Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
File:                     1dhc7fCdgveSwYDZClqaI21qcFw.mft (raw, json)
Hash identifier:          b0+PrR9KAq5MPkGSHNeCDGmPWJH1dk9zI7cAnaUBFsQ=
Subject key identifier:   6F:2C:C6:93:6E:12:FB:5D:DF:33:EA:32:FB:EA:E9:BD:61:5E:31:C3
Authority key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Certificate issuer:       /CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Certificate serial:       018F5400AEB447F9838EBF6DFB36914E00D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
Manifest number:          115A
Signing time:             Tue 07 May 2024 17:01:21 +0000
Manifest this update:     Tue 07 May 2024 17:01:21 +0000
Manifest next update:     Wed 08 May 2024 17:01:21 +0000
Files and hashes:         1: 1dhc7fCdgveSwYDZClqaI21qcFw.crl (hash: s8u8IPfmPOt0wSLxE6vjVCXdudMybJDwnXZ+4nRPUN8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:00:ae:b4:47:f9:83:8e:bf:6d:fb:36:91:4e:00:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
        Validity
            Not Before: May  7 17:01:21 2024 GMT
            Not After : May  8 17:01:21 2024 GMT
        Subject: CN=6f2cc6936e12fb5ddf33ea32fbeae9bd615e31c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:f0:ab:b6:19:eb:fc:ca:a9:c3:dd:51:42:
                    19:02:77:18:5b:73:0d:03:93:52:21:68:47:39:46:
                    eb:8b:b1:42:98:bf:1b:3e:a9:01:e2:f5:02:99:16:
                    aa:76:7c:da:a9:93:60:32:f3:64:d5:7b:50:a5:b2:
                    d6:6f:3d:a8:64:0f:cd:6a:7b:04:bf:44:8e:46:77:
                    45:32:bb:90:07:4b:95:41:14:fa:8d:99:81:3a:b0:
                    c2:00:ee:d8:fc:68:f5:06:12:02:8d:02:d9:79:57:
                    64:1c:c0:3f:ea:25:52:7d:e3:b7:d4:e7:82:a3:e0:
                    9e:55:e6:4a:d4:88:5f:e4:5c:66:7e:2c:b1:ff:9a:
                    b7:5d:e9:d5:ed:03:8f:01:a7:de:80:c7:43:ba:65:
                    b2:e9:86:2b:27:65:68:4a:99:1e:e2:79:78:b5:49:
                    cc:2e:ad:4f:12:f4:d9:f7:bc:4c:1f:11:4f:e7:e0:
                    ee:85:39:6f:6d:df:cf:c6:60:a5:0b:e7:88:6f:38:
                    c3:8c:2c:fb:db:8a:c3:c6:db:37:25:ff:97:b7:24:
                    f2:5b:80:8d:ff:b5:c1:cd:39:32:a6:93:39:0a:6a:
                    d3:4d:a5:f4:e6:17:b6:42:15:20:d4:7f:a3:4c:55:
                    da:44:d0:f5:dc:cc:b9:a7:e1:06:a6:b0:af:47:ed:
                    92:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2C:C6:93:6E:12:FB:5D:DF:33:EA:32:FB:EA:E9:BD:61:5E:31:C3
            X509v3 Authority Key Identifier:
                keyid:D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0c:e3:5c:6c:db:d6:4d:df:1b:f5:8e:22:8a:87:88:1d:d5:
         f4:da:aa:79:36:f4:30:4b:85:b6:2b:be:a6:3b:52:60:f6:69:
         15:2e:1f:2f:43:13:6f:28:1a:2f:9c:79:fe:55:81:72:51:c6:
         ef:f1:fe:c7:81:09:ab:dd:89:3d:85:8d:59:18:55:92:29:f4:
         ac:48:bd:d5:bd:f1:4c:6d:28:95:89:a3:2d:86:37:ad:e8:27:
         a0:93:e6:1c:c8:f4:c6:3b:62:fc:13:65:8d:5e:a4:6b:01:71:
         17:f7:69:49:d0:fa:d2:f0:77:6e:2e:2e:ec:22:51:18:ab:a4:
         2b:4c:8e:26:77:e3:a8:08:c8:77:15:57:cf:a4:79:fd:7b:ab:
         00:1e:f6:bd:00:5e:e5:03:9a:18:5b:1a:33:a9:c1:74:4b:21:
         74:c9:4d:02:cd:85:d0:62:45:e9:02:86:5b:9e:b3:83:21:9e:
         35:1b:c5:88:37:a9:f5:b8:44:f5:bb:dc:8a:92:07:28:6b:f8:
         43:c1:90:18:05:6a:07:e4:13:99:52:28:03:eb:fd:7c:fd:87:
         5b:51:ce:d0:15:8a:c5:68:b3:cc:e6:2e:a5:74:7f:71:67:1f:
         96:86:9d:70:e5:08:93:b7:ec:5c:62:2c:5f:5d:0a:08:ca:f4:
         c5:36:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:47:46 2024 by rpki-client on console-fra.rpki-client.org