Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
File:                     Mnib05LhxcabdCDMA2gDrxJYzvk.mft (raw, json)
Hash identifier:          uAs3QynWNtS6DYM7c7dYD+p6DEmfEdrKuAPu5Am++O0=
Subject key identifier:   34:3D:F4:7E:68:29:D6:1E:05:15:63:CE:CF:A6:CA:4E:69:31:9F:67
Authority key identifier: 32:78:9B:D3:92:E1:C5:C6:9B:74:20:CC:03:68:03:AF:12:58:CE:F9
Certificate issuer:       /CN=32789bd392e1c5c69b7420cc036803af1258cef9
Certificate serial:       018F87B67F58FC9C778AA86927BA103341EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
Manifest number:          02CA
Signing time:             Fri 17 May 2024 18:00:35 +0000
Manifest this update:     Fri 17 May 2024 18:00:35 +0000
Manifest next update:     Sat 18 May 2024 18:00:35 +0000
Files and hashes:         1: Mnib05LhxcabdCDMA2gDrxJYzvk.crl (hash: ep7x9cB0CU6XGckVoFQKZmojJWetsIisU/5WHmEvQX4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7f:58:fc:9c:77:8a:a8:69:27:ba:10:33:41:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32789bd392e1c5c69b7420cc036803af1258cef9
        Validity
            Not Before: May 17 18:00:35 2024 GMT
            Not After : May 18 18:00:35 2024 GMT
        Subject: CN=343df47e6829d61e051563cecfa6ca4e69319f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:da:fe:4a:ee:d9:1e:37:03:cc:aa:16:02:
                    02:59:e9:a9:28:b3:05:0e:a7:bd:3f:3c:0c:f4:b1:
                    dd:ab:1b:20:d7:6c:1c:65:4a:2d:fd:3a:6a:48:17:
                    53:1a:27:30:eb:22:43:6a:ad:1b:c6:79:fa:92:73:
                    fb:cd:7a:ea:d7:56:79:65:3b:0e:ba:1e:24:84:9c:
                    11:ab:db:d6:5e:ed:90:11:f3:d1:e0:8b:6a:c9:08:
                    03:7e:1c:b9:24:60:d0:fa:e6:f7:f1:64:e1:33:2a:
                    44:04:b0:13:64:93:30:ff:55:2d:83:f4:72:83:18:
                    99:9a:d5:82:06:f7:cf:10:00:c4:df:4d:3b:b1:a5:
                    a2:73:7a:9c:5e:f6:20:8f:22:26:42:1a:48:dc:c2:
                    25:a5:07:06:40:92:b5:65:ef:b6:75:38:b4:42:3f:
                    4c:0b:41:30:6e:d9:36:06:b6:1f:63:d1:43:d8:0c:
                    f5:b1:c1:fb:ef:71:13:82:8a:28:be:09:3f:15:62:
                    7e:1f:07:36:68:12:db:b6:c4:7e:49:b2:48:07:79:
                    49:f9:93:cc:7d:12:ad:83:b3:35:46:2c:34:58:5c:
                    2d:97:2c:5c:ba:91:0c:5e:5a:c1:38:c6:50:17:31:
                    62:54:bb:69:61:1f:51:2b:b2:7c:9c:c2:d4:8c:70:
                    70:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3D:F4:7E:68:29:D6:1E:05:15:63:CE:CF:A6:CA:4E:69:31:9F:67
            X509v3 Authority Key Identifier:
                keyid:32:78:9B:D3:92:E1:C5:C6:9B:74:20:CC:03:68:03:AF:12:58:CE:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:4c:b4:44:e3:a8:3f:a9:dd:7e:39:6b:c5:fa:32:0b:fe:
         06:4f:dd:ce:ed:30:fa:39:03:c1:26:9d:11:57:47:00:34:52:
         2c:3d:2e:7d:a5:14:1b:52:8b:72:26:84:b3:d5:75:0f:2e:56:
         24:40:39:f8:75:e8:ae:7b:f8:f1:dc:ca:13:df:5e:2f:41:a6:
         e2:cd:55:f9:e6:b0:18:c7:d6:4a:cd:b4:5c:d5:6c:6c:9b:a3:
         b4:65:72:d1:b7:bc:9a:dc:19:22:fd:c4:bd:8f:60:52:15:66:
         ae:2a:3e:3e:db:92:89:30:0e:7e:86:b2:b3:3c:f2:cc:8b:4b:
         46:bf:00:53:51:41:6b:39:6c:f7:8b:f2:76:64:79:8b:5f:23:
         de:ea:bc:19:fb:37:47:02:29:55:95:3e:88:ea:e9:19:e0:b8:
         fd:e5:81:9b:c6:5d:47:a2:c7:c2:b6:66:6c:fb:99:b4:61:dc:
         26:a8:96:28:e0:0d:61:ef:e5:5a:02:50:f1:46:1f:0f:a7:72:
         f8:77:9f:21:5a:cc:f9:75:ee:05:7d:f6:00:4f:33:1e:1a:69:
         80:0c:66:9d:d0:5b:48:70:8a:97:82:f1:b1:9e:31:fd:09:ff:
         b1:ad:b0:48:4b:cc:96:09:e9:12:52:2f:21:15:7b:6d:cd:8c:
         40:b3:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:45 2024 by rpki-client on console-ams.rpki-client.org