Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File:                     rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier:          gDhFro7uEyIPCHgE2aI1f0CaFhEjgtGYk0FQZ2m0tjw=
Subject key identifier:   17:43:84:A6:99:BA:09:81:5F:E4:EA:FC:A9:A4:9B:1F:E2:1F:22:97
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer:       /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial:       018F885AF5359C8CA48F1B4A36E01130DDFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number:          05C7
Signing time:             Fri 17 May 2024 21:00:13 +0000
Manifest this update:     Fri 17 May 2024 21:00:13 +0000
Manifest next update:     Sat 18 May 2024 21:00:13 +0000
Files and hashes:         1: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: Mbm0IsLt4TSf9wXzUCQOuBNa9P4ZfGe7yTeTqs+Yj4c=)
                          2: t4jnOQdYy98wRe_kbij1S9ctR3E.roa (hash: E8CDGxT7LEPIs6E9OlQs7hsjk6Tvt4G7w58+BQbWU3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:f5:35:9c:8c:a4:8f:1b:4a:36:e0:11:30:dd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
        Validity
            Not Before: May 17 21:00:13 2024 GMT
            Not After : May 18 21:00:13 2024 GMT
        Subject: CN=174384a699ba09815fe4eafca9a49b1fe21f2297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:34:57:ba:47:7f:6d:5a:30:88:fd:63:a6:
                    7d:b4:fb:52:c6:24:62:d9:f6:6a:fc:51:ae:1a:31:
                    87:02:75:af:dc:a1:5e:b0:51:1c:7b:22:98:67:da:
                    f6:44:d2:29:f8:40:dc:cf:ab:35:41:53:5c:bf:66:
                    87:80:c0:31:20:e6:ac:e2:a3:ba:b2:af:e9:75:97:
                    02:e7:62:5f:06:f7:b4:de:5f:22:03:1b:bf:fb:a5:
                    5d:15:4f:06:fb:ef:05:cd:75:10:82:4c:7b:50:80:
                    26:67:b3:ba:e2:5c:8f:87:f1:80:ec:77:3d:51:36:
                    3a:3b:b7:b6:1a:2c:f2:e0:67:12:77:c4:38:24:1e:
                    4f:ea:79:4f:a5:ef:19:43:02:73:6c:0c:48:72:c1:
                    b8:47:3d:e6:f1:f7:93:fb:49:6e:38:54:57:1d:dd:
                    0e:a9:ef:4c:fc:08:02:4c:bd:dd:68:f2:88:eb:91:
                    54:ba:fd:83:85:8b:ef:bc:55:fd:ce:18:07:d2:35:
                    93:5f:d2:bb:ee:32:99:7c:bf:da:b5:86:bc:51:43:
                    f9:f0:09:a0:c0:9e:7e:95:46:88:af:99:6a:0f:1b:
                    73:7d:41:97:3e:8a:b7:b5:b3:30:6b:09:e4:07:d9:
                    76:7b:05:df:0c:70:02:10:3a:61:24:e3:d6:0b:d7:
                    a5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:43:84:A6:99:BA:09:81:5F:E4:EA:FC:A9:A4:9B:1F:E2:1F:22:97
            X509v3 Authority Key Identifier:
                keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8d:ac:1f:8a:79:ff:6f:43:50:cc:fc:4c:66:c8:f9:72:20:
         58:1e:ab:ce:ba:eb:36:cd:01:e4:69:ba:50:66:77:10:7b:40:
         b6:74:e3:6c:02:78:62:51:d5:69:4e:5b:da:a9:0d:88:cd:6b:
         31:f3:b8:42:07:cf:53:ff:bc:47:c4:49:0a:ff:28:23:5a:72:
         69:68:36:d5:79:bd:20:6b:ee:c5:60:e5:4d:77:37:b9:07:f5:
         20:81:1c:64:c0:14:87:a5:b2:cb:be:da:1c:5f:c0:ad:77:aa:
         63:50:ed:23:7a:2d:a4:77:eb:ee:45:08:dd:61:50:b3:40:80:
         1a:1c:ce:18:b3:2e:d7:e3:d6:3c:42:93:b8:22:c3:ad:7a:1d:
         1f:26:d8:85:d9:a7:1c:dd:c6:0f:c4:e1:83:77:23:08:00:ac:
         a4:73:fd:47:3c:8b:68:27:0a:a6:05:9e:6a:cf:c9:d8:2f:03:
         7e:d4:ff:81:ff:2b:05:86:09:e9:37:64:9c:5d:e0:a3:15:00:
         9e:8d:10:61:a4:69:c5:cf:03:da:3e:82:e7:8c:62:5c:37:b5:
         37:e6:75:32:48:6f:8b:9c:5a:7d:93:d4:01:e8:0d:f7:24:36:
         93:2f:11:32:85:54:eb:bc:72:35:2c:2f:19:f5:cb:b2:41:38:
         2e:26:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:49:12 2024 by rpki-client on console-fra.rpki-client.org