Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
File:                     In2aKDPXQRs1_yA45zADD88vmBM.mft (raw, json)
Hash identifier:          2Bf2x2hE59E2XKHQIoNNrDqrYHXZYJtmFYIyrE3Y0DA=
Subject key identifier:   5F:DD:5F:25:91:FF:B3:F6:2C:56:99:12:5D:7E:E8:83:F2:4E:B9:3A
Authority key identifier: 22:7D:9A:28:33:D7:41:1B:35:FF:20:38:E7:30:03:0F:CF:2F:98:13
Certificate issuer:       /CN=227d9a2833d7411b35ff2038e730030fcf2f9813
Certificate serial:       018F3BFA3688814135479E4C7FC7EC95B06F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/In2aKDPXQRs1_yA45zADD88vmBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
Manifest number:          0719
Signing time:             Fri 03 May 2024 01:03:24 +0000
Manifest this update:     Fri 03 May 2024 01:03:24 +0000
Manifest next update:     Sat 04 May 2024 01:03:24 +0000
Files and hashes:         1: In2aKDPXQRs1_yA45zADD88vmBM.crl (hash: WnhKyg4TQKlkvYj9eqDFCFr7Pmr0LunlYQ/gcGw1HKc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/In2aKDPXQRs1_yA45zADD88vmBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:36:88:81:41:35:47:9e:4c:7f:c7:ec:95:b0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227d9a2833d7411b35ff2038e730030fcf2f9813
        Validity
            Not Before: May  3 01:03:24 2024 GMT
            Not After : May  4 01:03:24 2024 GMT
        Subject: CN=5fdd5f2591ffb3f62c5699125d7ee883f24eb93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:8e:b1:c5:ad:c3:ed:60:87:8b:ee:1e:de:
                    5e:94:45:07:fd:b3:8d:ac:87:db:f9:28:07:cb:fb:
                    43:d6:f3:3a:f5:48:83:b3:c5:e0:7d:98:b2:23:6a:
                    ef:81:96:9a:7e:d5:33:3e:81:3f:36:7d:64:46:31:
                    02:f2:8d:2d:72:02:b4:8c:ec:1a:79:cc:dc:1a:91:
                    c8:02:84:e0:a1:7c:1d:78:0c:c5:aa:30:20:e3:4b:
                    83:f1:bd:20:84:24:02:12:97:04:5d:9a:ac:61:37:
                    32:3e:4e:d0:33:1e:ce:ca:fe:8a:6e:f7:ef:1f:cc:
                    91:02:28:61:15:db:6d:ab:85:b8:37:ca:89:d5:0a:
                    02:a9:62:a2:b3:82:23:de:f1:0b:cd:a3:ff:ea:82:
                    46:1e:d2:55:79:e5:e7:94:31:ad:79:e8:04:69:ed:
                    3d:be:b8:38:07:6e:fe:65:2a:8f:7e:06:7f:82:ce:
                    d0:a1:81:06:64:79:05:14:49:9c:ba:da:a1:18:7b:
                    22:f3:65:18:e5:d3:ce:cd:cb:1e:54:3e:8c:53:e5:
                    56:6e:3a:a5:b0:a3:0b:86:06:d0:dd:39:c8:f5:7a:
                    46:b5:e6:12:d4:fd:62:81:81:9d:73:6b:f6:10:09:
                    4b:2b:9f:93:7d:75:66:fe:7e:b4:38:54:e5:6e:69:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DD:5F:25:91:FF:B3:F6:2C:56:99:12:5D:7E:E8:83:F2:4E:B9:3A
            X509v3 Authority Key Identifier:
                keyid:22:7D:9A:28:33:D7:41:1B:35:FF:20:38:E7:30:03:0F:CF:2F:98:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In2aKDPXQRs1_yA45zADD88vmBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:26:e6:0b:2c:22:1d:48:97:bb:85:61:64:f9:75:87:00:f8:
         85:2f:33:ec:c8:8a:d9:8f:86:5f:f1:ce:77:7f:e6:d6:09:58:
         d8:30:67:8c:13:65:18:7a:00:bf:72:b1:f3:55:88:00:3d:b0:
         7f:e6:62:c8:ee:fd:9b:7d:9a:1e:ec:47:cf:50:13:6f:e2:f1:
         1d:69:81:16:eb:f2:cc:e3:b6:1c:d4:91:19:1c:87:da:28:8e:
         08:0a:a1:12:dc:db:77:2a:ac:9d:a2:b7:64:a3:89:5c:26:90:
         99:c3:48:bd:54:3d:f6:6d:bf:03:64:f9:c1:23:c2:00:88:70:
         7e:cc:3c:83:d6:91:93:7e:fb:66:22:55:57:eb:bd:a1:c7:5a:
         70:8e:0e:fc:90:a3:36:d5:d7:8d:d5:94:b7:05:2a:71:24:ad:
         28:9b:69:80:50:7a:bf:cf:ed:6d:35:4c:cc:7c:94:fa:b8:62:
         41:87:2d:a9:48:5d:e6:50:bf:fc:e9:7d:fd:c6:2a:80:ce:38:
         59:58:fd:57:86:0c:09:d7:39:a3:8d:0d:d1:a5:87:19:fb:47:
         de:3c:e9:4e:55:3a:dd:b3:73:a1:8d:36:2c:c4:d7:39:4b:ea:
         ea:f9:a1:e0:c8:18:a3:0d:87:29:f2:a6:1b:6c:9b:4b:63:a1:
         40:4d:f0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:38:03 2024 by rpki-client on console-fra.rpki-client.org