Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
File:                     L97GcLeAw7-UAe8cEVodh_6PfHo.mft (raw, json)
Hash identifier:          if18IhKaLQk3PalxHinqX9aqSuo5fbN2ccAHvB99KqA=
Subject key identifier:   CC:67:E0:23:FE:B7:3A:09:53:03:00:96:D6:59:1F:89:38:28:8F:C8
Authority key identifier: 2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
Certificate issuer:       /CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Certificate serial:       018F87B60A2A28C3B8C841BE4308F4207421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
Manifest number:          0858
Signing time:             Fri 17 May 2024 18:00:05 +0000
Manifest this update:     Fri 17 May 2024 18:00:05 +0000
Manifest next update:     Sat 18 May 2024 18:00:05 +0000
Files and hashes:         1: L97GcLeAw7-UAe8cEVodh_6PfHo.crl (hash: XSGIGH52l8L0Ris1gDa2jN2m/JR2b4a/+OvnRUpOGVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:0a:2a:28:c3:b8:c8:41:be:43:08:f4:20:74:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
        Validity
            Not Before: May 17 18:00:05 2024 GMT
            Not After : May 18 18:00:05 2024 GMT
        Subject: CN=cc67e023feb73a0953030096d6591f8938288fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:84:01:e8:4d:24:86:52:c3:b4:cd:16:f5:
                    d0:09:94:76:a1:a0:a0:21:41:e8:18:3a:21:d0:fe:
                    71:15:40:c5:c0:01:1e:ef:64:8e:44:78:e6:17:61:
                    77:c7:fb:4a:7c:ec:b5:aa:73:97:33:37:6d:c9:86:
                    c2:77:54:27:88:1b:4c:5b:f8:a0:56:71:c6:c3:58:
                    49:cf:73:f2:b7:8f:70:5e:0c:65:3c:74:1a:35:c0:
                    2f:7e:e4:5e:38:04:14:79:2d:a7:b9:14:94:2d:54:
                    55:92:fd:2d:e6:ed:b4:bf:2b:ca:c0:26:2f:88:57:
                    44:2b:b5:57:55:6d:e6:b5:39:05:93:5b:b9:74:a2:
                    f7:49:bb:87:d4:25:ad:b5:f3:e4:41:37:b3:ed:18:
                    77:da:73:be:02:f8:72:ed:3e:a7:de:20:8c:6e:9c:
                    80:03:03:ad:34:8a:d1:9e:1b:7c:d1:d3:48:5a:4b:
                    8c:35:55:e0:21:6c:a8:c2:a7:d7:cb:72:d7:eb:28:
                    2f:bd:aa:13:ff:b8:c7:dd:46:13:8a:5a:5c:58:64:
                    3c:78:a2:43:36:a5:61:a3:bc:3b:e1:7e:35:21:98:
                    87:f1:81:b7:0a:f8:62:1d:b9:91:07:cc:84:5d:41:
                    a5:0b:9a:e7:b8:63:5d:b6:f4:ec:93:db:d6:b5:6c:
                    c1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:67:E0:23:FE:B7:3A:09:53:03:00:96:D6:59:1F:89:38:28:8F:C8
            X509v3 Authority Key Identifier:
                keyid:2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:b0:02:1a:37:57:f7:41:7b:6f:ed:69:08:83:99:e9:1b:
         04:9f:78:e0:5a:39:16:ab:17:ce:62:f7:be:1a:57:5b:0b:21:
         21:81:73:e3:6d:e4:66:a2:1d:6f:3d:16:c7:58:cd:85:09:b4:
         0a:11:5c:cf:89:a8:7a:d4:cc:74:ed:84:81:cd:53:21:b8:d2:
         a8:1d:aa:11:c7:dc:12:6c:20:eb:d3:79:e4:25:b0:de:19:77:
         21:c2:b7:6c:a2:8f:97:47:6b:78:65:3a:02:13:54:19:32:c1:
         09:36:88:86:3a:ed:65:29:90:3d:cf:cf:54:cc:39:4a:31:56:
         19:a9:64:ee:9d:67:8f:3a:31:79:ef:b9:01:31:1e:ef:00:f4:
         13:65:fa:dc:59:bc:94:78:6f:ac:e2:83:35:69:7c:34:5f:94:
         39:c7:7f:03:95:15:d7:8a:cc:bf:43:af:b3:57:20:aa:26:8e:
         30:7b:88:80:66:02:ba:2c:8e:76:c2:70:51:17:68:04:ff:ca:
         9c:dc:f1:15:65:4c:75:59:be:e2:0b:8b:bd:71:60:9d:d5:2d:
         b8:68:eb:ee:d7:f5:8c:ef:87:a9:8c:8c:8e:98:8f:2d:0f:7b:
         aa:22:2c:e4:ad:2e:1b:e4:e3:97:fc:ad:7a:ef:d2:29:0a:4b:
         24:79:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:26 2024 by rpki-client on console-fra.rpki-client.org