Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File:                     7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier:          7Btu5k6I5E2SILUiihEnKok3bAbx8WTMfE8ZtkTHo8k=
Subject key identifier:   48:61:2F:9F:63:6C:B1:94:E9:43:F1:02:BF:70:1E:49:86:E6:36:AE
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer:       /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial:       018F396506BF99C6EE80E78765FFCD286665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number:          0DF7
Signing time:             Thu 02 May 2024 13:01:13 +0000
Manifest this update:     Thu 02 May 2024 13:01:13 +0000
Manifest next update:     Fri 03 May 2024 13:01:13 +0000
Files and hashes:         1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: DA2XEUNuFuFgz7Nj8VD638BpOLnu3ZML9YzcfGD4FYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:65:06:bf:99:c6:ee:80:e7:87:65:ff:cd:28:66:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
        Validity
            Not Before: May  2 13:01:13 2024 GMT
            Not After : May  3 13:01:13 2024 GMT
        Subject: CN=48612f9f636cb194e943f102bf701e4986e636ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:07:7c:18:09:92:4b:4d:97:ac:1f:d7:69:
                    15:94:31:c3:c0:33:61:7c:24:1c:bf:59:87:f0:c5:
                    0d:c5:a9:0c:33:bb:c7:bc:24:00:fe:e6:69:39:d9:
                    98:38:90:fe:21:3d:18:ea:6f:d6:05:3a:4b:52:94:
                    f2:fc:57:d0:ca:fa:ae:d6:84:ae:24:9a:68:1e:95:
                    77:16:ed:88:2b:89:09:48:dc:80:49:c4:74:b0:43:
                    d2:2a:67:d3:9d:82:fa:21:a7:59:7b:28:40:36:e3:
                    24:90:dd:f8:19:1e:30:9b:90:04:a2:35:21:60:a8:
                    6e:a3:df:54:99:94:f0:40:dd:36:cc:d3:10:1c:cb:
                    76:17:08:1b:f5:0a:14:db:7e:f9:c0:8b:27:0c:56:
                    c9:d4:f9:22:22:ea:9b:4f:b8:8f:b3:16:56:c1:ed:
                    6f:67:e8:30:c5:a9:4b:09:0b:a7:28:7c:a0:e8:e1:
                    0f:36:5f:7a:3f:ba:1b:7e:00:c2:ff:83:5c:45:c1:
                    45:5e:ac:16:06:b4:ff:54:2f:b3:a5:05:f8:57:68:
                    f0:8f:cf:33:cd:c1:a4:0e:e4:dc:9e:03:64:57:1d:
                    19:ea:6d:54:2a:e9:85:82:9e:0e:57:8d:7f:e0:87:
                    53:28:68:a6:e5:aa:ba:b5:0c:03:a6:8b:f4:38:bc:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:61:2F:9F:63:6C:B1:94:E9:43:F1:02:BF:70:1E:49:86:E6:36:AE
            X509v3 Authority Key Identifier:
                keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:64:2e:c1:41:15:84:15:1d:9f:17:f4:62:23:5c:6e:90:4d:
         6f:ca:f4:53:11:f7:a3:fa:45:0b:5e:12:ca:ad:7a:ec:5d:a6:
         52:1f:ba:a5:43:0a:10:26:54:2e:66:0c:54:4b:50:f9:76:a5:
         a1:4d:4b:1b:6c:e6:a3:95:41:18:13:98:51:4d:55:7d:92:de:
         0d:2f:9e:c7:eb:fc:08:7b:20:0c:98:66:f4:4e:1a:25:b4:a8:
         ab:dd:81:cf:d8:1e:19:fa:75:a2:59:43:8d:97:f2:f7:05:98:
         18:bb:80:29:0d:72:38:9d:4b:dc:da:a9:3a:51:2c:e0:76:6e:
         55:9f:14:20:0e:02:eb:a7:a1:3d:c5:3f:dc:7f:79:3f:e7:b3:
         b7:ae:c6:f8:d3:12:6d:7f:51:5c:b5:64:f7:7e:5d:d4:48:45:
         d6:47:b4:22:b3:8b:21:79:79:bd:25:ba:e9:4f:b6:ce:80:57:
         cb:ca:a5:0c:d4:21:86:74:d2:c0:3c:ec:d2:bd:f6:c9:9c:a3:
         cc:7c:47:d9:fa:68:24:ca:da:4b:a5:33:22:e3:66:f6:16:5b:
         45:c5:b7:df:91:24:fc:d4:4d:12:e7:ce:89:f3:4e:fb:ee:fa:
         6d:f8:7e:45:51:ac:bd:0a:be:0f:c8:5f:56:db:e6:75:36:bb:
         f6:02:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:37:13 2024 by rpki-client on console-fra.rpki-client.org