Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
File:                     do5xE0z2ctauj2b8RNW-5iTNAqM.mft (raw, json)
Hash identifier:          /1fV3RtPreiDe4r5fWQLx8axQu3S5kTt1BRzzXHg5UM=
Subject key identifier:   52:96:D5:60:8B:E4:24:9A:2E:50:71:11:8E:3D:C5:93:0C:3B:9A:AE
Authority key identifier: 76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3
Certificate issuer:       /CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
Certificate serial:       018F8824990671C52F02E5613D0909EAC692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
Manifest number:          01CC
Signing time:             Fri 17 May 2024 20:00:50 +0000
Manifest this update:     Fri 17 May 2024 20:00:50 +0000
Manifest next update:     Sat 18 May 2024 20:00:50 +0000
Files and hashes:         1: do5xE0z2ctauj2b8RNW-5iTNAqM.crl (hash: U/6LkL2LmA+swiX/rXKgCJ8CWX96TsLAhUdKCmaZOKQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:99:06:71:c5:2f:02:e5:61:3d:09:09:ea:c6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
        Validity
            Not Before: May 17 20:00:50 2024 GMT
            Not After : May 18 20:00:50 2024 GMT
        Subject: CN=5296d5608be4249a2e5071118e3dc5930c3b9aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0a:98:19:81:36:c4:3f:cf:1d:9a:c4:e7:ed:
                    f1:5a:91:c1:fa:ef:41:92:3a:72:f4:8c:f5:5a:2f:
                    0e:07:8f:55:01:6a:2d:71:cb:22:88:c2:ab:6c:35:
                    e5:67:dc:7d:7f:e8:ca:ee:ae:10:a4:59:f7:e3:21:
                    60:96:31:6c:2a:5a:8c:26:14:d3:48:00:f1:68:dc:
                    b5:25:70:9e:27:50:4d:a1:23:46:b4:ba:cd:ad:00:
                    39:62:e2:a7:81:d8:bf:be:29:73:83:22:2b:93:16:
                    64:fa:21:dc:9b:b3:31:54:f6:e8:d5:2c:43:b0:06:
                    d5:a5:1a:a1:22:33:be:12:42:68:f4:28:0d:f4:93:
                    19:42:c4:0f:8e:cc:f1:91:be:9e:f2:31:c5:92:ed:
                    ea:7d:d4:d8:d8:5c:c7:b4:12:a3:15:02:c6:b6:57:
                    f2:1c:2a:f0:d4:97:03:a0:c4:8e:00:a7:29:e9:dd:
                    9d:94:80:76:ab:79:f0:7f:88:d7:15:43:93:44:70:
                    30:00:ed:8d:02:30:69:90:98:fc:c6:f2:45:97:48:
                    e5:69:18:6f:83:5b:24:b9:27:21:6a:cc:6d:d0:53:
                    1e:52:da:09:29:ef:fa:16:e8:72:f9:fb:3b:12:45:
                    41:06:69:b1:e9:69:80:0a:7b:cb:36:bd:c6:e4:8a:
                    fb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:96:D5:60:8B:E4:24:9A:2E:50:71:11:8E:3D:C5:93:0C:3B:9A:AE
            X509v3 Authority Key Identifier:
                keyid:76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:34:e6:05:f6:e4:c8:71:85:3b:bd:90:fd:a6:7a:5d:46:f7:
         b5:6d:0c:c3:b3:60:91:59:5b:66:fd:3f:73:8b:31:6e:b3:42:
         88:54:73:8f:fd:1b:db:9c:ee:ce:c5:a7:4e:a7:a9:27:31:79:
         df:dd:2f:46:f6:35:d4:84:54:04:43:83:90:cc:e2:96:7d:a8:
         cd:4a:42:f5:a9:3e:1a:3b:b4:d6:ca:f6:ed:dd:0e:39:35:45:
         b8:f7:dd:ad:00:38:3c:fc:8b:24:4c:40:3b:79:15:eb:d0:3c:
         4d:fc:15:f9:ca:c4:28:f6:e8:db:29:35:47:be:c8:ae:8a:fd:
         aa:18:2c:61:cb:c4:14:92:09:fb:e3:8d:c4:30:0d:00:45:df:
         27:f0:7a:10:35:7c:69:26:e6:09:3a:c3:5e:2f:c2:e6:22:13:
         89:55:e9:f7:62:9c:8d:31:ed:ca:80:0c:59:2c:3e:77:15:de:
         7c:4b:f7:29:4d:12:8b:a2:f5:88:cd:41:98:e3:e0:9d:7d:2f:
         82:89:49:5e:e9:92:64:c6:89:aa:9d:48:04:a3:83:26:6f:91:
         e6:5f:54:b4:ce:67:9c:93:cf:49:79:e9:09:84:66:f8:f6:aa:
         74:45:01:d3:34:ae:ad:cd:61:e4:11:7e:a8:f2:a8:13:78:3a:
         df:06:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:00:28 2024 by rpki-client on console-fra.rpki-client.org