Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File:                     4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier:          DNqengnzpKk4TW+NqIr9F1RCkC8e//pfOmV+knyQS0w=
Subject key identifier:   FC:D2:0A:EA:2D:9A:BB:9D:5A:99:03:DB:AE:24:7C:3C:FB:F1:0D:B4
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer:       /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial:       018F5211FFA80CC590A1570D2CBF181CE598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number:          10EB
Signing time:             Tue 07 May 2024 08:01:01 +0000
Manifest this update:     Tue 07 May 2024 08:01:01 +0000
Manifest next update:     Wed 08 May 2024 08:01:01 +0000
Files and hashes:         1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: A5KSfZ9FJGbOSb84vCyA5F8J9fVlTgcdtCk5wXv40Aw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:11:ff:a8:0c:c5:90:a1:57:0d:2c:bf:18:1c:e5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
        Validity
            Not Before: May  7 08:01:01 2024 GMT
            Not After : May  8 08:01:01 2024 GMT
        Subject: CN=fcd20aea2d9abb9d5a9903dbae247c3cfbf10db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:25:cc:60:e9:de:05:c4:8a:cd:f7:55:05:
                    d2:41:ee:f1:56:1a:99:ea:fa:84:66:c1:8b:bd:65:
                    47:62:30:74:85:61:d5:c8:e1:ca:a3:14:7d:a5:f2:
                    8f:49:12:4c:2a:0f:eb:e2:61:da:05:0f:2e:16:b5:
                    05:50:52:25:89:8d:44:bc:c5:b8:4f:04:fb:26:a6:
                    db:f2:c6:bc:ca:b1:ce:1f:e9:b2:94:81:fb:dc:b9:
                    8b:ca:1c:dd:d3:10:3b:a1:74:97:8e:b9:20:02:6c:
                    87:ef:68:8f:b9:7f:81:c2:9b:34:38:92:8e:03:cc:
                    bc:fb:f0:e6:fb:75:4b:19:01:be:5b:23:be:4f:17:
                    e6:c2:ba:06:a0:af:3c:b7:b8:cf:5d:de:74:5c:54:
                    7d:77:1a:78:37:4e:4e:17:f1:53:85:e4:4a:8a:07:
                    ae:31:55:28:45:04:4e:86:80:4a:f1:24:f7:4a:b1:
                    cc:e8:e9:0c:83:72:a4:97:cc:26:f5:70:86:59:81:
                    b5:63:83:ad:38:42:99:38:ad:37:57:a2:6c:f4:23:
                    ba:f9:50:06:0a:26:0e:c0:64:0f:20:b4:d4:25:46:
                    87:b1:db:54:11:bb:21:28:7f:e5:73:5c:3f:47:d3:
                    fc:e1:3c:2d:47:d1:e4:03:39:c1:35:b0:fa:f6:01:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:0A:EA:2D:9A:BB:9D:5A:99:03:DB:AE:24:7C:3C:FB:F1:0D:B4
            X509v3 Authority Key Identifier:
                keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c5:59:4c:b7:57:31:65:c6:04:63:a5:51:fb:f7:30:a5:6b:
         7f:36:83:0d:3d:e0:05:c7:ca:56:92:14:aa:4e:e5:99:65:eb:
         fd:36:75:0c:29:ab:c7:8b:05:4f:32:78:0c:83:e7:fb:ce:00:
         f2:4b:c4:80:7c:56:52:67:23:99:49:ef:80:3e:03:41:8d:2c:
         b8:08:c7:9c:31:ed:ed:ef:c1:65:48:65:6a:eb:7e:ce:ef:e9:
         68:40:92:d5:e1:55:6a:b0:63:90:73:68:66:fd:72:df:64:59:
         73:86:af:e7:37:f8:8a:c0:3f:08:7b:ae:d2:bf:ff:81:26:d7:
         e5:b4:21:07:60:2c:64:39:c0:90:61:b3:5a:7c:78:00:b9:df:
         d4:2d:4e:00:f5:fc:e9:43:3a:85:f8:de:1f:81:50:39:bf:66:
         b0:58:e4:67:1b:34:5f:bb:05:48:19:71:9d:b8:40:22:6b:2b:
         ec:69:8d:a8:b7:20:bf:0c:b9:51:4d:4d:f6:dc:55:c1:64:a6:
         d1:ad:94:19:fe:f1:58:34:63:20:e5:bd:29:85:71:93:1b:9d:
         28:cc:ab:d7:bb:74:50:e0:5a:0f:80:8c:5a:a7:09:e3:02:f3:
         52:a7:c4:64:54:8e:62:d8:6b:07:ea:20:6e:b9:7f:5f:b9:f7:
         9e:4a:b2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:56:16 2024 by rpki-client on console-fra.rpki-client.org