Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
File:                     Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json)
Hash identifier:          yvUfuShTf40tT2p633bI10mOyU9AGDsciAuSmGG6yt4=
Subject key identifier:   B5:9E:FC:BD:DF:E5:95:54:C2:08:6B:AC:FE:71:37:F9:44:F0:A4:15
Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80
Certificate issuer:       /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
Certificate serial:       018F3B53E2D6A9837F73482482720E778C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 22:01:44 +0000
Manifest this update:     Thu 02 May 2024 22:01:44 +0000
Manifest next update:     Fri 03 May 2024 22:01:44 +0000
Files and hashes:         1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: X0kTIGHi/9MqE/bDEu5eeUHe/LvU8zW+Ve9W0+Jsu+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:e2:d6:a9:83:7f:73:48:24:82:72:0e:77:8c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80
        Validity
            Not Before: May  2 22:01:44 2024 GMT
            Not After : May  3 22:01:44 2024 GMT
        Subject: CN=b59efcbddfe59554c2086bacfe7137f944f0a415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9b:f3:60:19:2f:4c:f6:73:78:6e:20:df:a4:
                    48:4d:1c:a7:86:98:84:ed:b2:d7:30:ca:6c:8b:9e:
                    a5:ca:89:77:bc:ea:95:a6:7d:87:5c:74:99:c4:2c:
                    72:a6:8e:96:5e:aa:07:91:13:e5:0d:e5:3d:7c:ed:
                    c1:21:78:7d:2e:69:cb:8e:37:77:f8:c4:77:2b:04:
                    bd:b3:ca:c1:9f:00:8e:8d:29:be:09:1c:35:68:fd:
                    27:ad:8f:27:48:c0:f4:6b:f1:a6:5c:74:33:ab:73:
                    73:e5:8b:4d:d0:28:07:97:d3:09:3c:04:ff:56:26:
                    63:11:b6:ad:6b:e7:d3:5e:24:cb:d7:6e:4f:2d:76:
                    0f:d5:27:6c:9a:08:3e:c2:5a:ea:4e:3e:c9:2e:e7:
                    3f:4c:21:25:03:21:77:e6:71:dc:d2:c3:d4:59:3f:
                    2c:6a:1a:d6:d5:9f:95:13:45:d5:6d:56:3c:e9:e2:
                    95:57:3e:d8:a5:75:ea:cb:f4:ec:be:e8:b2:e4:e0:
                    3a:9f:dc:02:a7:56:2b:bd:b7:d5:d7:1b:43:e8:20:
                    0f:ee:a4:3a:6b:8c:c8:9a:f3:4a:ac:86:a7:35:6c:
                    74:4c:40:3e:02:43:4e:8b:91:3d:9f:02:c6:7d:f8:
                    cc:ba:06:18:05:1a:99:6e:ae:97:5c:73:4c:ef:8a:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9E:FC:BD:DF:E5:95:54:C2:08:6B:AC:FE:71:37:F9:44:F0:A4:15
            X509v3 Authority Key Identifier:
                keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d5:86:57:1d:02:13:c7:1e:af:ea:40:b0:38:56:84:8d:7a:
         36:9f:d6:64:86:05:42:c2:99:53:0f:84:f2:91:01:9d:1e:1d:
         1f:a0:e9:8d:9b:b0:67:6b:b2:2d:d1:d8:0b:25:b1:91:c1:b8:
         39:d4:21:d9:67:db:d3:0d:8a:92:cb:d7:a6:65:3c:82:2b:c4:
         61:e6:ec:04:9c:2e:bc:44:5a:c7:34:db:72:42:62:48:ae:e0:
         a0:a7:17:5d:29:02:d8:ef:34:56:23:45:dd:a4:b1:d2:eb:8d:
         3b:e9:7a:46:85:2d:66:7a:ff:81:ea:d7:fa:a0:7b:ea:9d:27:
         65:6f:71:87:23:06:4d:8e:65:e2:2d:19:4d:4e:3f:4b:60:e2:
         ad:33:39:ab:81:ea:25:94:dc:4b:a9:eb:b6:7f:72:1b:2f:0b:
         63:2d:c7:56:fe:52:14:13:bc:b4:01:b4:e7:23:70:18:5e:8a:
         d8:40:bb:0b:bb:ea:6d:0e:f3:9e:4c:94:1f:f2:38:cf:c9:e9:
         b0:33:13:8a:19:ef:ca:f5:61:53:64:81:1b:ac:d4:d3:c3:92:
         83:48:3d:9d:dc:38:5d:52:af:84:96:53:85:46:b4:10:b1:c6:
         7a:21:62:e2:49:93:c1:df:53:4a:08:cd:fa:d7:bf:cd:30:eb:
         dc:dc:e5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:21:47 2024 by rpki-client on console-ams.rpki-client.org