Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File:                     0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier:          fSZaHrzwJFK+nVqmfqrep9x/rArxUhzF1ZW+bZswQu4=
Subject key identifier:   B6:FE:6D:98:30:1F:91:E1:90:73:81:54:72:D7:1D:54:10:65:36:AD
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer:       /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial:       018F40B106DB53673C4806C05806F53FB001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 23:01:34 +0000
Manifest this update:     Fri 03 May 2024 23:01:34 +0000
Manifest next update:     Sat 04 May 2024 23:01:34 +0000
Files and hashes:         1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: 88y5ar17wWM7I7LMbLHRuRqFYFF2U3US3Hab4u4lE0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:b1:06:db:53:67:3c:48:06:c0:58:06:f5:3f:b0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
        Validity
            Not Before: May  3 23:01:34 2024 GMT
            Not After : May  4 23:01:34 2024 GMT
        Subject: CN=b6fe6d98301f91e19073815472d71d54106536ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:90:cf:5c:c3:05:4a:44:7d:9f:0f:2a:bb:
                    8e:ef:f7:85:5a:2b:bc:88:d5:58:6f:49:d9:0f:58:
                    71:23:22:17:77:2c:b0:ca:e5:c1:97:e0:dd:f3:c5:
                    66:ad:a5:f3:67:b1:4c:0a:a6:b4:b7:38:2e:7b:d1:
                    7e:04:ed:78:87:58:12:1e:2b:a9:e8:9c:59:f0:ee:
                    55:c2:0e:19:4a:2b:92:39:2d:ee:63:b3:14:3f:3f:
                    a8:b4:b1:d7:95:3a:2e:20:8c:c6:cd:5a:95:1d:03:
                    17:3e:30:ff:74:32:56:6c:0a:64:92:95:49:c6:92:
                    aa:f4:3b:0e:93:7b:30:a7:01:eb:08:fb:23:a8:b5:
                    d9:ee:d2:ac:d7:0c:e7:6a:03:e9:ae:13:92:68:93:
                    9f:02:76:22:21:9c:76:cc:c3:e4:a2:c2:fe:6f:ae:
                    6d:36:1c:83:bd:18:6d:05:fc:8c:45:0b:b3:db:d0:
                    62:f9:fd:9f:a6:ab:4a:f2:28:a4:05:4c:29:cd:bf:
                    6b:1e:ea:3d:a6:a2:3d:3a:4b:a0:12:e9:f8:28:f4:
                    fd:42:c9:1c:15:1c:bd:c8:f4:49:18:14:46:75:44:
                    2e:98:55:46:a2:af:b8:d1:91:a6:5a:54:f7:93:b0:
                    82:0d:56:e9:da:04:8b:9d:b3:4f:a7:c9:27:f7:c3:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FE:6D:98:30:1F:91:E1:90:73:81:54:72:D7:1D:54:10:65:36:AD
            X509v3 Authority Key Identifier:
                keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:3a:7a:92:bf:1d:31:83:b5:c9:de:19:6c:74:df:c1:9e:8a:
         57:43:16:43:47:b5:38:2f:b9:64:f3:4a:93:ea:2e:b4:32:08:
         b8:ad:5c:f3:dc:dc:f8:6c:70:dc:89:b1:16:50:75:f9:56:fd:
         27:5f:2e:00:8b:9b:2a:bc:13:18:77:fc:c1:a1:35:99:db:aa:
         74:6e:71:c6:1a:53:4b:08:f4:38:72:6c:dd:26:a5:74:2a:36:
         fa:d2:26:ac:96:46:e0:05:9b:1a:7e:01:ad:cb:2f:0f:27:83:
         ec:78:f5:56:05:09:23:ca:c1:c6:2e:8a:6f:13:d0:7e:13:ae:
         d3:22:e4:34:09:f6:e1:ab:79:e7:d2:02:4e:5c:ab:cd:06:13:
         09:f0:63:1f:81:2d:3b:f1:ad:94:44:e7:0a:fb:29:ba:5f:13:
         3a:ee:d7:00:98:3c:20:c5:05:11:99:55:24:d5:50:3f:f8:ae:
         33:29:43:b2:ad:1d:fe:24:6b:39:f3:6d:18:f2:57:6f:9a:80:
         aa:55:3b:ab:09:1f:3e:f6:69:82:9a:4d:5b:be:20:c3:72:4c:
         14:55:9a:3b:b5:cd:61:6f:0f:58:3d:22:57:99:96:c0:59:f9:
         3c:86:c7:80:53:f5:d1:73:94:11:d0:e8:8f:43:b3:4a:53:4f:
         5d:21:44:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:32:35 2024 by rpki-client on console-fra.rpki-client.org