Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File:                     5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier:          8kJq4gmSCQ3ki8tVCpq3nl2O8YWp3gE3Q+QfongEDog=
Subject key identifier:   96:2A:E9:DE:80:BF:A3:C2:2C:FE:3C:10:EF:71:FF:2F:EE:D6:EE:4F
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer:       /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial:       018F57DD95170618833FF4B45B7CC7118442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number:          115C
Signing time:             Wed 08 May 2024 11:01:30 +0000
Manifest this update:     Wed 08 May 2024 11:01:30 +0000
Manifest next update:     Thu 09 May 2024 11:01:30 +0000
Files and hashes:         1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: J8IZ1sFaWwdk+rYWIltILpfJQfCH3lJdDHnCbAIJc30=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 11:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:dd:95:17:06:18:83:3f:f4:b4:5b:7c:c7:11:84:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
        Validity
            Not Before: May  8 11:01:30 2024 GMT
            Not After : May  9 11:01:30 2024 GMT
        Subject: CN=962ae9de80bfa3c22cfe3c10ef71ff2feed6ee4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:7e:fa:95:1c:71:d7:58:d7:c1:fa:e9:2e:
                    b6:16:f5:65:e6:87:0f:99:2e:a0:df:12:67:e0:84:
                    44:05:af:4a:72:4a:4b:c8:54:88:c9:eb:a5:7c:d1:
                    0a:40:df:7f:f0:46:e1:c8:53:d5:89:2a:75:1e:c7:
                    bd:c4:c3:25:4e:70:3f:05:00:31:6c:2e:4c:df:54:
                    a5:1f:3e:9d:88:a8:81:a3:b9:16:0e:63:86:c3:61:
                    c8:6d:c8:eb:2c:cb:59:6e:20:74:b4:d3:9c:29:91:
                    ce:66:8a:38:80:ca:d7:85:28:18:d0:0e:9d:08:c5:
                    ce:08:a2:e0:5f:1d:fd:40:d3:48:fe:ec:c4:83:0e:
                    2d:4d:84:b0:14:7f:a0:3e:32:0a:86:ec:ea:92:10:
                    50:d3:da:ec:9b:a2:51:eb:4e:b2:15:13:94:74:6c:
                    61:a0:93:6a:53:7f:da:bf:0d:03:7e:bc:60:6b:96:
                    d5:4e:20:5b:d1:3d:92:cd:71:53:d9:8f:76:48:8f:
                    0b:34:bd:ef:69:4e:34:51:98:e0:bf:95:a1:be:91:
                    02:8e:7e:ca:f7:90:b4:e7:a2:f5:18:dd:61:78:fa:
                    19:c0:ce:ef:9f:e7:fa:ad:3e:7e:1f:3f:5c:9a:76:
                    24:9e:38:6e:f3:a3:26:91:e5:cf:87:27:28:ad:9e:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2A:E9:DE:80:BF:A3:C2:2C:FE:3C:10:EF:71:FF:2F:EE:D6:EE:4F
            X509v3 Authority Key Identifier:
                keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:38:50:ef:80:5a:93:a2:d7:d8:e7:15:bd:76:cf:dc:ec:bf:
         a2:23:ea:d9:a1:25:57:2d:7f:ba:be:bb:b4:f8:e5:9a:87:42:
         04:55:af:0a:8d:d3:d7:f9:5e:36:66:db:a5:c6:4e:68:2f:9d:
         d6:8c:74:a1:ff:58:7f:da:1b:48:e6:b8:90:b7:c2:0e:b3:fa:
         02:0d:4f:67:bb:9b:13:86:04:c5:33:25:ff:a8:e3:f2:c5:88:
         47:43:79:a8:ac:cb:a0:b5:c7:db:60:f6:99:af:e0:d1:24:fb:
         e9:6c:39:3b:c7:25:86:3a:fa:11:d5:0f:ef:6b:51:18:f7:84:
         b3:4e:f5:24:88:a0:54:d5:d1:31:71:88:f0:b7:e7:20:77:15:
         e9:74:b7:6e:13:f9:9a:51:6c:b9:87:44:7f:6f:2d:f0:b0:13:
         3d:d5:e5:3d:95:f4:83:89:8c:38:f7:12:5b:ea:2b:7e:9e:02:
         dc:f6:e6:b6:18:67:11:98:2d:33:fd:8f:2b:41:8c:f8:b2:cb:
         7f:c0:5a:4c:cf:33:89:6f:58:d5:60:6b:a4:a0:75:9f:71:ef:
         ac:79:fa:73:8d:49:fb:63:4c:a2:48:fe:bf:f4:25:7e:13:38:
         1a:93:f8:ac:65:65:53:53:56:e9:c2:4e:e3:16:a4:75:4e:b3:
         fe:86:4e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:47:48 2024 by rpki-client on console-fra.rpki-client.org