Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File:                     IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier:          yhh29ILm61tFqnWj/yWGycEMBwwRpUuZmLKlqIe9uBo=
Subject key identifier:   73:7E:9A:70:C4:7D:C7:07:60:30:67:7B:05:F4:F8:CF:7E:50:F7:88
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer:       /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial:       018F87B6CB405CA482158047B72856491655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number:          E4
Signing time:             Fri 17 May 2024 18:00:54 +0000
Manifest this update:     Fri 17 May 2024 18:00:54 +0000
Manifest next update:     Sat 18 May 2024 18:00:54 +0000
Files and hashes:         1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: Wfld8tR/MoFIqN1y49DDDK8qjtWngVqDNMtM73gz1KQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:cb:40:5c:a4:82:15:80:47:b7:28:56:49:16:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
        Validity
            Not Before: May 17 18:00:54 2024 GMT
            Not After : May 18 18:00:54 2024 GMT
        Subject: CN=737e9a70c47dc7076030677b05f4f8cf7e50f788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:85:a9:b1:95:19:6c:0d:22:78:ba:64:a8:a6:
                    62:11:eb:19:8c:57:a2:47:ab:22:74:b9:ea:88:44:
                    80:bf:06:06:57:08:85:55:51:73:42:04:50:ca:84:
                    b7:59:20:fb:75:b3:66:06:c0:b0:9c:a5:77:c0:46:
                    6e:9f:44:45:b0:88:8f:0d:1a:3f:b5:35:ed:72:18:
                    6a:a5:a8:bb:84:51:59:93:82:e2:84:98:a4:35:eb:
                    28:71:5a:30:2f:49:f3:9b:87:69:2f:79:28:23:c6:
                    2f:f6:6e:d4:5b:df:36:67:26:91:5e:e8:34:81:80:
                    1b:ad:79:4e:66:64:2f:a8:30:d9:70:8a:2f:04:27:
                    59:88:85:f7:70:0c:cb:54:0a:fe:99:89:5f:49:e9:
                    93:87:fd:95:f6:f1:7e:d2:12:00:35:9f:48:95:d5:
                    70:12:51:66:f5:df:f5:4e:89:41:03:39:01:cf:8b:
                    86:1e:91:b7:dc:60:3f:4f:c6:7c:a2:c4:31:58:37:
                    de:cd:64:04:44:32:5e:53:8b:a4:4a:ae:e2:06:28:
                    99:1e:94:ad:46:28:c5:df:c5:ee:39:87:18:c1:09:
                    79:04:f4:53:e4:3d:2e:83:ea:b9:10:a6:b5:f7:16:
                    30:96:59:1e:a9:06:cd:ce:6d:94:4e:14:cf:15:23:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7E:9A:70:C4:7D:C7:07:60:30:67:7B:05:F4:F8:CF:7E:50:F7:88
            X509v3 Authority Key Identifier:
                keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:db:76:0f:cd:fd:19:b4:99:56:28:15:ba:2d:86:13:ac:98:
         3e:32:b7:da:d7:2d:fd:ac:46:b9:5c:34:90:f4:27:87:46:a8:
         7f:27:64:b6:59:b3:46:74:80:e0:46:a7:40:6e:a1:8f:1d:ef:
         40:97:23:59:aa:8e:2b:25:3e:7b:8e:2e:7a:1a:53:a3:6b:f8:
         52:ce:72:61:b8:9d:84:da:2e:84:96:98:4e:7d:8e:58:b8:60:
         84:fb:87:70:e0:2e:ef:c3:ca:a1:70:f5:0f:8d:32:40:4d:6d:
         69:bf:88:4a:44:1f:12:09:ba:6d:d2:26:74:2e:27:3c:1d:9d:
         17:19:d1:29:bb:55:00:8c:d7:5a:3c:f8:8f:f0:66:c2:a9:1a:
         bb:36:2e:de:a7:65:26:65:c9:a0:34:1b:c1:2f:ad:de:96:93:
         0b:4a:e4:a8:69:6e:77:ef:8a:f2:0a:94:b0:e3:53:f2:09:15:
         e2:ac:ce:dd:4a:37:9a:f7:60:19:23:df:10:c1:93:3b:86:7c:
         56:c8:78:e3:41:ba:3f:1e:e3:99:27:c2:22:3b:ca:97:d2:39:
         cb:b9:04:ef:8d:b0:2e:19:d9:87:42:6a:d1:f1:7b:05:45:21:
         df:75:b9:4b:bc:e2:a3:3c:a9:a4:19:f1:49:94:d2:0c:fd:46:
         92:ae:17:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:27 2024 by rpki-client on console-ams.rpki-client.org