Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
File:                     1-XhhvCSEodMubzbMLEayFG4xW8E.mft (raw, json)
Hash identifier:          hjHHKhzIcBR2WlYBZRlJmMGDkn7zZhMYBNJTKSLqung=
Subject key identifier:   60:86:C4:0F:11:BD:9B:55:64:7B:35:E4:22:C5:CD:AE:4C:88:AD:A5
Authority key identifier: F9:78:61:BC:24:84:A1:D3:2E:6F:36:CC:2C:46:B2:14:6E:31:5B:C1
Certificate issuer:       /CN=f97861bc2484a1d32e6f36cc2c46b2146e315bc1
Certificate serial:       018F448E08D4838F76F89DB548C08243BA68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
Manifest number:          0624
Signing time:             Sat 04 May 2024 17:01:49 +0000
Manifest this update:     Sat 04 May 2024 17:01:49 +0000
Manifest next update:     Sun 05 May 2024 17:01:49 +0000
Files and hashes:         1: 1-XhhvCSEodMubzbMLEayFG4xW8E.crl (hash: c755X7Vw6b1/07Nly4BK6CjxOwdc+uoIMGr6xxfu/Fg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:8e:08:d4:83:8f:76:f8:9d:b5:48:c0:82:43:ba:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97861bc2484a1d32e6f36cc2c46b2146e315bc1
        Validity
            Not Before: May  4 17:01:49 2024 GMT
            Not After : May  5 17:01:49 2024 GMT
        Subject: CN=6086c40f11bd9b55647b35e422c5cdae4c88ada5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:75:b0:18:ef:63:40:c9:59:5b:b6:39:c2:
                    84:16:fa:d0:fb:78:0e:13:8b:b9:f5:c4:51:36:79:
                    4e:91:7e:20:b4:31:8d:40:0e:d2:95:e6:a5:dc:b9:
                    75:45:a6:b0:93:a3:3e:45:27:a4:cb:65:b7:48:3e:
                    e4:11:ea:1a:e7:22:e7:59:08:a5:75:85:c7:42:84:
                    e7:cc:e9:f7:0c:3b:86:ae:bd:a2:61:3c:9f:64:ef:
                    6f:14:7d:42:d6:c7:c2:09:d1:10:96:ac:78:87:69:
                    a7:f8:45:af:c5:ea:d6:8c:17:30:b5:e5:4c:f9:6a:
                    9b:26:6f:5c:ac:72:00:0e:ae:7d:7a:b2:4b:99:dd:
                    43:f1:84:0a:f5:a0:70:cc:c7:82:e1:93:7e:d7:d7:
                    13:cb:ad:c1:91:93:de:fb:48:2a:f9:2e:45:29:10:
                    5f:8f:ce:7b:77:1c:e7:cd:1c:a5:74:20:1a:e1:0a:
                    ac:06:60:db:8d:60:f3:f3:eb:c6:ef:98:a9:32:5f:
                    0c:2a:02:8f:ab:da:fc:9b:0d:da:d2:a0:5f:31:a8:
                    bd:77:30:e9:db:4b:b7:d2:73:16:2c:12:22:74:f5:
                    33:eb:8c:55:33:1e:1b:98:d9:60:f1:a6:74:c8:ff:
                    e2:14:43:f0:c4:cf:5b:cd:b6:d5:50:9f:34:74:7a:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:86:C4:0F:11:BD:9B:55:64:7B:35:E4:22:C5:CD:AE:4C:88:AD:A5
            X509v3 Authority Key Identifier:
                keyid:F9:78:61:BC:24:84:A1:D3:2E:6F:36:CC:2C:46:B2:14:6E:31:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:cc:1b:66:96:40:56:4b:9f:45:af:4b:d5:95:f2:c0:bd:
         6d:ee:19:7f:fd:36:4a:ba:5e:b6:b6:6e:9d:0d:d6:83:a0:9d:
         f2:84:84:b6:fc:27:42:a7:40:d1:97:98:b2:b3:3a:55:d0:a1:
         f3:1b:f2:25:16:e4:52:a4:26:cf:6d:ee:72:30:3b:de:d3:2c:
         c4:da:50:71:4b:d7:39:09:3d:04:19:e3:da:7e:46:7a:9f:92:
         0d:62:b1:6a:4d:fe:90:52:fb:03:08:81:80:bf:79:7b:9b:9a:
         e0:85:32:ba:16:42:59:d8:51:83:2b:2e:66:4f:b1:a5:d9:50:
         81:9a:93:32:3c:d7:2c:f4:27:22:f6:ea:47:fd:32:a1:a4:43:
         f5:a2:23:52:51:fe:c6:7f:d2:49:41:26:a0:a3:77:41:a2:42:
         49:7d:b2:6f:0b:20:93:7f:06:46:50:23:83:8a:57:5d:54:68:
         6d:56:3e:57:5a:e0:39:42:4d:29:a5:3c:74:d3:ba:cf:1f:ad:
         8a:e5:dd:2c:54:87:2f:2b:49:d9:da:44:97:fe:8f:53:88:ad:
         16:e8:a3:8c:7a:ad:23:fa:36:44:19:d4:69:8f:b9:e5:cb:f3:
         0e:1c:53:c5:d2:a8:80:5f:24:a7:bc:46:2d:68:c0:6e:ff:95:
         34:a1:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:00:26 2024 by rpki-client on console-fra.rpki-client.org