Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
File:                     eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft (raw, json)
Hash identifier:          Ns2aDil008XtMVq8uv9+XqBAdI2qccxGgtfdIsf8ghA=
Subject key identifier:   87:8A:E9:5F:64:43:FE:F2:1D:16:F3:3F:09:71:8C:62:4C:48:0D:97
Authority key identifier: 79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
Certificate issuer:       /CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Certificate serial:       018F8749955AF9FE6B7B87B12348054F2994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
Manifest number:          02C7
Signing time:             Fri 17 May 2024 16:01:37 +0000
Manifest this update:     Fri 17 May 2024 16:01:37 +0000
Manifest next update:     Sat 18 May 2024 16:01:37 +0000
Files and hashes:         1: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl (hash: XYilLm+X1dcfVYMNKsty45oLHOwnvQVpHDY0dD5Kcc8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:95:5a:f9:fe:6b:7b:87:b1:23:48:05:4f:29:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e376c8e490d28620c24f97e2b933d62fd0238b
        Validity
            Not Before: May 17 16:01:37 2024 GMT
            Not After : May 18 16:01:37 2024 GMT
        Subject: CN=878ae95f6443fef21d16f33f09718c624c480d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:48:26:27:71:08:03:72:a0:71:ef:f2:85:
                    e6:e3:f7:9c:be:61:c5:d6:45:81:23:6a:57:ee:ec:
                    36:ef:05:f4:90:49:40:40:61:c8:96:28:74:69:8f:
                    9f:64:ac:38:b4:e2:5d:88:9f:8f:d8:63:2a:ea:69:
                    0d:50:0d:30:fb:e8:13:5d:ed:70:cd:07:2b:b1:67:
                    53:e5:51:da:c8:8e:53:b5:9c:95:f4:0a:40:7c:14:
                    04:f9:97:0c:b9:98:13:a9:0c:f4:73:78:a3:5e:2b:
                    d7:81:f0:24:dd:68:db:2b:25:04:c0:4c:05:aa:16:
                    db:7e:f8:c9:78:0f:e0:2e:cc:04:17:ec:ce:92:b5:
                    35:b9:c3:b4:41:48:2e:28:75:f0:cd:d5:2d:72:5b:
                    3f:f3:85:12:2b:c7:95:f5:68:d4:43:3f:0b:47:36:
                    2f:78:13:c6:f8:17:35:9b:4e:98:3a:80:c8:8b:9d:
                    ab:21:08:8f:20:a5:08:77:0b:bb:c9:12:4a:da:4e:
                    0a:4d:77:3a:b7:93:48:d8:9e:aa:81:33:0f:ec:f5:
                    d2:4f:20:aa:47:6e:b0:2f:91:36:40:ad:6c:27:7b:
                    fa:85:cb:80:cb:e1:80:93:de:ca:59:6f:9e:c3:23:
                    9c:a3:94:fd:46:99:c0:1a:ab:8a:aa:b4:42:96:c4:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8A:E9:5F:64:43:FE:F2:1D:16:F3:3F:09:71:8C:62:4C:48:0D:97
            X509v3 Authority Key Identifier:
                keyid:79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:8d:59:ed:7a:5c:37:11:59:a0:f4:72:e2:26:85:5d:6f:
         a5:4c:3a:49:1a:75:19:1c:91:cb:88:26:c0:bc:ee:7d:ae:ac:
         76:75:9a:dc:13:04:32:f8:21:2e:a9:2c:33:5b:c4:d1:59:89:
         c9:17:d4:dd:e1:d0:63:02:49:2a:47:4f:d0:59:75:d9:73:50:
         e6:6c:89:dc:4b:06:33:d2:d5:53:4a:f0:ea:73:75:41:ea:cd:
         60:11:68:52:cc:89:c4:70:49:df:1e:18:86:07:8d:51:03:06:
         c2:38:78:c9:b0:bb:80:d2:84:fb:76:a3:d4:cc:39:78:9f:c7:
         b5:1f:a5:d6:8d:2d:2d:40:75:0f:22:1b:29:b0:a3:8a:3e:34:
         8b:ad:8f:ad:f9:fb:dc:d2:e7:41:b0:ae:e6:ad:65:64:3d:ac:
         0f:82:17:99:b4:07:05:3b:b3:9e:77:ae:ff:e1:ec:28:53:12:
         04:2e:ca:9d:c8:7d:56:47:e2:9c:4e:dd:8e:c0:f6:3b:c8:4f:
         04:a9:1a:2e:69:b0:3b:6c:ea:ad:9a:54:51:4c:ee:d0:8b:0f:
         7d:43:9a:bd:28:ea:7d:66:35:db:e7:20:8b:3a:84:96:03:e0:
         1e:74:a9:7e:17:d8:d0:a7:5c:8f:a7:b4:08:50:cb:6f:d1:66:
         f0:87:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:13:53 2024 by rpki-client on console-ams.rpki-client.org