Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/10db82-965e-47e3-b742-5f4910b2ea0b/1/Ihw_8dO6vg2JEVmmOCbRThH6PsM.mft
File:                     Ihw_8dO6vg2JEVmmOCbRThH6PsM.mft (raw, json)
Hash identifier:          kttmQQ/wa8cjK1yAPHGV6OgtIWe9uqkoZeOEJle3SkE=
Subject key identifier:   82:56:5D:02:71:2F:12:AB:D4:4F:70:3E:52:38:7E:95:3A:7F:68:FD
Authority key identifier: 22:1C:3F:F1:D3:BA:BE:0D:89:11:59:A6:38:26:D1:4E:11:FA:3E:C3
Certificate issuer:       /CN=221c3ff1d3babe0d891159a63826d14e11fa3ec3
Certificate serial:       018F478F9F31C8B087E71DD3BF4BF1B38A86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ihw_8dO6vg2JEVmmOCbRThH6PsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/10db82-965e-47e3-b742-5f4910b2ea0b/1/Ihw_8dO6vg2JEVmmOCbRThH6PsM.mft
Manifest number:          0B4F
Signing time:             Sun 05 May 2024 07:02:25 +0000
Manifest this update:     Sun 05 May 2024 07:02:25 +0000
Manifest next update:     Mon 06 May 2024 07:02:25 +0000
Files and hashes:         1: Ihw_8dO6vg2JEVmmOCbRThH6PsM.crl (hash: cPc7bnhIEzdjRwyA1taVW5cU08q3tScbb2Tb3B92EPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/10db82-965e-47e3-b742-5f4910b2ea0b/1/Ihw_8dO6vg2JEVmmOCbRThH6PsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/10db82-965e-47e3-b742-5f4910b2ea0b/1/Ihw_8dO6vg2JEVmmOCbRThH6PsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ihw_8dO6vg2JEVmmOCbRThH6PsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:8f:9f:31:c8:b0:87:e7:1d:d3:bf:4b:f1:b3:8a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221c3ff1d3babe0d891159a63826d14e11fa3ec3
        Validity
            Not Before: May  5 07:02:25 2024 GMT
            Not After : May  6 07:02:25 2024 GMT
        Subject: CN=82565d02712f12abd44f703e52387e953a7f68fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:58:9b:fe:54:cd:c8:d7:89:d2:ac:06:92:
                    0e:f1:a6:67:bb:fa:4f:f0:0c:9b:43:76:8e:7e:ef:
                    a9:72:c1:3c:0d:2a:fd:bf:64:ef:2e:16:9d:84:81:
                    3b:11:8c:29:78:81:4e:ba:4e:2b:2b:b2:37:a3:a0:
                    07:f1:b0:7f:3f:32:d5:40:cd:08:98:c4:cc:2c:ba:
                    cb:a3:ad:d6:3b:2c:53:50:4f:f7:87:c9:7f:84:cf:
                    b0:3e:a8:9b:86:59:d0:88:8a:d2:82:3c:ae:00:99:
                    37:b9:e1:6d:9f:14:13:9a:08:9e:a9:ce:fb:0e:e5:
                    ab:94:ba:a3:b8:8a:cb:2d:1e:91:88:61:e0:b4:41:
                    3f:15:6c:f5:7c:d6:7b:4f:ac:86:1a:e5:09:b9:d3:
                    ac:c8:3e:31:60:83:f3:2a:0f:a4:64:3e:68:e8:26:
                    01:76:63:cf:61:df:ff:e2:06:1d:de:0e:74:1d:67:
                    2e:ea:d6:df:cd:4d:6b:ad:21:0c:1a:66:fb:6f:c2:
                    55:e8:a7:31:4d:76:96:11:a6:42:1b:e1:c3:d4:e0:
                    44:43:e9:3d:10:06:04:63:39:1c:2c:af:cf:6d:29:
                    0b:33:87:61:a8:bd:09:b4:4e:61:a1:51:4f:e7:69:
                    9e:dc:3f:8f:2d:c3:1a:14:69:97:b9:b1:8f:7f:c3:
                    3f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:56:5D:02:71:2F:12:AB:D4:4F:70:3E:52:38:7E:95:3A:7F:68:FD
            X509v3 Authority Key Identifier:
                keyid:22:1C:3F:F1:D3:BA:BE:0D:89:11:59:A6:38:26:D1:4E:11:FA:3E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ihw_8dO6vg2JEVmmOCbRThH6PsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/10db82-965e-47e3-b742-5f4910b2ea0b/1/Ihw_8dO6vg2JEVmmOCbRThH6PsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/10db82-965e-47e3-b742-5f4910b2ea0b/1/Ihw_8dO6vg2JEVmmOCbRThH6PsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:86:10:a8:0d:61:c6:64:fd:16:f2:ea:ce:b1:7e:f6:b0:7e:
         64:fc:0c:e3:2f:95:14:91:d7:5c:8d:90:10:1d:54:4a:02:9e:
         34:97:67:48:e8:89:94:82:cc:4e:8f:f3:44:75:ac:4b:20:a4:
         1c:46:bb:91:c7:55:9d:ef:61:68:ed:7f:5d:12:e7:00:d2:33:
         3c:e1:67:33:52:a3:10:2d:68:58:92:85:66:0a:f1:af:9e:8a:
         0c:51:f6:06:20:6b:f2:b7:8d:d2:5e:48:67:2d:d7:14:83:f3:
         40:74:b6:8a:c4:db:5e:0a:b4:ca:48:b7:0b:47:ff:23:c4:a9:
         99:4c:b0:e8:77:07:8c:80:e1:56:01:75:46:bb:a0:29:42:02:
         fa:51:69:48:2e:b6:5c:4c:20:47:cc:19:1b:90:7f:d0:87:c2:
         52:69:5a:3e:03:08:ac:7a:ff:3e:be:45:b3:7e:66:76:06:6f:
         a9:0a:3a:12:3c:d9:27:0b:4b:5f:42:3e:31:b1:af:c4:bb:e3:
         68:43:d5:54:2c:32:aa:ed:39:3c:09:2f:dc:e1:69:14:36:c3:
         45:44:99:5a:b1:45:72:ba:65:62:8c:4f:b4:93:69:8e:c0:22:
         5c:30:68:9a:82:38:5d:11:02:81:03:4e:c9:59:77:47:08:54:
         43:5b:d0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 13:16:09 2024 by rpki-client on console-fra.rpki-client.org