Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
File:                     coCW6KzXbpqhfz62eAQG49pWPtI.mft (raw, json)
Hash identifier:          huplCqb0hegOFomaAG5lfT+uGZQTaB+DukWJF5ykVbU=
Subject key identifier:   FB:2D:2F:27:E8:08:1F:3D:12:13:76:5B:94:32:7F:91:74:FA:5F:78
Authority key identifier: 72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
Certificate issuer:       /CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Certificate serial:       018F882450B911472B390295130A2083F8F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
Manifest number:          1032
Signing time:             Fri 17 May 2024 20:00:32 +0000
Manifest this update:     Fri 17 May 2024 20:00:32 +0000
Manifest next update:     Sat 18 May 2024 20:00:32 +0000
Files and hashes:         1: coCW6KzXbpqhfz62eAQG49pWPtI.crl (hash: rk9s3ZI6uRxkKDk/Px3JklVR6CAmZ4zR5nU8SqJCnrM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:50:b9:11:47:2b:39:02:95:13:0a:20:83:f8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
        Validity
            Not Before: May 17 20:00:32 2024 GMT
            Not After : May 18 20:00:32 2024 GMT
        Subject: CN=fb2d2f27e8081f3d1213765b94327f9174fa5f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ee:82:a4:42:70:d5:b4:06:58:2f:95:39:1a:
                    f1:82:a1:a6:02:1d:14:91:ce:21:63:af:a8:59:3f:
                    9b:e6:ab:05:ce:30:eb:5a:c7:3c:7f:a2:bc:dc:dc:
                    0e:f1:e4:cc:10:b3:04:ee:11:56:bc:41:ea:b1:88:
                    3d:99:ae:c4:15:57:2f:29:ff:38:d2:85:96:da:87:
                    f7:bd:db:6d:cd:5e:ea:01:cb:68:59:53:fe:76:12:
                    99:ac:14:23:48:64:39:4a:cf:4a:1e:9e:95:35:4c:
                    53:d8:b7:b3:96:1e:41:3c:ae:e0:ba:4e:a6:dc:de:
                    b7:d7:3b:f0:9c:df:8a:a3:0b:de:f9:95:fe:bc:79:
                    03:c1:03:49:e1:0b:8a:85:77:d5:50:ea:8f:fa:a5:
                    51:31:67:64:0e:21:cb:7e:7f:ba:a7:34:d0:21:27:
                    69:e9:66:ea:be:62:3a:37:b6:c5:89:72:69:22:20:
                    b5:52:21:da:90:c2:7f:94:1a:72:67:cc:52:41:76:
                    93:71:3c:7e:b2:d0:45:1b:06:e0:c5:4c:7e:04:67:
                    63:59:18:a5:88:5e:79:30:b8:65:e8:5f:57:37:3a:
                    97:a7:1b:29:ea:42:8b:9b:91:c1:20:4b:e6:f5:b1:
                    94:f1:7f:8d:f3:a0:42:78:4c:30:3f:a7:1c:e4:a5:
                    d2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2D:2F:27:E8:08:1F:3D:12:13:76:5B:94:32:7F:91:74:FA:5F:78
            X509v3 Authority Key Identifier:
                keyid:72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8c:08:70:0c:e2:1e:09:c4:cd:ae:c2:d3:48:85:29:5f:b3:
         ee:b8:f2:a3:e3:d7:83:12:c2:71:23:14:d3:63:91:0c:d0:a2:
         02:d7:c0:2d:52:82:16:5b:1e:66:f4:4f:ab:5a:84:b2:d4:06:
         f2:2e:ac:88:c4:7d:94:53:59:83:0e:ed:75:49:da:53:15:e3:
         61:e9:7d:ce:52:df:12:d2:11:65:53:35:44:89:9a:ff:4e:94:
         56:48:e4:00:ed:bd:9d:79:09:93:e0:2f:94:16:21:f7:62:5f:
         67:df:13:0e:e9:70:d2:70:d5:10:f4:3a:d5:95:9e:be:c4:21:
         e8:17:fa:e1:92:43:3d:df:12:c1:a4:0f:6e:c9:dc:6c:d5:ca:
         c8:0b:53:8d:a9:9e:1b:b6:5c:d8:9d:13:67:b2:d1:e1:29:b0:
         1b:74:9a:d9:d5:9a:51:54:f8:6a:eb:14:50:f8:63:10:6e:f9:
         66:d5:1c:8f:74:e9:61:09:4e:53:ec:40:ac:e0:70:ce:19:bd:
         ab:6f:e0:5a:53:71:9c:83:82:3e:5a:eb:05:81:76:c8:ff:28:
         c9:80:2a:f9:ad:0b:e5:8f:b1:0f:4a:30:52:50:4c:8b:24:89:
         c2:d2:3a:f3:34:df:84:f5:d7:50:42:2d:13:52:da:d2:3b:5a:
         d6:74:7e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:17 2024 by rpki-client on console-ams.rpki-client.org