Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
File:                     k4EH0RRkaaEaY-X10tfbj28717M.mft (raw, json)
Hash identifier:          HOUiSyTFuFrp7ucR5Dq0elJzuPWXMtYl/B1IrLhzWoc=
Subject key identifier:   AD:67:55:66:0A:67:F2:6D:6E:5F:14:7B:93:51:04:EC:32:1B:8C:77
Authority key identifier: 93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
Certificate issuer:       /CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Certificate serial:       018F8749CEC60FF131BB68B1745B256E5F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
Manifest number:          01DC
Signing time:             Fri 17 May 2024 16:01:52 +0000
Manifest this update:     Fri 17 May 2024 16:01:52 +0000
Manifest next update:     Sat 18 May 2024 16:01:52 +0000
Files and hashes:         1: k4EH0RRkaaEaY-X10tfbj28717M.crl (hash: VgVbymeeMGisC21M0sxmlZ2yQE7xmdJ5wW6dFZMQ5Ko=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ce:c6:0f:f1:31:bb:68:b1:74:5b:25:6e:5f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
        Validity
            Not Before: May 17 16:01:52 2024 GMT
            Not After : May 18 16:01:52 2024 GMT
        Subject: CN=ad6755660a67f26d6e5f147b935104ec321b8c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:06:d2:d3:60:1c:68:d8:51:73:67:8c:96:e1:
                    22:6b:0c:5e:b9:f9:c4:47:f1:2c:66:ec:66:ff:a8:
                    9b:39:49:22:88:86:9e:50:9b:46:99:53:de:58:d0:
                    25:71:c0:e2:1b:77:0e:fd:ea:9f:df:ce:72:ae:bd:
                    38:62:62:06:39:09:77:90:5b:bf:63:89:39:50:89:
                    00:37:5c:9e:fe:4f:eb:8a:2f:75:cc:6d:51:7e:1f:
                    fe:50:06:ff:52:0a:a1:5d:5b:64:03:ec:25:e0:b9:
                    28:26:47:28:de:3b:19:83:12:54:36:92:cf:03:07:
                    68:05:89:8b:23:9b:fe:e8:ac:7c:aa:b4:e4:e2:54:
                    d5:38:eb:b4:50:d5:fc:c3:58:6d:43:bb:3d:c9:01:
                    2e:f8:cd:fb:a3:a3:02:61:54:8f:81:21:6d:ee:4e:
                    74:40:e0:03:0c:3f:96:af:53:2e:74:32:16:74:0f:
                    93:5e:f1:51:55:53:fe:3b:a4:e7:84:69:a4:b1:40:
                    9f:96:02:b1:d9:2f:b3:c4:a0:e1:e9:4c:db:7f:30:
                    f5:a0:3b:aa:d7:e0:67:a5:65:2b:59:26:3e:5b:b2:
                    1c:44:14:82:79:5f:47:71:d5:cb:7b:58:d6:d1:a1:
                    3d:31:c5:e9:d6:80:3f:dc:59:7c:7c:ac:92:4e:47:
                    be:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:67:55:66:0A:67:F2:6D:6E:5F:14:7B:93:51:04:EC:32:1B:8C:77
            X509v3 Authority Key Identifier:
                keyid:93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:70:b0:aa:ce:8e:79:55:05:bd:5f:33:8f:5f:86:79:56:67:
         e6:68:78:86:de:7b:db:af:42:c9:de:96:f5:89:cb:38:f0:5c:
         0d:ae:ea:65:7a:19:0d:df:22:51:55:e5:a5:64:ce:fe:47:33:
         3d:e3:82:62:22:6d:89:0b:c9:cb:46:d4:98:a3:e1:b6:ee:d6:
         23:24:61:1b:64:f6:f1:0d:11:a5:8e:f7:52:73:e8:41:14:eb:
         bd:dd:8d:f5:fe:a5:69:f8:ae:ef:c1:50:1d:9f:15:82:a8:83:
         56:7a:be:e3:0a:38:e0:22:9a:e6:80:b9:9d:44:8c:f1:1e:d5:
         f2:1d:02:83:4c:5c:05:ee:0b:74:8e:81:19:9c:61:a7:1c:0d:
         c3:b7:45:ec:62:f6:f1:4a:76:e5:e2:e8:b2:8a:52:99:a9:9e:
         d3:b3:a9:b0:63:6a:38:d7:d0:43:c7:fd:c2:ab:e8:05:f8:35:
         54:dc:e8:1e:af:c3:47:e6:48:08:47:4f:e9:75:36:53:28:56:
         e9:28:24:45:e0:27:e0:32:ea:38:e1:c4:6f:58:06:97:45:d5:
         bc:fb:05:ed:4d:3b:5b:80:b4:38:1c:d0:60:6c:eb:f6:17:f5:
         90:1f:07:0b:0b:b7:55:e1:a3:71:d7:c3:a3:e8:6b:e2:86:e0:
         ed:29:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:38:35 2024 by rpki-client on console-fra.rpki-client.org