Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
File:                     o3sePvrqidz80cjpfA6beAxhRl0.mft (raw, json)
Hash identifier:          9IAouHti0eRPAzy3zdRFO13IHKq4zllL5yrPdMjoKAE=
Subject key identifier:   EA:A5:70:A9:81:A4:22:99:70:11:A3:50:79:7A:97:1F:23:29:34:3D
Authority key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
Certificate issuer:       /CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Certificate serial:       018F874875CEDBABF44CA57B8CDCC18F2AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
Manifest number:          07FF
Signing time:             Fri 17 May 2024 16:00:23 +0000
Manifest this update:     Fri 17 May 2024 16:00:23 +0000
Manifest next update:     Sat 18 May 2024 16:00:23 +0000
Files and hashes:         1: o3sePvrqidz80cjpfA6beAxhRl0.crl (hash: b0gpauPD9sBkpEjungM9ZJdrsnh7GOUaFj0+vChC5Dc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:75:ce:db:ab:f4:4c:a5:7b:8c:dc:c1:8f:2a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
        Validity
            Not Before: May 17 16:00:23 2024 GMT
            Not After : May 18 16:00:23 2024 GMT
        Subject: CN=eaa570a981a422997011a350797a971f2329343d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:fb:37:33:ea:91:ca:58:1c:5f:4f:bd:a2:
                    78:17:a3:0b:3e:05:2f:85:aa:ae:d0:3f:81:ae:da:
                    aa:d9:2e:1d:7b:a7:77:4c:43:15:37:ac:03:e9:04:
                    58:05:79:46:48:f7:ea:b8:50:85:7a:4a:37:fe:07:
                    b9:2c:71:82:02:b7:0c:5e:03:37:a9:c2:13:c8:5d:
                    ab:37:17:22:ce:33:1a:6d:e8:fc:5f:66:cd:b3:2d:
                    23:19:bd:5d:31:7c:b7:93:40:98:99:88:de:4f:ff:
                    8b:33:94:d0:67:67:f0:79:78:f8:3f:3f:67:ff:5a:
                    13:da:a0:a3:cc:38:89:15:57:70:1e:b8:17:c2:6b:
                    2c:d2:4f:e7:37:9e:c7:d3:c1:1e:0c:0c:a2:74:ab:
                    74:68:2c:f6:42:a3:2c:8b:44:30:9a:fb:0d:39:87:
                    d4:4e:e2:21:18:68:59:24:05:eb:48:42:22:e7:5a:
                    41:e6:06:9e:af:b3:c1:48:76:d4:16:a1:b1:ee:74:
                    6b:f8:84:74:1d:6f:ba:67:1e:93:bc:be:04:88:e9:
                    21:68:99:36:e0:e9:66:d4:70:2c:fb:55:69:bd:48:
                    bf:b6:0e:17:65:e4:90:29:f7:0b:e2:bf:1b:8d:4e:
                    3f:67:a5:c7:8d:24:f8:0c:70:f4:92:ec:9f:89:5b:
                    1e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A5:70:A9:81:A4:22:99:70:11:A3:50:79:7A:97:1F:23:29:34:3D
            X509v3 Authority Key Identifier:
                keyid:A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e6:52:18:f2:fc:8d:7d:28:92:ba:f9:a7:2f:19:9f:e0:c8:
         8a:2f:ff:43:96:a2:06:2e:b4:cf:38:c5:1b:a3:4c:86:b6:46:
         d8:59:f6:1b:9a:2b:6f:f5:89:b8:59:8e:fa:e7:41:41:f6:2f:
         f7:ea:a7:80:f2:f8:f7:98:4e:4f:9b:14:6b:49:93:d1:4b:7a:
         35:df:0d:54:64:f7:fa:7e:e9:fe:c8:51:d0:23:ac:3a:87:e5:
         8a:cc:01:36:a4:be:b2:3d:b8:8b:7d:14:1f:2e:76:1c:a7:cd:
         ab:0b:aa:e5:38:78:2b:97:85:7a:42:06:a3:c8:6a:5b:90:eb:
         d0:8c:70:38:71:80:08:ca:ad:31:08:b4:fb:1a:45:85:d6:c3:
         e6:cb:3e:92:94:d6:35:67:8b:1d:dc:62:4c:05:d2:5a:27:e2:
         e4:03:e3:5a:a9:8a:de:84:5d:59:64:19:93:98:90:d6:0b:50:
         49:1d:3c:e3:77:ce:7e:36:71:32:63:4d:60:72:63:df:49:f1:
         fd:d5:45:db:16:38:cb:27:d1:74:53:e6:d7:ce:56:a3:86:fb:
         b1:1c:4f:ef:82:5e:b3:44:82:da:c3:27:9c:4d:96:22:97:ae:
         e8:22:1f:06:8d:a2:6e:23:6f:d5:b1:13:a9:1e:0d:57:5b:33:
         44:d2:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:30:57 2024 by rpki-client on console-fra.rpki-client.org