Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File:                     C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier:          3TseHW6XdCgGKGlNMOMYIxCLUMQyCCHcQBKF64JH1Is=
Subject key identifier:   97:BE:CB:40:D8:51:D4:00:98:A1:9E:14:DB:C1:19:D7:8C:E3:71:83
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer:       /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial:       018F3889CA42C7475CA5C28520C21362C926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number:          114D
Signing time:             Thu 02 May 2024 09:01:45 +0000
Manifest this update:     Thu 02 May 2024 09:01:45 +0000
Manifest next update:     Fri 03 May 2024 09:01:45 +0000
Files and hashes:         1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: Wqgyuu6l9Au4/NEEC+6OlpCagUyVxVpLCFVByXbkmqY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:89:ca:42:c7:47:5c:a5:c2:85:20:c2:13:62:c9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
        Validity
            Not Before: May  2 09:01:45 2024 GMT
            Not After : May  3 09:01:45 2024 GMT
        Subject: CN=97becb40d851d40098a19e14dbc119d78ce37183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:62:6f:71:91:bb:e5:c4:fc:d1:b5:13:2e:
                    8c:81:6f:7a:a8:01:da:2a:46:37:76:d8:b0:0b:d5:
                    ff:2b:17:d3:c8:d7:d6:05:a2:ab:00:49:b3:00:26:
                    be:fd:03:bc:a3:cd:8c:1c:42:3e:2f:ad:09:f1:b2:
                    93:40:d1:81:2e:95:89:4c:5b:13:44:e7:67:77:d4:
                    8e:40:89:da:0b:4c:c7:fa:a7:65:97:dc:2a:67:52:
                    4c:5f:d7:a7:40:e6:37:0f:b9:a5:d9:6d:22:14:94:
                    f2:37:97:47:5e:a8:80:05:84:91:cb:c0:a2:8b:64:
                    fc:78:4f:04:d0:3e:87:42:06:3c:a6:7b:51:33:81:
                    77:42:2b:cb:0d:73:9b:45:6f:11:ad:db:fb:fc:4e:
                    98:6b:ef:4d:59:47:2b:d7:eb:54:3a:5c:4e:fa:f6:
                    f8:10:b0:46:25:35:35:56:91:06:92:3c:42:d9:62:
                    47:b6:49:58:c8:d8:b4:76:3a:de:80:7c:bf:73:7c:
                    29:6a:d0:20:af:1d:fd:81:98:23:d3:75:00:90:78:
                    08:59:9d:84:81:fd:5e:0a:f9:5e:44:e5:89:6a:e9:
                    f6:c3:fb:4b:66:61:e3:c3:c0:57:64:c7:95:f3:7d:
                    fe:98:76:b0:f4:da:13:f6:6d:cb:97:12:f9:25:1e:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BE:CB:40:D8:51:D4:00:98:A1:9E:14:DB:C1:19:D7:8C:E3:71:83
            X509v3 Authority Key Identifier:
                keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c7:37:2e:0c:5a:23:17:2d:e4:fd:f9:56:a4:6d:8a:c6:5a:
         39:cc:96:d8:48:f2:09:5d:84:a5:eb:96:4f:5d:08:9e:c8:62:
         bd:5c:f1:29:11:c2:34:91:78:b1:cd:b8:66:56:06:aa:4d:7b:
         c0:27:50:6a:4c:63:fa:5c:c3:a8:2a:73:56:ec:76:24:d4:a9:
         1f:61:b5:5c:e2:cd:70:c6:c1:0f:f1:dd:fb:4f:67:1d:dd:00:
         85:f2:81:c0:4e:ac:3f:01:06:8d:3f:ed:ef:8a:24:e7:a6:45:
         1a:01:50:f0:43:1d:fb:ba:ca:cf:a0:98:b3:e6:a8:57:ab:bb:
         e1:29:23:fa:8e:2a:f5:5b:9d:f1:23:ee:ad:5c:20:25:75:05:
         c1:20:88:d4:d9:90:45:95:16:6a:6b:18:99:d0:ff:89:ea:86:
         48:53:fb:34:99:28:3d:df:17:71:f4:85:4a:c5:bc:80:69:b1:
         81:6c:23:34:bf:96:e8:00:05:91:50:fc:2c:55:df:8c:0f:7f:
         d2:2a:a4:db:b7:76:0c:d3:f4:80:a9:55:23:a7:92:68:ef:17:
         c0:8a:b6:a5:84:f5:20:14:73:47:9e:dc:e5:f0:9b:a2:70:3e:
         84:5b:e5:c5:83:da:a8:f5:22:29:2f:a3:95:0c:8d:b8:df:ad:
         6d:0d:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:02:05 2024 by rpki-client on console-ams.rpki-client.org