Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File:                     vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier:          gDR9uV7pHw2WmVUHYayPYLjFREbuob23hmIzpIU2pGw=
Subject key identifier:   20:81:7A:48:E6:E6:AB:B8:EE:48:1B:F9:19:F7:2B:E1:81:3F:6C:4D
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer:       /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial:       018F8749903968AD1398B057ECA65D65D9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number:          0E48
Signing time:             Fri 17 May 2024 16:01:36 +0000
Manifest this update:     Fri 17 May 2024 16:01:36 +0000
Manifest next update:     Sat 18 May 2024 16:01:36 +0000
Files and hashes:         1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: IB36jPswXTnXSV7WHic8K+O+qUJZXrr35YfXX7db35M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:90:39:68:ad:13:98:b0:57:ec:a6:5d:65:d9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
        Validity
            Not Before: May 17 16:01:36 2024 GMT
            Not After : May 18 16:01:36 2024 GMT
        Subject: CN=20817a48e6e6abb8ee481bf919f72be1813f6c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:a3:5c:7d:85:5d:a3:cb:76:b5:61:95:45:
                    71:89:01:65:b4:70:ff:23:1a:3c:4d:36:16:28:ac:
                    8b:a2:c1:18:2a:3c:75:79:84:03:90:14:de:52:79:
                    30:90:ed:be:c5:a2:09:71:fd:24:8a:19:c8:2e:37:
                    2f:6b:74:ab:ee:82:e5:6e:e9:86:37:da:21:ef:34:
                    58:cd:ad:e3:af:55:a4:11:0d:66:86:8c:c7:c4:6d:
                    68:61:9a:40:10:b0:90:86:b9:32:6a:52:3e:c2:6f:
                    d6:af:65:2f:36:a4:63:d5:7f:63:9f:f0:43:62:61:
                    63:e9:f2:df:e3:a8:9c:17:77:59:67:c6:78:3f:f8:
                    35:cb:15:14:ca:55:d5:c9:fb:78:16:7f:41:0c:b1:
                    d8:2a:76:30:28:2e:76:a1:ad:e2:fe:e2:2c:7b:95:
                    03:3e:08:95:82:08:b8:b9:13:fe:33:89:dc:ae:16:
                    0f:8f:c7:30:c2:05:5c:38:0c:bd:78:50:f1:fe:f9:
                    b5:4e:79:76:35:5a:a1:e6:81:63:57:e0:a7:98:e2:
                    49:a0:c7:a3:d4:ca:80:ff:b9:07:bf:21:6c:00:26:
                    a7:1e:33:aa:fb:bf:0e:8c:0a:3f:5c:53:5b:74:83:
                    e0:67:4c:02:f9:14:a7:c4:48:00:33:94:1b:cd:50:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:81:7A:48:E6:E6:AB:B8:EE:48:1B:F9:19:F7:2B:E1:81:3F:6C:4D
            X509v3 Authority Key Identifier:
                keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e9:5a:d1:43:14:14:f5:e0:c3:29:ec:e3:b1:0c:fa:01:67:
         21:a8:18:98:d3:35:89:d8:32:b9:96:12:94:13:18:14:1d:6e:
         57:4a:07:58:46:64:a6:a8:c1:f1:ae:3d:65:bf:b7:1b:52:27:
         48:7d:2f:17:d1:a2:e3:d8:e0:c9:df:ee:d2:87:d9:fd:79:70:
         41:0a:4c:c7:16:4c:59:fc:18:a5:44:86:63:e8:56:a7:46:cc:
         16:62:ee:ba:d3:cd:94:48:ae:10:38:03:52:eb:2c:f5:20:61:
         48:c2:f1:fe:27:01:6f:e1:e4:8d:e9:11:b0:49:06:e7:eb:58:
         d9:7d:4c:3e:fa:54:21:5a:e0:9a:da:ea:06:d1:60:7c:da:ab:
         42:fe:e7:26:6c:b8:79:fb:83:4e:e2:96:28:7e:56:fc:0b:b1:
         e3:fd:d0:cc:7e:47:8c:09:17:01:27:b1:38:04:3e:27:e8:72:
         14:24:d0:4a:e6:30:c3:14:aa:7b:0d:54:3c:8c:ef:74:92:62:
         1f:6e:b9:80:b6:a7:23:bb:8a:c1:95:9b:a5:89:09:27:f9:e5:
         38:23:26:5f:50:04:8e:99:c6:14:53:92:ba:aa:53:69:f8:a4:
         1c:4f:ac:8c:00:a7:5e:05:fa:cd:16:9c:ef:e6:2f:0b:0b:16:
         66:27:01:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:46 2024 by rpki-client on console-fra.rpki-client.org