Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
File:                     XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft (raw, json)
Hash identifier:          e0ZAwMwMP3qqpCw4N9yd85/YWUQ+brTTcD1mhyqjjmw=
Subject key identifier:   C6:84:D5:D4:3C:76:EA:9E:C0:E5:41:B7:B0:2C:6E:B8:5C:4E:6B:13
Authority key identifier: 5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
Certificate issuer:       /CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Certificate serial:       018F87B62A2CC535712D0BB144AC6AEC020C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
Manifest number:          01C4
Signing time:             Fri 17 May 2024 18:00:13 +0000
Manifest this update:     Fri 17 May 2024 18:00:13 +0000
Manifest next update:     Sat 18 May 2024 18:00:13 +0000
Files and hashes:         1: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl (hash: ZZRNcLbVhktbgLOBllGZCA180e5WXE7EhCvdkv77/t8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:2a:2c:c5:35:71:2d:0b:b1:44:ac:6a:ec:02:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e5214158af310ffa9c315298343f4c3e66aec9a
        Validity
            Not Before: May 17 18:00:13 2024 GMT
            Not After : May 18 18:00:13 2024 GMT
        Subject: CN=c684d5d43c76ea9ec0e541b7b02c6eb85c4e6b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:ad:48:13:21:00:10:1c:99:71:fc:6e:ea:
                    73:0d:79:ba:7c:3b:99:32:b8:bf:44:10:fe:c7:79:
                    23:28:fe:59:d9:c9:0c:77:8f:22:31:8f:08:42:37:
                    5c:11:cd:6a:61:2b:ed:dd:cd:25:1b:47:e0:db:95:
                    9e:2e:ff:34:de:98:1d:f1:04:a0:cd:3e:35:2e:a1:
                    1f:b6:7e:2e:05:ef:00:83:23:de:9d:be:81:35:d8:
                    aa:1a:9c:eb:4b:de:fc:f4:ac:9f:b5:27:f3:2b:90:
                    ae:14:81:e7:bf:d6:99:71:ea:a9:a2:25:3d:98:6a:
                    30:af:e2:1d:82:4e:ca:bd:76:12:1b:03:32:c6:9d:
                    0f:94:34:9c:d0:04:f5:07:ed:17:72:98:47:ec:78:
                    30:64:94:22:7f:58:24:2d:a7:39:0e:30:ee:5d:74:
                    ab:58:4b:09:a2:72:d9:72:7b:12:5e:25:87:26:fe:
                    84:84:ba:8a:f5:d2:75:55:30:c6:cd:9a:d5:d9:66:
                    33:3e:88:82:99:71:e2:33:bb:fd:d1:62:2a:5c:77:
                    02:a3:c9:75:91:8c:10:c9:9d:64:b3:a4:14:39:61:
                    55:42:45:4c:cc:78:36:17:ef:24:ca:ad:bf:8e:a9:
                    e9:d7:ee:58:ad:04:f1:d8:fe:6d:29:ea:73:81:c4:
                    b2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:84:D5:D4:3C:76:EA:9E:C0:E5:41:B7:B0:2C:6E:B8:5C:4E:6B:13
            X509v3 Authority Key Identifier:
                keyid:5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0f:bf:10:73:9e:8a:f4:28:38:0e:56:12:96:16:08:e3:aa:
         38:fa:ba:ec:d4:c7:01:87:dd:55:54:21:e0:e2:89:b8:ce:4d:
         31:d9:e9:06:dc:08:d3:e1:73:12:45:4c:3a:1a:ce:0b:e0:47:
         82:a0:f7:5e:7b:9f:31:71:ec:d0:58:90:db:fe:0a:84:01:73:
         41:a7:54:d9:c5:b2:ea:4d:e2:89:79:a9:04:f1:e6:41:e4:27:
         5b:bb:e8:6d:13:a1:5b:61:38:fa:50:c7:50:63:b5:e6:d4:e4:
         89:b7:20:5f:b3:bd:79:51:a0:38:96:c7:16:f5:79:c5:33:bf:
         50:fe:fd:00:80:ee:ac:fe:d5:2e:90:d5:b1:f4:09:cf:bf:c4:
         80:27:09:a2:eb:ba:1c:5e:72:7b:1d:b5:e7:44:fa:4c:11:b9:
         be:8b:7a:43:58:19:85:b0:82:9a:22:5a:74:33:83:cd:90:3b:
         ba:72:d0:a5:3d:c7:68:08:42:7d:16:e5:ad:aa:0f:c1:b1:b5:
         2d:d4:ff:e8:7d:e4:37:22:d4:ec:fe:29:84:96:7a:f0:ea:b0:
         f3:aa:fd:67:d6:a9:36:51:b9:3c:54:3d:be:19:86:0b:60:64:
         6b:37:72:67:5d:39:c2:c0:de:b1:31:02:b8:8a:af:27:06:cd:
         e7:fe:0a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:14:40 2024 by rpki-client on console-ams.rpki-client.org