Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
File:                     AIsoBYgFTtjERuJ7ScrEVYip6YA.mft (raw, json)
Hash identifier:          OYHtg8us9rLYTJhjAdKwMVrIqqJtt8DgsbWJBaB4qMU=
Subject key identifier:   04:DE:4F:B4:88:E2:81:EE:47:5B:A0:F2:C9:A9:02:2B:A9:A3:FA:C4
Authority key identifier: 00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80
Certificate issuer:       /CN=008b280588054ed8c446e27b49cac45588a9e980
Certificate serial:       018F41C4900D88DAFD084497E03D47083D50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
Manifest number:          0C10
Signing time:             Sat 04 May 2024 04:02:32 +0000
Manifest this update:     Sat 04 May 2024 04:02:32 +0000
Manifest next update:     Sun 05 May 2024 04:02:32 +0000
Files and hashes:         1: AIsoBYgFTtjERuJ7ScrEVYip6YA.crl (hash: Zuw+q++Awf721gJu3sBlryJF0k7Xc7UDJz6JBQ1SIvg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:90:0d:88:da:fd:08:44:97:e0:3d:47:08:3d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=008b280588054ed8c446e27b49cac45588a9e980
        Validity
            Not Before: May  4 04:02:32 2024 GMT
            Not After : May  5 04:02:32 2024 GMT
        Subject: CN=04de4fb488e281ee475ba0f2c9a9022ba9a3fac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:74:c2:1d:1b:0f:5a:00:4c:86:4b:18:d2:
                    29:81:b9:f0:02:8c:68:b4:a8:1e:9d:9c:10:b8:b7:
                    60:2b:99:4c:60:76:01:c4:1a:de:71:c8:62:82:7e:
                    28:4b:1b:25:63:f0:72:63:41:8d:ce:60:3a:2b:5c:
                    14:54:4b:71:11:53:0e:0b:da:95:cc:b0:77:78:1d:
                    a3:38:89:7d:67:84:8b:97:0a:2c:b4:35:9a:3c:57:
                    6d:56:15:01:c7:20:2e:2c:59:ca:c3:de:7c:85:4f:
                    66:17:94:96:33:6a:16:0d:7b:94:90:87:d2:ed:c7:
                    10:16:51:22:c9:93:37:46:22:34:82:ae:27:7b:c9:
                    cd:c8:15:ea:3c:a6:50:7c:13:92:77:0f:d9:8e:3c:
                    48:4a:d1:12:b6:8f:e3:94:2b:16:ac:c0:f5:8e:d2:
                    b5:c3:ec:b1:8b:0a:a0:c9:e2:f5:39:c2:8a:ea:8f:
                    e4:87:60:7c:67:12:4a:cd:4b:a6:75:60:16:ae:ff:
                    0c:c2:31:7a:6a:f4:2f:78:02:1b:4e:fd:ea:32:49:
                    3e:97:5b:dd:8f:af:73:88:5d:cd:a5:8a:6e:0a:b7:
                    74:bf:63:65:41:2f:e8:8d:dc:26:b0:4d:ae:ee:bd:
                    51:ba:6a:75:3a:a1:94:ea:9b:dd:4d:1b:fa:68:a1:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DE:4F:B4:88:E2:81:EE:47:5B:A0:F2:C9:A9:02:2B:A9:A3:FA:C4
            X509v3 Authority Key Identifier:
                keyid:00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:35:41:cc:3f:d8:35:38:07:da:ad:67:d4:55:47:e7:9e:ea:
         23:47:f3:9c:b4:52:a6:7f:d4:73:e4:23:39:03:3e:0f:5e:04:
         33:3a:08:18:a5:90:38:8f:b6:31:19:48:9e:5e:2a:3c:ce:39:
         e3:fc:91:ff:63:a9:1c:36:2c:f7:19:cf:9a:69:94:87:01:5a:
         df:a0:b7:a3:b3:00:f0:63:cf:0b:53:9a:2c:63:f4:30:3d:96:
         cf:81:0d:a8:4f:59:6b:fc:99:7d:6b:85:6f:cb:9a:20:7a:3a:
         68:50:fc:05:54:34:c0:38:ce:e0:44:62:e3:f1:b3:c3:47:da:
         b8:48:e5:b8:ef:7e:f3:50:56:7a:e2:0e:0b:aa:e0:01:af:61:
         5a:14:e3:20:bc:d1:65:e3:32:32:83:5a:99:2f:e4:23:8f:7f:
         39:7a:3b:cb:19:d4:78:a8:1b:b6:1f:3f:1a:3d:e4:b1:6c:54:
         16:9a:4b:b6:71:42:a0:57:12:3a:33:12:c8:9a:6a:49:8a:44:
         37:40:58:70:8e:13:ba:e9:f8:d0:ea:17:09:a4:57:ea:b0:2e:
         0e:2e:22:21:c8:98:20:55:ce:ca:27:a5:0b:22:c5:42:ed:7a:
         67:e9:15:d8:fb:86:e4:6d:18:d4:ea:42:ec:b0:be:d7:f5:3d:
         13:80:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:08:11 2024 by rpki-client on console-fra.rpki-client.org