Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File:                     VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier:          Ms+7tKdLLurupc6K5AfUF6Y1ntKNAoSCXh/JfGxhK5M=
Subject key identifier:   F2:71:3C:B7:AD:9A:57:C3:F5:4F:F0:FE:C7:66:59:01:DB:17:C9:19
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer:       /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial:       018F874921BB314E7B0FBB4FE649509F11A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number:          0F09
Signing time:             Fri 17 May 2024 16:01:07 +0000
Manifest this update:     Fri 17 May 2024 16:01:07 +0000
Manifest next update:     Sat 18 May 2024 16:01:07 +0000
Files and hashes:         1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: dKyRpUFWgDQ6bEtAsonyy1XljRlfh/SkqDAubWk/Aio=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:21:bb:31:4e:7b:0f:bb:4f:e6:49:50:9f:11:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
        Validity
            Not Before: May 17 16:01:07 2024 GMT
            Not After : May 18 16:01:07 2024 GMT
        Subject: CN=f2713cb7ad9a57c3f54ff0fec7665901db17c919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:aa:d5:d7:8a:6b:bf:77:64:c4:b1:eb:3e:a0:
                    fd:c1:50:9c:36:76:5d:aa:02:7d:f4:72:0b:7d:01:
                    51:38:d0:10:bb:39:a8:c2:92:9a:d0:78:be:63:60:
                    b1:1c:8c:89:f5:86:4f:7c:8f:89:56:c3:9f:30:dd:
                    9a:33:eb:db:9e:48:f4:ce:2c:80:c9:cc:09:74:9f:
                    d4:50:c7:d6:f3:0d:f0:e1:49:61:cf:36:24:c5:46:
                    8e:ec:7c:39:c8:b5:5e:c4:4a:26:a3:56:8f:8a:27:
                    21:62:16:52:bb:8b:cc:20:d3:87:fa:30:a3:59:62:
                    6e:62:9f:ac:e1:9c:79:8e:dd:09:89:b0:fb:2e:d8:
                    1b:19:b4:d9:52:be:7e:d9:73:5d:20:b1:94:56:63:
                    16:75:22:64:d3:16:cf:0a:78:3a:4b:41:52:e0:18:
                    a2:76:8c:6e:50:90:49:11:a8:66:e2:bc:b5:3d:d9:
                    64:c9:76:8a:aa:c7:48:fa:bc:d2:15:f6:a4:75:ed:
                    5d:38:31:ed:a5:2e:ee:e3:bd:3c:5c:c2:0a:9c:79:
                    e8:b8:a4:72:73:c7:5a:e8:85:17:d4:e6:e2:ff:8f:
                    be:37:48:69:98:63:e7:1b:70:79:88:37:b4:c6:4e:
                    70:a5:f0:70:fd:8a:13:8b:a0:61:4c:1b:04:91:a5:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:71:3C:B7:AD:9A:57:C3:F5:4F:F0:FE:C7:66:59:01:DB:17:C9:19
            X509v3 Authority Key Identifier:
                keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:92:81:1b:25:47:1b:c6:be:51:7f:10:0c:b1:a6:70:fe:ff:
         bf:90:97:3a:05:6b:43:82:37:bd:76:f4:7d:3f:20:84:fc:2c:
         64:e7:23:c6:1b:76:08:8a:45:8c:40:80:55:04:56:49:68:ad:
         fb:65:4c:c1:11:20:7e:bf:ea:c8:3b:db:04:2f:d0:b4:41:5f:
         9f:02:8e:b4:0b:36:25:cb:87:e4:9a:2e:88:78:be:1a:e2:75:
         36:a8:5f:fb:41:4f:68:fe:51:6c:ec:35:e3:2d:42:75:41:50:
         3f:07:e7:54:0f:e8:c6:83:5d:f8:2b:8b:1a:00:6a:7c:3a:9d:
         06:42:e9:8a:7e:00:92:34:ba:5f:a1:f0:44:79:8d:a9:f3:e2:
         b2:0f:26:bd:89:53:9f:92:55:a4:dc:9f:91:09:cd:18:8c:64:
         af:24:2d:e0:45:c3:4c:c0:e8:66:3b:e7:64:71:4c:71:8f:93:
         b9:5a:92:34:2b:5f:96:79:2a:9d:7f:5a:15:f9:60:25:49:34:
         4e:9d:2e:fa:09:94:54:ab:28:64:c5:28:ab:e3:fa:00:86:32:
         b9:5c:6a:93:18:9e:26:fe:28:2b:31:45:19:94:34:e9:19:1d:
         83:40:f7:a6:7b:20:fa:74:a3:e7:2e:0e:59:b3:52:27:cb:f3:
         61:db:81:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:56:26 2024 by rpki-client on console-fra.rpki-client.org