Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File:                     Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier:          3BpwiuIhMxHPezZrY3tKs04frxw3iP+ycO/pmOEZ9IM=
Subject key identifier:   7D:5D:68:CA:07:C5:82:5F:AB:AA:66:E6:C9:B8:77:9C:AD:32:F6:69
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer:       /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial:       018F86DA64CF03F84C64E5537C64BC7E9D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number:          57
Signing time:             Fri 17 May 2024 14:00:10 +0000
Manifest this update:     Fri 17 May 2024 14:00:10 +0000
Manifest next update:     Sat 18 May 2024 14:00:10 +0000
Files and hashes:         1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: rlQN2kLX39agKj2ggWutg/B+TNoBBBmbaUIjDQBlgvU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:64:cf:03:f8:4c:64:e5:53:7c:64:bc:7e:9d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
        Validity
            Not Before: May 17 14:00:10 2024 GMT
            Not After : May 18 14:00:10 2024 GMT
        Subject: CN=7d5d68ca07c5825fabaa66e6c9b8779cad32f669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:c2:e6:eb:19:82:cc:b9:47:43:12:3a:29:
                    7b:bb:2f:6c:12:9a:0e:71:42:68:da:b3:2b:03:eb:
                    83:2f:62:e7:28:5f:96:86:30:70:fe:69:24:fa:90:
                    6a:77:fe:b3:fd:56:36:8e:52:f3:f7:6b:71:43:d1:
                    bd:f9:7c:60:74:10:10:81:e2:b6:73:b1:27:98:50:
                    93:a1:13:54:9f:7d:23:59:fc:9b:3d:86:b4:8a:2f:
                    1a:81:5f:40:4e:31:44:95:6c:c3:e5:1b:6a:88:a6:
                    ba:e1:54:c3:51:5b:67:05:d2:c9:d6:28:52:f8:45:
                    82:da:56:7e:28:d7:3a:f6:54:65:a6:fe:ad:9b:dd:
                    77:6e:a1:2b:4c:a4:b0:98:b4:5c:19:41:1b:bd:35:
                    40:79:f4:5c:99:db:fb:4b:25:25:b9:99:f3:29:87:
                    48:00:9d:c0:a7:0c:68:96:c6:7e:2b:ee:b1:27:63:
                    42:00:e9:e2:4b:ce:0b:bd:a9:dd:8f:5a:19:a6:8c:
                    42:7b:f6:dc:23:b1:4b:5b:95:31:12:0c:b9:0f:a4:
                    1c:6a:5c:1d:11:1c:57:93:af:df:43:b8:dc:bd:b4:
                    df:17:65:1e:88:94:11:cf:9f:55:22:75:04:1b:b6:
                    99:67:52:b9:82:86:80:7e:19:f7:69:a2:1c:23:6c:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5D:68:CA:07:C5:82:5F:AB:AA:66:E6:C9:B8:77:9C:AD:32:F6:69
            X509v3 Authority Key Identifier:
                keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c8:e7:4b:dc:7e:69:c9:77:7d:42:1c:d7:d6:87:50:f9:e3:
         ee:4c:ec:6f:4a:a0:81:fd:12:2d:f3:56:a4:dc:6c:1e:a4:f6:
         2e:3d:5a:28:e8:e7:3b:93:d0:9c:02:9a:1b:d2:af:39:c2:90:
         03:52:62:80:58:89:b5:11:26:72:59:99:28:7e:2b:c7:84:7f:
         2f:78:18:71:e1:6c:46:bf:60:e1:57:59:7e:34:b5:f1:6d:b2:
         a9:c6:64:8d:01:81:20:e3:f9:41:c5:e2:99:aa:4f:e6:1d:f3:
         dd:b9:9c:c8:84:98:42:f3:d9:fc:8d:c0:8b:a1:21:ff:7b:d6:
         44:ff:eb:c5:0b:d6:64:2c:9a:4c:1a:8d:7f:44:dc:af:11:53:
         08:ba:95:21:75:79:77:2f:2d:ce:b2:41:12:49:3d:b7:1f:0f:
         41:3e:bc:9c:75:1c:95:0f:c1:30:82:97:6e:d4:f4:83:a5:91:
         fb:5d:5c:49:33:45:c1:01:24:ca:96:b6:74:70:a7:04:e0:e2:
         72:25:2e:18:13:25:3a:f7:59:8f:a0:93:02:fb:09:8c:46:f0:
         22:05:e9:bc:46:71:1e:81:cb:92:3c:1c:9d:f8:f2:85:87:dc:
         0f:23:bc:0b:7d:df:1d:0e:0e:89:c8:48:f3:11:9c:0b:3a:b0:
         14:c7:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:09:31 2024 by rpki-client on console-ams.rpki-client.org