Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
File:                     gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft (raw, json)
Hash identifier:          usjNOhvB9k2avgjLnEHs6j8Sutv8dL0AUefqLhLpc7I=
Subject key identifier:   B9:35:B3:4E:76:65:6F:D8:97:D2:45:40:43:CA:B4:52:09:10:8A:E0
Authority key identifier: 81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
Certificate issuer:       /CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Certificate serial:       018F874A3E3117B4FEDB0D56EB4710C2A05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
Manifest number:          0AE6
Signing time:             Fri 17 May 2024 16:02:20 +0000
Manifest this update:     Fri 17 May 2024 16:02:20 +0000
Manifest next update:     Sat 18 May 2024 16:02:20 +0000
Files and hashes:         1: gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl (hash: /YDK6UpDdH56hZedu3TQxdNS856KwDX8ErGsbCYupgg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:3e:31:17:b4:fe:db:0d:56:eb:47:10:c2:a0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
        Validity
            Not Before: May 17 16:02:20 2024 GMT
            Not After : May 18 16:02:20 2024 GMT
        Subject: CN=b935b34e76656fd897d2454043cab45209108ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:81:bd:4d:6c:c7:29:6a:57:3a:70:07:65:d0:
                    e4:11:0f:d5:2b:78:66:36:3d:64:0d:f7:37:b6:65:
                    49:57:aa:bc:b7:a1:9c:08:5d:60:93:56:0f:fa:dc:
                    da:ca:0d:47:ce:01:b7:12:c4:65:50:58:47:32:d6:
                    f1:51:b1:34:66:55:37:57:97:cc:1a:d1:23:e9:8b:
                    69:c2:81:88:7e:0f:83:5b:cd:a0:90:84:30:58:b0:
                    7a:b4:b5:03:2e:66:55:bb:73:d6:b5:7e:1b:8d:44:
                    6d:56:15:88:8c:97:41:a9:5f:10:e0:a9:d1:4f:4f:
                    67:9d:1e:1d:57:82:ad:1c:b9:06:af:79:f8:21:a6:
                    dc:8e:dd:d3:0d:cf:3d:6d:1f:3b:b6:82:44:e5:33:
                    04:a4:05:ae:3f:c6:8c:1d:e0:72:c6:1d:5d:7d:29:
                    c8:ac:95:c1:8f:3d:5b:4b:38:e6:6c:ee:17:2e:35:
                    84:f3:21:a2:05:62:80:60:6c:d9:51:9d:b0:e5:69:
                    a2:9d:41:8a:83:87:33:72:65:ee:4c:d9:f1:ac:f6:
                    1a:b9:00:f2:5c:28:cf:cd:b1:2e:9b:44:ab:91:cc:
                    4e:06:57:99:59:51:4c:4f:17:55:2b:6c:8f:f7:4c:
                    b1:40:5f:91:6e:64:12:76:cc:7b:11:cc:82:20:a2:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:B3:4E:76:65:6F:D8:97:D2:45:40:43:CA:B4:52:09:10:8A:E0
            X509v3 Authority Key Identifier:
                keyid:81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:53:c1:49:49:0c:90:1a:2f:3f:55:b0:de:23:c1:9f:42:ed:
         57:06:ab:71:e4:e8:45:20:27:1b:06:2a:b1:ba:53:58:37:aa:
         e9:de:38:7c:57:a5:6d:c2:92:fd:0d:bb:ba:6d:d2:f9:ab:0a:
         36:39:35:8f:3b:f2:c4:8f:a8:bf:de:de:68:65:96:a4:f2:71:
         e5:27:72:2b:9e:48:e8:d4:eb:14:d9:f5:c6:79:fc:fd:34:0c:
         71:ac:4d:a6:4b:41:06:4f:86:c0:6b:00:ba:1b:57:da:db:c6:
         cd:5a:72:09:62:05:fd:57:b4:ec:7b:ec:db:88:07:c0:63:17:
         fb:82:95:0a:60:6c:d6:7b:68:06:f7:29:fb:3a:ca:b1:3f:77:
         d7:cd:13:ab:0d:07:be:36:7a:fc:36:63:08:cd:ce:ab:08:74:
         5d:84:15:b4:2a:0e:b5:62:e7:de:a7:e2:fb:5a:ac:66:2c:0f:
         83:2f:bb:00:eb:65:04:7d:34:de:9b:73:7d:29:2a:b8:46:9b:
         d4:72:4d:c5:97:ca:73:b1:e8:14:cf:df:76:ff:9d:c7:af:db:
         89:7f:bf:86:fb:1f:f4:10:80:32:96:0f:2a:9d:45:a3:e7:da:
         cc:7f:b7:93:46:64:a6:cb:39:70:92:d6:0d:7d:e7:4b:33:fd:
         22:99:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:54:14 2024 by rpki-client on console-fra.rpki-client.org