Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.mft
File:                     _pjv555h1dHHiOpVM5rBbHMeJqA.mft (raw, json)
Hash identifier:          Q2T6eJh1JyoBxdW+/iX0nodmXmdqiswLPLUh3eySm3M=
Subject key identifier:   38:F7:FE:A7:62:B0:0C:17:C9:38:54:2D:1B:9D:0A:F1:A8:C2:FF:40
Authority key identifier: FE:98:EF:E7:9E:61:D5:D1:C7:88:EA:55:33:9A:C1:6C:73:1E:26:A0
Certificate issuer:       /CN=fe98efe79e61d5d1c788ea55339ac16c731e26a0
Certificate serial:       018F874A4A18A99640135C48692567F0A049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_pjv555h1dHHiOpVM5rBbHMeJqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.mft
Manifest number:          0DC2
Signing time:             Fri 17 May 2024 16:02:23 +0000
Manifest this update:     Fri 17 May 2024 16:02:23 +0000
Manifest next update:     Sat 18 May 2024 16:02:23 +0000
Files and hashes:         1: _pjv555h1dHHiOpVM5rBbHMeJqA.crl (hash: Sewh1t9/QwoPaQYgVozzws1YnShbL1cbCuyuu13bXQk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_pjv555h1dHHiOpVM5rBbHMeJqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:4a:18:a9:96:40:13:5c:48:69:25:67:f0:a0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe98efe79e61d5d1c788ea55339ac16c731e26a0
        Validity
            Not Before: May 17 16:02:23 2024 GMT
            Not After : May 18 16:02:23 2024 GMT
        Subject: CN=38f7fea762b00c17c938542d1b9d0af1a8c2ff40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:f2:d5:e2:79:94:16:ec:e0:c3:98:42:11:
                    be:14:82:55:c8:53:3b:f4:41:4a:dd:2e:64:68:08:
                    ae:76:9e:80:4b:09:9e:04:fa:97:c7:60:6f:d1:5f:
                    1e:09:95:47:41:41:4c:ac:dc:4b:7e:cc:29:57:f7:
                    1d:14:00:6b:a9:14:41:0d:38:d0:3d:58:79:f3:64:
                    10:58:48:73:3f:2a:8d:6f:3b:1f:c5:bf:9f:ce:c7:
                    3d:3b:0c:06:a6:23:51:84:e7:70:31:f2:89:98:84:
                    d3:b8:24:ce:26:92:83:b9:2c:65:70:a2:2e:c4:72:
                    6e:f5:a9:6c:83:07:df:48:1a:db:2d:89:58:e2:24:
                    68:4e:ed:14:83:8e:9e:1d:1e:57:fa:92:5a:8b:04:
                    a5:34:23:c4:8f:10:f4:8a:59:5e:98:eb:3a:9b:ba:
                    47:ce:dc:ed:ba:85:65:92:6e:5d:ad:e3:d5:0d:a6:
                    31:be:6a:87:67:95:12:74:e4:59:9d:fa:fe:c0:2a:
                    85:83:91:73:f8:66:56:d2:9b:2d:79:40:fa:9a:30:
                    fc:db:26:7c:1b:73:3f:ee:04:15:f2:3c:78:16:0d:
                    47:58:53:e0:2e:e5:e2:ce:6b:78:6e:01:20:ac:6e:
                    a4:63:57:66:fb:99:75:01:3f:33:02:75:27:47:ba:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:FE:A7:62:B0:0C:17:C9:38:54:2D:1B:9D:0A:F1:A8:C2:FF:40
            X509v3 Authority Key Identifier:
                keyid:FE:98:EF:E7:9E:61:D5:D1:C7:88:EA:55:33:9A:C1:6C:73:1E:26:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pjv555h1dHHiOpVM5rBbHMeJqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1e25f6-5d37-4da3-b58e-3d9ce1332be1/1/_pjv555h1dHHiOpVM5rBbHMeJqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c0:ed:69:27:ef:03:05:0e:f1:0b:47:df:90:3d:fe:aa:10:
         89:90:e1:1e:73:3c:a0:d7:b2:ea:5d:53:8b:45:23:7d:51:25:
         af:7a:20:67:18:1c:4c:fd:4e:ba:22:86:55:cb:07:d5:a0:d6:
         dd:7e:b0:a5:0a:c8:69:1c:cc:0a:2b:93:bf:72:2c:03:aa:a0:
         e3:56:dc:3c:87:54:dd:14:9c:c6:a0:68:32:f1:16:d3:66:6d:
         da:b5:cc:73:be:12:d3:50:7b:1d:1c:61:a6:63:dd:49:f7:88:
         9a:4c:29:ff:fa:18:48:52:cb:e4:e3:be:3e:4f:92:c2:0a:25:
         44:5f:82:27:a2:3c:43:48:d8:16:72:e2:1a:90:89:37:81:0a:
         02:24:21:85:8a:18:69:4f:68:de:ac:4c:e5:f8:b0:ef:08:9e:
         f2:3f:a0:8e:bd:32:fd:0c:53:99:ab:ec:85:5c:75:a8:35:27:
         34:40:cd:13:c6:5d:ab:42:57:f6:28:89:b7:a2:d5:b2:ed:8e:
         1b:72:91:90:93:69:bf:31:ba:f4:1a:2b:69:5f:ae:b5:17:a2:
         24:97:9b:dc:ca:da:b3:80:9c:35:17:36:ff:95:d8:eb:98:00:
         92:3c:b0:da:84:5b:83:ce:41:6a:ff:97:80:a4:5b:6e:bb:43:
         76:1b:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:50:05 2024 by rpki-client on console-ams.rpki-client.org