Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
File:                     AonuzqJ5QTJX2JCMJVaKvrivhnc.mft (raw, json)
Hash identifier:          ljd2hk9GQHDhkxDZzFwEOcVK9ZQHr5YdmUkEw9XmEtM=
Subject key identifier:   45:04:3D:BF:40:99:B9:C8:D4:F0:D7:4C:2A:94:7E:39:AC:9A:31:2C
Authority key identifier: 02:89:EE:CE:A2:79:41:32:57:D8:90:8C:25:56:8A:BE:B8:AF:86:77
Certificate issuer:       /CN=0289eecea279413257d8908c25568abeb8af8677
Certificate serial:       018F369AFD6881F1DF2B7B0C20005CC62B3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
Manifest number:          06C5
Signing time:             Thu 02 May 2024 00:01:17 +0000
Manifest this update:     Thu 02 May 2024 00:01:17 +0000
Manifest next update:     Fri 03 May 2024 00:01:17 +0000
Files and hashes:         1: AonuzqJ5QTJX2JCMJVaKvrivhnc.crl (hash: BEVMjLKqHvAGAB10/HTuuKhjvDnMXwzfnOzUKPxFgCQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:9a:fd:68:81:f1:df:2b:7b:0c:20:00:5c:c6:2b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0289eecea279413257d8908c25568abeb8af8677
        Validity
            Not Before: May  2 00:01:17 2024 GMT
            Not After : May  3 00:01:17 2024 GMT
        Subject: CN=45043dbf4099b9c8d4f0d74c2a947e39ac9a312c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5e:45:14:cb:e6:31:0b:ec:ac:f8:ea:5d:46:
                    6d:b5:74:f0:4a:ff:11:e2:cb:74:b0:b8:57:d7:88:
                    fb:1e:f3:f1:0b:b6:09:3f:ec:a6:36:d5:0c:e3:e2:
                    66:fb:fe:e6:10:38:c5:87:e3:a4:f4:61:3a:5a:ef:
                    fa:f9:25:1b:d1:e7:6f:0d:13:fe:6c:58:67:02:8d:
                    dd:ae:db:ee:69:f4:c8:80:87:47:24:13:9c:c9:a5:
                    0a:d4:ef:7d:9c:dc:0b:b0:71:38:f9:80:a3:93:1b:
                    bd:f7:f1:f4:8a:50:4c:bb:83:7d:3c:3b:da:0e:08:
                    3c:3e:99:ef:09:4d:97:06:b7:b3:8d:84:44:d6:37:
                    cf:3d:84:46:ba:ef:d0:41:dc:95:9e:4f:2a:f5:15:
                    de:74:78:c8:5d:3f:c5:d8:e1:c7:8a:c2:26:b6:48:
                    57:8b:5e:bc:73:7b:12:3c:b4:80:ed:cf:1b:cf:8e:
                    6a:3f:be:52:21:24:cd:61:1c:62:cf:2d:f5:92:5a:
                    b1:6b:0c:38:ba:09:ec:c7:f0:90:0a:08:13:d1:ee:
                    ac:0f:a1:56:94:d2:67:aa:c5:bf:54:1d:6b:83:c2:
                    18:80:41:00:6b:08:dd:9e:23:6f:1d:d5:29:49:e5:
                    9c:e1:9b:72:f9:99:6b:82:8b:e6:98:4f:57:23:4e:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:04:3D:BF:40:99:B9:C8:D4:F0:D7:4C:2A:94:7E:39:AC:9A:31:2C
            X509v3 Authority Key Identifier:
                keyid:02:89:EE:CE:A2:79:41:32:57:D8:90:8C:25:56:8A:BE:B8:AF:86:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e6:b5:98:21:17:f6:34:f7:69:3b:54:2b:b9:10:86:f5:fe:
         f5:9a:61:64:01:4e:a8:05:19:4f:91:a6:6f:1c:99:d0:c3:0d:
         7d:95:4c:db:ee:36:81:66:e0:3b:4e:07:95:d9:f8:da:a3:c8:
         e8:ee:2e:bc:18:9f:35:f8:09:f6:e7:c8:8d:45:9b:1a:07:ce:
         e1:3d:49:d7:17:38:8b:dc:71:9f:10:6b:71:db:b1:db:63:9e:
         e3:43:10:11:10:91:17:bc:84:a3:07:82:e6:13:11:e3:a6:8c:
         dd:c2:3b:dd:22:b9:a5:1a:b9:17:8c:4c:22:25:b7:56:f0:37:
         55:b7:43:6b:e1:19:a7:66:55:a3:34:e7:07:48:6c:a0:06:b2:
         03:22:0a:fc:1f:80:94:f5:d8:e0:64:53:75:13:5f:40:f1:3e:
         1a:1b:1c:2c:ce:6f:53:6d:7f:f1:43:0a:50:08:c5:fc:23:03:
         d1:ea:7a:c1:f7:3b:02:43:50:76:bc:ef:d9:5b:1e:ac:9a:a9:
         99:c2:e8:39:61:9f:ae:a9:ec:c2:8b:c9:ff:99:53:39:d2:b4:
         60:de:3c:6c:01:40:8b:ed:50:93:d8:66:34:e6:99:1d:fd:e6:
         a5:a2:b4:32:b5:c1:a8:2c:dd:0f:22:ca:bd:2b:06:df:d6:a1:
         dd:0f:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:42:09 2024 by rpki-client on console-fra.rpki-client.org