Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
File:                     RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft (raw, json)
Hash identifier:          UncQ5m8BRs8NDuJ93yj/C9T37KlohUz4hVLKNMPcUMA=
Subject key identifier:   A0:09:3E:0D:E1:9E:DE:57:67:C9:D9:6F:10:25:FE:CE:66:61:70:D3
Authority key identifier: 45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4
Certificate issuer:       /CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
Certificate serial:       018F87B694787B09C9568AC4F785E143A717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
Manifest number:          08E7
Signing time:             Fri 17 May 2024 18:00:40 +0000
Manifest this update:     Fri 17 May 2024 18:00:40 +0000
Manifest next update:     Sat 18 May 2024 18:00:40 +0000
Files and hashes:         1: RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl (hash: JQEOhWl66Irf2YuLo03DeQ8oC7JaVD8C6/TKrvJrHxk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:94:78:7b:09:c9:56:8a:c4:f7:85:e1:43:a7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
        Validity
            Not Before: May 17 18:00:40 2024 GMT
            Not After : May 18 18:00:40 2024 GMT
        Subject: CN=a0093e0de19ede5767c9d96f1025fece666170d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:6f:84:8a:b0:50:7a:9d:d2:70:a4:12:d3:
                    38:a8:f7:08:72:6b:fe:1b:82:35:46:8f:5c:5f:86:
                    48:43:a8:54:11:23:9c:f8:c1:2e:a6:ed:b7:cd:26:
                    5e:c1:db:ec:bc:f4:49:9b:72:eb:23:92:0b:ba:01:
                    29:a9:ea:e9:10:83:8c:c8:df:f6:95:8f:b4:3c:2b:
                    64:df:be:89:23:57:85:ae:12:0e:58:34:9c:fe:a7:
                    02:8a:a7:28:f7:ed:d7:a4:d5:bd:b3:f2:3f:46:c4:
                    75:16:09:03:5d:96:64:88:7e:3a:dc:73:58:b1:78:
                    93:fc:0a:c0:9d:cf:05:35:e0:c4:fd:3c:1f:ba:91:
                    71:e1:8f:1b:27:64:1f:c5:db:75:95:e0:78:74:55:
                    99:c5:23:3e:1e:fd:6d:b2:26:de:40:1a:86:c9:1f:
                    a9:65:dc:03:d2:ea:f0:58:e5:83:6f:91:17:4d:ef:
                    44:13:29:09:95:78:39:a2:61:52:98:ce:0a:63:61:
                    4d:b6:57:60:7a:36:ef:2e:5b:3f:08:17:1c:47:ac:
                    f7:fe:37:8b:7f:f2:18:6d:62:70:58:50:49:3a:00:
                    7e:ae:6d:fb:ef:4c:4b:51:ed:b7:a9:15:01:7b:10:
                    86:8e:92:49:1d:bd:9a:d4:d0:66:2e:7c:da:96:1c:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:09:3E:0D:E1:9E:DE:57:67:C9:D9:6F:10:25:FE:CE:66:61:70:D3
            X509v3 Authority Key Identifier:
                keyid:45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:95:15:77:c9:3c:4c:a1:8f:39:43:61:0a:87:35:46:7b:7e:
         d6:06:90:80:fc:5a:47:9f:8e:37:28:e2:d1:8e:7f:91:2e:e7:
         ca:aa:b1:e7:9d:87:d6:68:73:e6:f3:d7:ce:5d:79:bf:6e:6e:
         47:09:63:b2:3f:0e:df:51:a0:51:0c:da:cf:1a:9b:1b:64:24:
         3b:86:ab:c6:d1:94:7b:b6:03:b9:f3:e6:3e:45:94:91:12:9a:
         7f:96:da:35:fd:82:dd:2f:33:93:3d:bf:87:88:1d:83:00:7b:
         8b:29:31:a8:fd:a6:32:30:75:9c:9c:71:38:38:eb:96:81:a5:
         64:2a:e6:4a:a1:54:bd:62:a0:2c:9a:61:81:1f:76:ff:7d:36:
         1b:7d:33:bb:35:50:f5:01:25:05:4f:4b:5f:41:8c:6d:a3:e3:
         a3:ee:4f:be:c5:65:5d:ce:70:9c:c4:97:a4:92:29:f4:40:55:
         c3:d7:d4:d0:9f:d1:e7:14:62:0e:28:be:46:16:8d:31:b8:b8:
         02:5c:c5:53:0c:0d:63:eb:e3:c7:4a:d6:ed:a7:5f:94:07:7d:
         3c:b4:a3:3d:da:b8:cf:e4:a5:47:34:22:99:40:75:c5:7f:e4:
         93:44:8d:8e:7e:d5:bb:cd:5f:a6:c0:99:06:b6:b7:a3:cd:9b:
         db:3d:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:29 2024 by rpki-client on console-fra.rpki-client.org