Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/40c50f-b5ee-4eb8-b055-23ad7ec612c0/1/9feRXSv70QeuOdnp1_1NTqb0G6Q.mft
File:                     9feRXSv70QeuOdnp1_1NTqb0G6Q.mft (raw, json)
Hash identifier:          kY6dnOvz7dFiDuELglqwiQiEaCeNPkPndQCcjvC5GUE=
Subject key identifier:   A7:72:6F:94:F6:A6:D4:61:B3:E3:E6:DF:75:C0:60:C8:F0:2F:4D:7D
Authority key identifier: F5:F7:91:5D:2B:FB:D1:07:AE:39:D9:E9:D7:FD:4D:4E:A6:F4:1B:A4
Certificate issuer:       /CN=f5f7915d2bfbd107ae39d9e9d7fd4d4ea6f41ba4
Certificate serial:       018F3BF9671134E84770FB3B906FB2168BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9feRXSv70QeuOdnp1_1NTqb0G6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/40c50f-b5ee-4eb8-b055-23ad7ec612c0/1/9feRXSv70QeuOdnp1_1NTqb0G6Q.mft
Manifest number:          0C4C
Signing time:             Fri 03 May 2024 01:02:31 +0000
Manifest this update:     Fri 03 May 2024 01:02:31 +0000
Manifest next update:     Sat 04 May 2024 01:02:31 +0000
Files and hashes:         1: 9feRXSv70QeuOdnp1_1NTqb0G6Q.crl (hash: hCxb4Zbz+tPPGZdXoItkkYCJCEB09cAUR2ptmzf27JE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/40c50f-b5ee-4eb8-b055-23ad7ec612c0/1/9feRXSv70QeuOdnp1_1NTqb0G6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/40c50f-b5ee-4eb8-b055-23ad7ec612c0/1/9feRXSv70QeuOdnp1_1NTqb0G6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9feRXSv70QeuOdnp1_1NTqb0G6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:67:11:34:e8:47:70:fb:3b:90:6f:b2:16:8b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f7915d2bfbd107ae39d9e9d7fd4d4ea6f41ba4
        Validity
            Not Before: May  3 01:02:31 2024 GMT
            Not After : May  4 01:02:31 2024 GMT
        Subject: CN=a7726f94f6a6d461b3e3e6df75c060c8f02f4d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f5:9d:a0:ac:04:34:b1:2e:35:a2:14:56:12:
                    10:20:fa:53:59:78:af:aa:b4:fc:9e:1b:28:05:4e:
                    a6:09:d3:e9:13:9f:33:88:7f:89:49:07:0e:ef:e6:
                    15:64:78:2e:e9:25:03:a9:33:b4:c5:31:fc:9c:ad:
                    13:5d:0b:68:59:f7:e4:34:e3:d8:26:09:f2:f3:ac:
                    5b:42:d4:37:96:e1:ae:20:c4:20:ed:81:bb:68:1e:
                    dd:26:46:12:46:03:b5:e7:49:26:10:7c:53:ea:d3:
                    d6:df:b9:f5:66:80:5b:e6:7a:ea:2b:18:0a:f0:ff:
                    db:bc:58:ce:27:6d:59:c5:de:67:0b:b0:0a:e8:0e:
                    75:dd:e4:57:ee:23:b2:8e:5c:cd:23:42:98:36:84:
                    ff:d0:61:a4:4c:a4:2a:fc:83:61:24:e0:29:9b:84:
                    13:da:4a:8b:76:39:ba:84:49:60:ca:82:6b:3c:b2:
                    0e:82:2b:d3:b9:21:53:93:f5:27:f2:16:f9:f3:0b:
                    3d:3d:97:c8:d7:cc:e7:47:20:8c:86:c5:fe:3a:87:
                    c0:d5:ac:5f:fd:44:a5:c8:07:29:fc:af:c0:95:82:
                    59:7e:e1:c1:98:79:2d:99:46:90:5d:6d:e0:de:26:
                    1d:bb:c1:78:a7:57:39:a8:13:a4:b8:b8:14:3b:60:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:72:6F:94:F6:A6:D4:61:B3:E3:E6:DF:75:C0:60:C8:F0:2F:4D:7D
            X509v3 Authority Key Identifier:
                keyid:F5:F7:91:5D:2B:FB:D1:07:AE:39:D9:E9:D7:FD:4D:4E:A6:F4:1B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9feRXSv70QeuOdnp1_1NTqb0G6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40c50f-b5ee-4eb8-b055-23ad7ec612c0/1/9feRXSv70QeuOdnp1_1NTqb0G6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/40c50f-b5ee-4eb8-b055-23ad7ec612c0/1/9feRXSv70QeuOdnp1_1NTqb0G6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:e5:10:d6:17:a7:a5:1a:ae:fa:38:d6:39:a2:77:dd:df:
         52:cd:cf:f4:28:91:d1:5d:8c:62:01:cb:6b:7b:f6:74:77:b9:
         4c:cd:b3:37:77:7e:3c:d9:80:68:98:c2:cd:9c:98:87:47:63:
         c5:af:81:0a:0a:74:7e:c3:d8:8d:6c:e3:98:1c:51:16:6a:98:
         0c:fc:4c:b1:ed:de:50:2e:71:bf:29:e2:76:b1:b1:1c:66:b5:
         1e:e6:b5:9b:5c:8a:49:f3:fa:f3:81:e7:ba:e1:82:3d:3c:cf:
         4e:77:49:36:95:ab:2a:30:a3:87:d4:1a:16:64:85:da:c0:d9:
         27:a7:e2:82:91:79:da:26:c4:0e:d3:67:99:33:7a:49:74:d1:
         ac:ad:34:73:9f:44:bc:fc:1f:13:a4:83:e1:73:95:82:3e:77:
         20:a1:f8:26:11:3e:52:56:03:be:59:fb:d3:97:07:0c:ba:13:
         67:0b:8e:22:89:a5:2d:35:26:5f:f3:46:dd:28:1c:be:6c:2f:
         38:42:6a:a6:59:59:69:24:ad:b4:b3:0a:23:c3:ff:4e:13:12:
         b1:45:84:07:e3:da:a5:02:e8:96:b7:52:db:de:34:57:8c:73:
         d4:26:5a:d9:65:a2:7a:29:0e:9d:08:37:70:38:a9:8e:74:f6:
         9f:89:f0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:28:08 2024 by rpki-client on console-fra.rpki-client.org