Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File:                     16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier:          GCCFwJmFT4hB73keNDemQc598ND8r5YqdNMOiqMvGsI=
Subject key identifier:   EC:5C:F8:84:5E:6F:0B:9B:E4:78:5D:60:0C:97:9A:E4:12:D9:44:C9
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer:       /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial:       018F4B6D5D0F35AEEBCC028321D6F806156D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number:          1156
Signing time:             Mon 06 May 2024 01:03:29 +0000
Manifest this update:     Mon 06 May 2024 01:03:29 +0000
Manifest next update:     Tue 07 May 2024 01:03:29 +0000
Files and hashes:         1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: gHEcjS1CyO73fxHe3IhjeIEQph5cpI0vMiHxjEyu1og=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:5d:0f:35:ae:eb:cc:02:83:21:d6:f8:06:15:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
        Validity
            Not Before: May  6 01:03:29 2024 GMT
            Not After : May  7 01:03:29 2024 GMT
        Subject: CN=ec5cf8845e6f0b9be4785d600c979ae412d944c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d6:a2:12:4f:95:ce:55:49:35:6e:33:51:85:
                    18:e7:62:56:c8:b8:bc:37:62:5b:73:e0:ec:0d:72:
                    1c:fb:01:55:85:6c:07:9c:dd:da:68:7c:1c:86:33:
                    b2:c2:59:96:3d:43:55:23:d1:2e:57:ea:28:47:2f:
                    00:84:76:bb:1b:d7:9a:de:b6:7c:1b:44:22:c1:06:
                    29:2b:b8:09:9f:40:6a:44:81:c8:da:32:cc:61:f9:
                    0e:14:79:b6:d6:32:ae:8d:3c:16:e5:86:58:d4:60:
                    cd:3e:9b:e7:a5:4d:e7:c6:ed:6d:44:52:91:04:50:
                    87:b5:fc:de:70:84:12:bb:63:c7:39:64:97:84:7a:
                    5a:1e:55:80:8d:e2:8b:65:e6:2e:9b:87:79:9f:c8:
                    0b:c7:14:c6:87:69:6d:79:33:1c:ef:98:30:ba:83:
                    a0:9d:9c:fc:7a:c1:fd:cb:e8:91:12:a7:85:76:62:
                    66:de:d7:dd:0b:65:5f:c0:ee:aa:87:09:ad:cf:a0:
                    dc:51:a3:03:b3:1b:f0:b8:35:b2:e1:9c:41:f2:38:
                    43:17:12:62:84:69:92:db:24:f7:51:73:18:26:0d:
                    29:4e:23:a5:2a:55:76:39:06:cb:74:78:e2:a5:bd:
                    54:fe:ba:9d:1b:25:6b:df:d6:31:42:04:aa:35:d4:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5C:F8:84:5E:6F:0B:9B:E4:78:5D:60:0C:97:9A:E4:12:D9:44:C9
            X509v3 Authority Key Identifier:
                keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f3:26:49:4a:91:3a:1c:28:c3:27:0a:0e:88:53:fd:d1:40:
         be:fd:6c:1a:74:8e:8e:c5:11:0e:31:19:bb:c1:4e:30:ec:c3:
         5c:f1:55:ca:b1:b3:bc:92:0c:0e:f8:e1:19:c6:c3:4b:1f:af:
         aa:ef:c0:03:63:97:dd:4d:21:79:f2:db:bc:6d:53:cf:f7:33:
         ca:97:ef:09:9f:03:42:3d:93:ec:a5:34:e5:d8:bc:6f:60:92:
         48:1a:18:e2:a8:7e:f4:d5:b2:87:e0:6e:e4:76:a2:e7:e0:81:
         1d:b9:38:6e:74:2a:10:9e:9e:48:37:ce:81:14:b4:bc:25:8d:
         06:36:78:78:a8:86:df:35:ef:35:9b:3a:d7:ed:c3:3a:a6:0d:
         43:a7:5b:b3:bc:f1:1a:1f:aa:04:b2:ed:2e:d0:55:ba:3e:c9:
         b7:ed:1d:74:86:eb:03:ea:3a:28:52:d4:25:96:32:fb:33:87:
         a6:71:1d:b3:d3:13:ef:d3:c4:72:c7:81:89:a6:a3:a3:69:3a:
         90:0d:b6:b3:c7:0c:1f:28:47:78:eb:e0:49:4c:08:45:8e:04:
         8d:0a:15:83:e0:e5:7b:1a:76:0c:66:58:f0:ce:d9:90:70:a4:
         ad:f3:40:92:99:ee:97:3e:3f:d8:ff:44:73:bb:cf:21:92:23:
         ba:dc:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:12:06 2024 by rpki-client on console-fra.rpki-client.org