Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File:                     2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier:          bITFaNjFVZPrQ8gBaGQyTrWJopTrHigeZ41bxMYSJ8c=
Subject key identifier:   48:81:D5:36:61:49:E6:4A:9D:B8:4C:CB:32:00:59:0B:73:E1:B7:7F
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer:       /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial:       018F497F7CD78C9528F55FCCBD49379D9304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number:          1154
Signing time:             Sun 05 May 2024 16:04:02 +0000
Manifest this update:     Sun 05 May 2024 16:04:02 +0000
Manifest next update:     Mon 06 May 2024 16:04:02 +0000
Files and hashes:         1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: J1VQFs2phpvx1Gi452Jaig1ibXTVIS5x0VqOsat1jCs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7f:7c:d7:8c:95:28:f5:5f:cc:bd:49:37:9d:93:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
        Validity
            Not Before: May  5 16:04:02 2024 GMT
            Not After : May  6 16:04:02 2024 GMT
        Subject: CN=4881d5366149e64a9db84ccb3200590b73e1b77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:e8:9d:a5:62:df:31:3d:45:62:0c:61:3c:
                    87:e4:e1:8f:46:d9:7a:76:97:12:58:22:7c:27:f4:
                    5b:5d:44:aa:1e:6d:6f:76:df:cd:94:1d:dd:d5:13:
                    9b:ea:5b:50:b0:67:af:70:02:b8:28:23:5d:52:12:
                    eb:eb:ec:9f:01:5f:24:19:d1:31:c5:45:84:af:b0:
                    d3:c2:10:e0:1f:72:c5:9f:06:be:da:2b:28:37:93:
                    60:84:8e:d4:14:b7:73:fc:77:57:e4:48:8f:7b:53:
                    a7:3d:e8:19:78:64:45:63:14:d8:b4:0e:80:f9:ec:
                    73:5a:2e:c1:5b:dd:b8:68:63:c0:80:b0:d9:c6:9f:
                    e2:d3:e4:76:c0:2a:6c:00:9d:57:c0:98:7e:e5:71:
                    35:1a:41:5c:43:24:f7:4e:26:27:65:af:0d:f3:97:
                    31:a8:24:bd:5d:10:30:d6:9a:72:bb:29:08:2f:3b:
                    c9:95:19:08:fe:10:45:16:bb:73:9a:7f:73:20:36:
                    43:f7:ce:89:57:1d:c6:11:2f:64:ff:4b:29:4d:59:
                    63:1d:05:97:2c:31:72:52:3c:9c:b3:1a:6a:0f:c0:
                    88:73:86:4e:3a:ec:b4:e5:ae:1b:51:02:ae:b9:00:
                    1e:c4:e2:dc:ae:cb:07:33:c6:92:c3:6f:ab:a9:78:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:81:D5:36:61:49:E6:4A:9D:B8:4C:CB:32:00:59:0B:73:E1:B7:7F
            X509v3 Authority Key Identifier:
                keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:59:a5:1e:c2:3f:c8:07:02:28:a2:54:5a:f1:7f:af:53:
         7e:64:a9:59:9c:60:76:09:54:e3:08:a7:d6:c1:3f:5b:ef:85:
         9a:6f:71:32:ea:62:9a:d6:10:66:cb:19:10:f1:97:75:78:04:
         b2:ec:21:b0:d3:ca:1a:92:36:8d:44:82:6f:d6:b2:f1:60:5f:
         78:18:00:1a:e1:48:80:61:8e:63:05:6b:25:fa:8a:72:74:05:
         91:2b:f7:34:9c:b6:e6:3e:0c:e6:ad:3e:59:99:6b:a0:52:42:
         04:a5:a5:6b:3c:70:d4:49:d8:62:be:57:90:eb:a6:ff:71:10:
         de:ef:8c:a8:21:00:d3:79:c8:41:fb:99:0d:4d:8b:a3:ba:96:
         f1:d6:80:f0:d2:e5:3d:a9:8f:37:79:1b:cb:99:f2:83:23:ef:
         d4:75:85:ad:8a:7d:e8:6f:48:2c:2a:6d:07:76:d5:d5:d3:fe:
         a4:7b:93:35:d5:f5:3c:da:3f:a9:f0:bd:7e:b3:79:c7:db:69:
         97:64:35:af:af:10:d2:f5:63:48:af:2e:c1:67:86:22:e5:25:
         ad:f1:55:90:2b:28:0c:5c:46:a6:5c:32:68:d1:5d:51:5f:4a:
         a0:6f:a0:ce:29:c9:a9:9c:12:da:78:50:78:44:63:8b:68:7e:
         b3:c3:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:05:30 2024 by rpki-client on console-fra.rpki-client.org