Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
File:                     F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft (raw, json)
Hash identifier:          u0maTqe4Mg09e7fkFN1MQgqYDo9WU0ufQZwBI1DFU0g=
Subject key identifier:   E8:B8:B2:E8:2E:52:16:2C:85:0F:8E:A8:51:F8:29:A5:DF:B6:D1:DE
Authority key identifier: 17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC
Certificate issuer:       /CN=179a0e21251f28c2328644620b0d279cac60d8cc
Certificate serial:       018F5091DF5F134DF9B896E224630EE9EF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
Manifest number:          0448
Signing time:             Tue 07 May 2024 01:01:28 +0000
Manifest this update:     Tue 07 May 2024 01:01:28 +0000
Manifest next update:     Wed 08 May 2024 01:01:28 +0000
Files and hashes:         1: F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl (hash: TMJhIOEp0tB5Rn1yCITQ+680JmtxbpM3YkFDF8cti5I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:91:df:5f:13:4d:f9:b8:96:e2:24:63:0e:e9:ef:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179a0e21251f28c2328644620b0d279cac60d8cc
        Validity
            Not Before: May  7 01:01:28 2024 GMT
            Not After : May  8 01:01:28 2024 GMT
        Subject: CN=e8b8b2e82e52162c850f8ea851f829a5dfb6d1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:44:a8:60:64:c6:f7:01:e8:43:e5:40:d7:14:
                    cf:8e:b5:dc:3d:f3:a6:22:4d:31:2c:54:a6:a0:c0:
                    65:20:52:69:b2:44:74:30:c6:91:aa:5d:a1:ae:5d:
                    80:9c:2c:fc:70:34:f8:f8:a4:f4:6d:b2:b1:3f:b8:
                    52:32:aa:3a:d4:f8:d7:de:c8:53:4c:a7:ad:0e:8c:
                    27:5b:bd:51:29:bd:d1:0b:68:a5:a4:31:14:56:f9:
                    68:d6:09:ce:2e:90:94:63:8a:26:96:a8:ce:a8:85:
                    60:cb:3c:58:27:c4:b2:9e:ec:d6:cd:54:5d:43:c6:
                    8b:ed:bb:01:24:cf:d2:1d:13:7b:21:e0:52:a1:d2:
                    82:c3:65:a2:31:df:ee:e0:f8:6e:4b:6e:84:96:0c:
                    a9:b4:6c:e1:ce:ea:b9:1f:fb:d8:20:b5:55:08:7a:
                    78:6e:2e:3d:85:ae:e2:e3:d3:84:35:22:b8:06:6d:
                    70:b1:a3:32:47:d8:88:a5:df:14:29:d2:39:09:10:
                    6c:dc:ab:9b:af:d2:52:f2:a3:b0:e5:55:f7:0c:fc:
                    ea:07:fd:52:7b:64:a5:0d:fc:55:07:75:04:f6:95:
                    47:b6:36:0c:73:b6:d5:0d:b8:fe:e0:1c:51:5a:fb:
                    0c:8b:85:ba:b7:b6:bd:9c:bf:b3:fc:b9:11:ec:82:
                    61:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B8:B2:E8:2E:52:16:2C:85:0F:8E:A8:51:F8:29:A5:DF:B6:D1:DE
            X509v3 Authority Key Identifier:
                keyid:17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:af:a7:16:07:2e:a4:5a:cd:21:7d:2d:5c:53:18:11:4a:f0:
         ac:89:a8:e9:96:ab:54:7e:8e:1a:8e:81:69:45:19:9a:ef:bc:
         0d:f7:88:18:16:07:73:99:d5:81:6f:0b:61:ab:a5:fd:c9:31:
         33:48:dc:d7:47:48:97:b3:c6:48:79:e2:f8:45:42:bb:07:46:
         3c:f7:e3:14:a8:bc:6e:80:43:d3:90:be:6b:46:b1:b8:8b:90:
         ec:2e:34:24:7d:e6:82:6c:e4:e8:d6:3c:83:1d:14:90:2c:2a:
         4a:47:23:ab:65:6e:67:b0:2b:86:b8:4f:81:0a:34:ce:44:d8:
         f2:32:21:03:21:97:bc:20:18:76:23:d4:78:c5:de:ac:a7:fa:
         72:65:12:6b:d2:33:45:c7:06:40:24:7a:32:5c:f4:e0:cd:96:
         46:e0:42:c7:c1:79:2f:16:12:67:e8:51:85:00:ad:85:0e:a2:
         13:80:ad:4e:d8:01:87:3a:9a:be:fc:98:05:06:25:f2:9e:05:
         20:5c:6c:da:47:2f:f4:78:fa:76:24:e9:8b:92:0e:a5:cd:ff:
         8e:1e:ff:10:9a:e9:b6:01:4c:26:78:9a:d7:f7:4d:ed:1d:7b:
         91:3e:19:f4:ea:bd:98:3b:21:3f:e2:00:b5:50:26:f8:c6:1b:
         36:43:65:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:21:21 2024 by rpki-client on console-fra.rpki-client.org