Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
File:                     d7tRRrULW8gaNXR6K75lKqC3Fnw.mft (raw, json)
Hash identifier:          Rx7zj9tVgz/IXkDytJEtCwxoNSOwGNpwT3yf6dbDwXc=
Subject key identifier:   5D:18:91:44:EB:6A:9F:1E:F0:25:8B:22:01:3C:E2:C5:75:EE:6B:6D
Authority key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
Certificate issuer:       /CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Certificate serial:       018F88240C4A46FD84708F6C093F38363CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
Manifest number:          0E1D
Signing time:             Fri 17 May 2024 20:00:14 +0000
Manifest this update:     Fri 17 May 2024 20:00:14 +0000
Manifest next update:     Sat 18 May 2024 20:00:14 +0000
Files and hashes:         1: d7tRRrULW8gaNXR6K75lKqC3Fnw.crl (hash: addYnPTVlNnRA6UR4Re561r1D0mUDdDUSyZ/Jz/ff9E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:0c:4a:46:fd:84:70:8f:6c:09:3f:38:36:3c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
        Validity
            Not Before: May 17 20:00:14 2024 GMT
            Not After : May 18 20:00:14 2024 GMT
        Subject: CN=5d189144eb6a9f1ef0258b22013ce2c575ee6b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:e7:c6:f4:6a:0f:c7:f8:09:b6:5c:d0:f5:
                    e6:2c:9c:48:99:28:9b:58:01:06:8d:c1:4e:df:78:
                    03:bb:3e:b2:38:20:72:cf:7a:f7:14:2f:dd:38:25:
                    a6:5e:2e:a2:77:fa:01:94:0c:45:4f:87:79:8c:f5:
                    c4:3e:f7:d8:bd:b9:f6:4c:09:54:b6:9e:1f:71:7e:
                    82:38:d1:00:70:65:1e:4f:88:bc:75:ae:2e:a5:dc:
                    1f:c7:d7:67:bd:21:ad:7e:bc:bb:53:df:c4:9d:c0:
                    95:26:35:e1:dc:8d:f9:8a:9e:5f:32:c3:9c:f6:9f:
                    48:bb:1e:ef:7f:bf:04:3a:7d:38:e1:34:39:ea:b7:
                    a1:65:e4:bf:e5:0a:17:aa:e0:21:ef:f4:67:86:d4:
                    59:45:1f:79:a0:b0:cd:27:4a:bd:5e:b7:c7:27:19:
                    3c:4d:25:87:4b:91:7c:ec:1d:a3:5c:c6:71:51:11:
                    8e:db:ea:f6:d2:0c:ab:86:db:ea:62:ca:6c:1a:a7:
                    53:01:c3:00:b1:a8:33:b5:3d:5a:01:77:fe:65:1a:
                    d1:11:f5:bd:9b:0b:52:3a:34:50:60:4c:be:ae:9b:
                    34:5a:26:49:ee:43:93:61:ea:ce:be:76:6b:af:57:
                    db:47:84:9a:0f:91:d3:d6:04:fb:0f:c4:d1:0f:d2:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:18:91:44:EB:6A:9F:1E:F0:25:8B:22:01:3C:E2:C5:75:EE:6B:6D
            X509v3 Authority Key Identifier:
                keyid:77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d3:a7:a8:21:6c:28:95:75:6d:ca:97:6f:50:dd:7f:fb:56:
         bb:ba:3e:16:d9:53:d3:94:54:c8:43:74:c3:8d:20:ae:4f:6f:
         4f:38:e3:3b:7a:2b:95:5a:a9:10:30:cb:2e:a3:45:43:71:c4:
         10:6e:ea:cd:87:ab:32:45:c1:ab:93:f2:cf:57:3e:73:5b:e0:
         dd:bf:ce:8f:b9:67:db:c4:e1:cd:27:ca:80:db:35:4d:35:41:
         0d:09:fe:57:bf:35:f4:0f:7c:dc:a4:c5:56:5a:48:cf:f2:8a:
         d0:36:bc:92:0f:38:29:4a:27:9e:f5:e8:f1:b9:ed:9f:d8:3d:
         d0:04:e9:9d:8d:11:58:dc:43:4d:1c:49:01:56:fc:17:00:6b:
         58:f5:80:39:c9:cd:1e:e2:88:7a:7d:59:6d:56:f8:7b:32:a6:
         8b:b9:3b:bf:57:18:a0:74:03:f3:af:21:5a:fe:38:aa:f6:c8:
         62:5f:f1:ac:6e:56:72:bf:ef:b9:94:b8:81:13:db:80:f9:2c:
         62:be:fa:4c:cf:b6:ca:b3:b9:2c:7e:9b:0d:c9:53:1c:a4:c7:
         af:6f:3a:87:be:b3:a6:4c:b2:7a:3e:8d:38:ca:b7:ca:eb:13:
         8e:d6:18:83:99:28:b4:df:5d:4c:8d:54:c3:b0:fc:f5:7d:40:
         b0:4c:0c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:11 2024 by rpki-client on console-fra.rpki-client.org