:
                    c4:a0:0b:5a:b0:a1:86:3c:cc:04:75:8e:95:ba:4e:
                    66:22:3c:82:69:29:62:25:33:c4:c6:7d:55:be:65:
                    7c:a0:90:8e:0c:0d:d5:e8:77:32:df:13:44:07:6d:
                    c8:15:be:e4:3a:be:99:bd:76:90:09:a5:88:00:c7:
                    e1:12:3c:3c:7e:20:ab:f8:bb:29:2e:39:1a:7f:c7:
                    88:a2:fe:68:f9:40:48:aa:7c:d5:e4:65:e1:cd:a9:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:76:2D:CF:82:78:A4:53:72:6D:B4:9B:3B:FF:EF:10:85:6C:92:89
            X509v3 Authority Key Identifier:
                keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:9f:cb:b9:ae:71:4e:2f:1d:5f:40:4e:0a:bb:66:24:26:09:
         f7:b6:f0:99:ac:d7:f3:72:d6:79:b6:48:bf:f1:c8:39:dd:ca:
         75:7b:05:81:02:e3:8d:09:ec:7e:32:51:7c:f9:a6:9f:a1:89:
         28:21:9e:2d:4e:15:0b:50:61:0c:50:3a:87:da:54:e1:42:8f:
         f9:15:68:48:b0:4d:ab:02:d7:1f:ea:a1:dc:d1:4c:62:cf:85:
         0d:11:72:a1:8e:57:06:f6:cd:0a:64:84:fc:6d:79:0c:1b:79:
         af:ff:ee:f9:f0:85:ba:2c:f0:1d:32:89:a9:f4:f8:24:46:29:
         cd:da:7d:17:94:a2:70:59:7d:cb:9b:e8:8d:2a:d6:60:2a:8f:
         03:63:b3:0b:9d:7d:dd:4c:6a:eb:94:b3:87:0b:fa:0b:a5:09:
         a3:82:81:b7:6c:68:19:2e:71:b1:b1:23:72:b2:56:12:e3:41:
         92:c2:56:59:5c:e7:fc:96:c2:4a:e5:93:e1:62:7f:c2:8e:e4:
         9e:c5:cb:9e:4d:00:6a:8a:f2:a0:62:2f:e1:0c:ef:25:30:63:
         47:3a:2a:e8:e9:92:74:a3:a4:9c:40:1e:38:35:d2:6b:b8:e6:
         35:77:94:c2:1a:b4:8b:fe:b5:ae:5d:20:8d:9d:a6:f3:5d:d4:
         4f:c6:7f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:10:48 2024 by rpki-client on console-ams.rpki-client.org