Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
File:                     idXRKIo8KuF_mcuxiRdwAYm9RyA.mft (raw, json)
Hash identifier:          KmCBr3kBA/LOgYhJoLDjTiCr9phMseI1DvrMwF4618o=
Subject key identifier:   D3:35:84:2C:65:F0:23:CD:1C:EA:91:38:BC:9E:1A:A7:32:C0:AF:A9
Authority key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Certificate issuer:       /CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Certificate serial:       018F866D0CC22EF4851A039BC4622EC01307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
Manifest number:          0BC7
Signing time:             Fri 17 May 2024 12:00:44 +0000
Manifest this update:     Fri 17 May 2024 12:00:44 +0000
Manifest next update:     Sat 18 May 2024 12:00:44 +0000
Files and hashes:         1: idXRKIo8KuF_mcuxiRdwAYm9RyA.crl (hash: 1cMOQ5OrJgrniCObOiS5prao/OH1S75r60XpFAOqpVQ=)
                          2: kAJllXxV_4I8r1Md4e6QBx1JuHo.roa (hash: 3pemV5O2UdfjY+qibJH+HYX5iuKp9D6NaDAnDHCEFgw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6d:0c:c2:2e:f4:85:1a:03:9b:c4:62:2e:c0:13:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
        Validity
            Not Before: May 17 12:00:44 2024 GMT
            Not After : May 18 12:00:44 2024 GMT
        Subject: CN=d335842c65f023cd1cea9138bc9e1aa732c0afa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:e3:55:f2:5b:19:c9:d2:3d:4b:eb:b9:49:
                    86:3c:21:a2:fa:f2:74:f4:a4:4c:d9:ea:f4:ca:52:
                    ca:26:9d:9e:56:49:74:2d:86:3c:e3:d4:a8:8f:1b:
                    01:6f:c9:54:dd:3c:99:63:76:76:91:8c:18:fd:89:
                    1d:0d:1e:24:47:76:83:37:ed:8b:08:f0:5c:c4:4e:
                    02:1a:e2:cc:f5:e4:5f:50:4e:c5:a8:c1:89:72:b9:
                    13:82:82:b0:c6:9e:53:e3:01:05:b7:a3:73:ed:9a:
                    c4:88:3a:75:45:c6:4f:db:3b:2c:4e:da:f8:5f:93:
                    df:c0:8e:f8:9c:c7:c8:70:be:51:5c:4d:15:4b:79:
                    36:91:56:bc:67:60:b8:6f:7f:26:22:8f:7a:54:03:
                    e7:2d:6e:c8:80:d8:aa:76:3e:16:5f:c5:ab:a5:65:
                    13:c4:3f:38:c7:b4:74:fa:2e:96:5b:09:cc:e0:7e:
                    46:62:22:a9:70:14:7d:b9:3f:ed:28:6f:a4:e7:ef:
                    b8:e2:53:aa:00:cc:f8:5b:86:e7:d4:b6:f5:19:46:
                    fd:24:d4:eb:66:54:89:23:e5:81:75:93:d8:02:dc:
                    7a:ac:59:39:8d:a0:05:bb:3b:4d:e5:02:7c:d7:4b:
                    f5:26:c6:4b:8d:fb:11:5a:66:93:70:ef:ea:60:49:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:35:84:2C:65:F0:23:CD:1C:EA:91:38:BC:9E:1A:A7:32:C0:AF:A9
            X509v3 Authority Key Identifier:
                keyid:89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b7:42:b2:90:b8:d4:bd:38:90:ff:2f:ab:6a:64:88:7e:49:
         5a:90:8b:8a:ba:0d:10:68:ed:37:75:0d:df:ba:d5:05:8b:37:
         d7:b9:3b:d7:a1:55:a8:bf:a2:cd:c5:1b:a6:69:1f:00:ce:50:
         7f:c7:4c:41:92:f6:cd:dc:f3:2b:80:94:99:8b:95:85:e4:40:
         2e:99:d1:76:5b:ae:e5:de:63:ac:59:02:3c:03:e9:05:c7:cf:
         1f:ad:d4:53:c1:36:0b:57:74:9f:78:d0:d2:f5:eb:a4:c5:d1:
         a6:3f:6a:9c:d8:93:3f:6b:8d:11:ee:a8:5f:35:d1:d7:c8:0e:
         ff:49:99:c0:10:3d:9c:7e:66:b2:96:38:fb:a8:11:f1:09:bd:
         26:79:8b:6b:bb:73:b1:1a:71:67:af:1e:85:80:f6:07:9b:e3:
         48:fd:d4:9d:6e:ad:ab:97:db:b9:e7:fd:37:2d:d4:06:8b:55:
         26:8e:0a:7f:20:52:d9:9c:c9:f3:7c:06:5e:ac:32:71:e1:0c:
         be:6b:cd:d5:11:ea:ca:58:54:dd:98:9e:85:47:b2:a1:b0:96:
         31:e5:c8:cf:96:14:ef:46:7c:65:db:a6:33:fc:a7:a5:54:93:
         4c:b3:82:9f:b0:55:15:a0:50:29:9d:aa:bc:30:4c:08:f7:97:
         b0:ee:e5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:35:22 2024 by rpki-client on console-fra.rpki-client.org