Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
File:                     iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json)
Hash identifier:          ULgyYPkScoasNk+oQ3fJ9le7HVLQj7mZy4dZ1ESVvQo=
Subject key identifier:   13:42:4E:D5:C7:39:E3:71:C9:B0:D7:88:08:C0:7E:00:6B:D2:6C:26
Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
Certificate issuer:       /CN=88eafafff81b95dcee57727057ed67114a338193
Certificate serial:       018F8891F730939D6226DEC93C2E9CD69168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
Manifest number:          01A0
Signing time:             Fri 17 May 2024 22:00:18 +0000
Manifest this update:     Fri 17 May 2024 22:00:18 +0000
Manifest next update:     Sat 18 May 2024 22:00:18 +0000
Files and hashes:         1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: PZXk+7SgzAiEoZNsc1KgvwX2bxwVWqAnE5nvaoXK8iY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:f7:30:93:9d:62:26:de:c9:3c:2e:9c:d6:91:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88eafafff81b95dcee57727057ed67114a338193
        Validity
            Not Before: May 17 22:00:18 2024 GMT
            Not After : May 18 22:00:18 2024 GMT
        Subject: CN=13424ed5c739e371c9b0d78808c07e006bd26c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:5a:ee:3f:24:70:76:e3:40:eb:50:e5:08:
                    7b:0e:df:b1:cc:59:96:a7:37:07:37:b5:db:e1:29:
                    38:20:7d:37:d4:c5:8c:b5:25:c5:85:06:fd:2a:66:
                    b9:69:5f:96:94:b3:10:a0:c2:b9:41:70:1b:f2:2e:
                    2d:bd:2b:00:b0:3c:24:2e:b1:1a:8a:77:21:16:28:
                    78:71:3b:24:fc:c4:f5:7b:ad:92:9f:d6:3b:9f:2a:
                    ec:55:92:6c:70:50:d7:ec:08:22:e3:df:4b:ed:e7:
                    e8:11:68:ba:75:62:10:18:cc:b2:81:9d:db:f4:79:
                    90:a5:2d:7f:66:80:bf:41:75:82:dc:12:38:3c:69:
                    03:7a:50:5d:84:a3:87:3f:e2:e0:48:73:ee:7e:4d:
                    68:9e:dc:20:57:03:f2:d6:22:18:91:cc:3a:4c:44:
                    4b:ba:14:c7:98:de:fc:ea:d4:20:f2:29:53:7c:79:
                    bf:eb:4f:b2:b0:66:e3:b0:a5:05:6c:e0:5d:2e:97:
                    99:89:bd:d9:fb:13:28:b1:50:aa:cd:cd:e8:00:ea:
                    10:b5:15:2d:ef:64:d2:23:29:d2:c6:c3:ce:51:ce:
                    09:a4:34:48:50:db:65:19:4f:1e:d0:6e:55:24:ad:
                    60:c7:cc:26:cb:a1:d1:d9:f1:0f:fe:06:94:d6:db:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:42:4E:D5:C7:39:E3:71:C9:B0:D7:88:08:C0:7E:00:6B:D2:6C:26
            X509v3 Authority Key Identifier:
                keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:bd:78:73:62:1a:b3:79:66:a5:8e:3a:84:77:fe:65:e2:9b:
         08:3c:cd:e3:4f:1d:bd:12:cd:84:a6:36:29:08:0a:07:b1:62:
         24:84:5d:95:1e:8e:a2:67:3d:0f:d2:3f:01:7d:2c:c3:36:2b:
         79:de:f2:cb:7e:10:26:66:8c:7a:54:cd:01:06:21:04:50:a2:
         a8:07:47:0f:03:41:02:2f:0a:fa:e2:67:29:dd:75:5a:2c:d5:
         b7:2a:4f:b8:9d:f1:a4:9c:f8:14:5e:79:c5:ac:ba:96:97:d1:
         ab:20:89:45:88:e4:85:e0:8a:ef:b8:22:4d:db:ee:13:f0:09:
         c2:9b:37:02:e6:1c:2a:e4:84:3f:7d:41:ab:bd:06:a6:3d:9f:
         ab:c3:de:bf:05:b6:fc:19:95:26:1c:1b:a1:cc:37:8e:d9:a9:
         25:fa:2d:1c:13:e3:fd:18:47:6e:de:18:32:3e:25:d4:ab:13:
         c1:8f:77:18:73:7e:18:99:d8:db:66:e6:96:e6:8b:5b:93:75:
         c8:8f:1c:27:c8:6c:dd:97:04:f5:6a:27:f1:cd:28:b4:9a:10:
         55:47:ff:11:af:13:10:7c:fb:8a:d4:6c:67:42:c9:d1:7c:19:
         27:65:e8:db:ca:e3:ad:02:6d:1e:12:94:7b:6d:c1:dd:ff:82:
         3c:ff:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:56:39 2024 by rpki-client on console-fra.rpki-client.org