Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File:                     9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier:          fhQJ33s5kXIkU8Tms98p5Dw+1p/bXMmDh1oEYJrGl4I=
Subject key identifier:   5A:B4:3C:80:8A:FF:0B:2F:A0:37:CB:68:92:B1:77:35:F7:20:41:EE
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer:       /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial:       018F4F49237793E05BA8DF04CE239CC32205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number:          0C19
Signing time:             Mon 06 May 2024 19:02:24 +0000
Manifest this update:     Mon 06 May 2024 19:02:24 +0000
Manifest next update:     Tue 07 May 2024 19:02:24 +0000
Files and hashes:         1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: 0LiTAQ1ecgo/00tWO3UhhgpmcWEGFPy5t/xo4GRJtYo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:49:23:77:93:e0:5b:a8:df:04:ce:23:9c:c3:22:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
        Validity
            Not Before: May  6 19:02:24 2024 GMT
            Not After : May  7 19:02:24 2024 GMT
        Subject: CN=5ab43c808aff0b2fa037cb6892b17735f72041ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:99:13:9c:01:9e:90:fa:7d:4b:a0:2d:e8:
                    ce:49:49:c0:68:29:df:a0:3f:1c:65:7d:4e:32:d3:
                    d5:5b:d3:5b:56:dd:5a:b1:da:10:b0:0c:de:a1:a0:
                    d8:ed:df:8a:49:83:9c:25:1a:92:06:9e:71:b0:92:
                    7f:dc:42:bd:d3:47:8a:d2:c1:db:7a:9a:3f:a1:aa:
                    12:d1:1e:a2:6f:3b:2f:9b:6a:31:11:2b:23:fc:f6:
                    8e:4b:ec:3d:40:69:52:7a:09:98:df:65:dc:32:04:
                    c3:de:13:2e:59:8a:00:5a:ae:63:eb:6b:62:8c:cd:
                    18:f5:4d:59:1b:a0:b1:05:f0:21:95:81:e0:e3:66:
                    00:b0:f0:d3:bc:97:5b:de:a5:6d:f6:3d:4b:83:8d:
                    ba:79:e3:d4:2e:69:dc:e1:ba:32:4f:b5:9c:e6:c1:
                    5d:c5:3f:4e:ae:9e:cd:bb:a5:28:52:9d:b0:d3:dd:
                    61:a6:5b:41:8c:d5:dd:2d:7e:bb:aa:db:63:28:4e:
                    6b:dd:7e:64:3a:c7:16:41:5c:29:bb:ca:7a:27:58:
                    cc:b8:b5:07:49:4c:06:c5:97:37:4f:15:5e:2d:5c:
                    4b:14:be:d3:be:65:b5:e6:00:c2:4c:00:2b:bd:1f:
                    2c:69:1f:2a:f8:aa:cf:e2:b4:3c:4f:34:a9:9e:ba:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B4:3C:80:8A:FF:0B:2F:A0:37:CB:68:92:B1:77:35:F7:20:41:EE
            X509v3 Authority Key Identifier:
                keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:94:0b:1d:ab:82:0a:58:4b:10:0d:f8:b0:35:a2:36:e7:5b:
         c5:94:69:46:dd:02:23:d2:b3:4a:1f:46:0d:52:d0:08:da:60:
         b8:4e:fb:44:0c:03:9b:34:cc:62:a6:73:03:77:3e:f3:57:06:
         9d:bd:28:59:d6:a0:b5:c2:84:60:6c:69:ef:ce:39:e2:2c:ba:
         fd:65:8d:d9:27:f9:28:c4:2e:3a:10:e3:4a:38:55:85:69:03:
         bb:11:1c:42:ce:29:0a:13:ae:7a:77:ed:04:21:76:27:f2:c4:
         15:b5:4a:06:d7:e8:ad:e1:45:c1:ef:bb:af:a2:5c:23:2e:14:
         49:7e:d2:95:15:b1:cc:d3:59:18:5e:df:71:ac:6d:c8:ce:28:
         fd:e7:65:14:3a:cd:f9:c5:61:b4:b2:26:55:e5:b3:cb:44:20:
         4d:dc:b4:68:28:c0:c9:06:a8:c9:a5:44:be:ff:7d:de:5e:63:
         eb:b8:43:0e:b7:a1:31:9c:30:36:a7:65:02:75:ab:f8:b6:99:
         19:75:f0:d9:47:0a:e6:39:78:87:fb:ef:2c:03:3d:8d:78:9c:
         a3:de:6f:12:af:09:81:97:a5:7d:74:a6:9b:49:4c:b7:a6:12:
         0b:73:83:d9:59:4a:01:12:01:bb:d8:78:33:b1:1c:91:98:49:
         c4:f2:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:51:16 2024 by rpki-client on console-fra.rpki-client.org