Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File:                     0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier:          RGndyoXSqmPFpGPxLe8lJKT7UUnxNWzHQDcRHIU0Dxk=
Subject key identifier:   53:2D:2A:CE:CF:93:C5:87:75:C0:2B:DA:F1:F4:D6:A2:69:DF:A9:6B
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer:       /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial:       018F460E4DBDE12E168C97D5E08903BB79E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number:          0ABE
Signing time:             Sun 05 May 2024 00:01:33 +0000
Manifest this update:     Sun 05 May 2024 00:01:33 +0000
Manifest next update:     Mon 06 May 2024 00:01:33 +0000
Files and hashes:         1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: QDrD0jH6JnDeT/RjpbVjMsbRECTDp7nPTLQ087ZknB4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0e:4d:bd:e1:2e:16:8c:97:d5:e0:89:03:bb:79:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
        Validity
            Not Before: May  5 00:01:33 2024 GMT
            Not After : May  6 00:01:33 2024 GMT
        Subject: CN=532d2acecf93c58775c02bdaf1f4d6a269dfa96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:80:59:1f:47:e0:f5:f4:c3:c5:b9:89:a5:24:
                    5c:63:37:d4:77:40:47:06:1c:5d:79:a8:8c:c4:6e:
                    80:d5:ce:d3:4f:7c:59:d7:20:24:af:6d:fa:b4:58:
                    b6:a2:89:0c:96:0b:51:94:bc:e3:d5:1f:2f:bf:5d:
                    28:92:9a:6b:1d:05:65:dd:df:d5:6b:a9:4c:6e:d2:
                    3b:d4:a6:13:37:b6:84:79:cb:00:10:77:22:1a:ee:
                    d1:f8:63:27:41:f8:a8:00:95:03:59:3e:c8:f5:b6:
                    cb:e6:ce:6f:76:d7:c1:15:25:65:4f:d4:27:88:95:
                    45:39:1f:42:4e:be:36:c3:45:c7:a0:9c:17:ad:a8:
                    73:8a:e6:f8:9c:51:55:91:88:9d:6c:3c:90:3f:ab:
                    fd:1f:bc:6c:96:fb:7f:88:4c:28:c9:44:ad:46:e2:
                    48:0e:e0:05:44:6f:17:ca:cc:cf:d5:6a:fe:91:a7:
                    6b:70:6b:4c:4c:4c:20:3a:4b:15:d1:78:c4:08:44:
                    68:90:4b:67:ce:aa:8d:60:91:41:d1:9f:a6:97:47:
                    03:a7:fe:2a:6c:39:d0:db:82:81:e5:40:98:7f:e9:
                    df:7d:8b:81:bf:52:e2:f7:37:6b:93:5d:2c:7e:cc:
                    a1:bb:c8:60:93:01:c5:82:d5:99:d3:66:c5:2e:f3:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2D:2A:CE:CF:93:C5:87:75:C0:2B:DA:F1:F4:D6:A2:69:DF:A9:6B
            X509v3 Authority Key Identifier:
                keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2f:4e:9d:33:58:53:d3:4d:93:88:26:52:ee:bc:ec:0e:10:
         5a:66:14:d4:7c:d6:0a:9a:8a:c2:ce:df:84:17:97:5e:84:ad:
         ed:5f:27:4a:1d:7e:39:08:ac:83:ab:16:b2:56:36:d2:e6:d9:
         7c:96:6b:48:5b:24:07:62:91:02:d7:0a:41:e8:ce:2a:58:50:
         bf:7b:0f:fb:20:a1:43:34:43:f1:ee:75:11:1a:a6:b0:9c:2e:
         16:64:8a:62:48:e2:60:72:86:42:7f:2b:97:21:7e:ab:a9:0f:
         23:52:c9:0b:ba:67:60:ae:81:62:af:6e:14:97:fd:87:aa:46:
         6f:4d:c7:8c:23:fe:2e:d1:7a:00:65:34:0a:3c:26:44:49:e1:
         ce:8e:dd:7f:b6:d9:75:a8:dc:84:df:11:10:12:3f:36:a3:16:
         79:d9:03:8e:5a:3f:fe:4b:a2:14:c2:97:f1:83:69:04:c2:85:
         92:79:57:b8:c1:33:a3:c9:57:58:5f:8f:bf:26:23:d8:d2:1f:
         fd:71:f1:44:00:4b:43:6c:77:9f:c2:98:61:f6:e1:9e:23:31:
         8c:40:9c:91:ad:f1:ed:23:63:4e:69:5c:73:74:9a:25:e6:f0:
         f2:78:eb:b0:67:98:ba:52:f4:7c:16:0f:a1:21:dc:94:5a:a8:
         2a:5e:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:31:00 2024 by rpki-client on console-ams.rpki-client.org