Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
File:                     meB6Mav-wkkJsYhGOEb99lWHJCM.mft (raw, json)
Hash identifier:          117WzrI4oRh33WU+Ztg1TjZSeRAPzHvFeN+lmgC54Ck=
Subject key identifier:   B6:94:F2:83:A6:A9:91:8A:60:46:9E:96:1F:D1:B3:52:2F:0A:84:94
Authority key identifier: 99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23
Certificate issuer:       /CN=99e07a31abfec24909b188463846fdf655872423
Certificate serial:       018F8749ED4ECE1BED699E0A438EA84A0029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
Manifest number:          0D5A
Signing time:             Fri 17 May 2024 16:01:59 +0000
Manifest this update:     Fri 17 May 2024 16:01:59 +0000
Manifest next update:     Sat 18 May 2024 16:01:59 +0000
Files and hashes:         1: meB6Mav-wkkJsYhGOEb99lWHJCM.crl (hash: XpEDX3bBiRjbPOmf2Nl0V8qhjIjGMItuS9FZgkyt9k0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ed:4e:ce:1b:ed:69:9e:0a:43:8e:a8:4a:00:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e07a31abfec24909b188463846fdf655872423
        Validity
            Not Before: May 17 16:01:59 2024 GMT
            Not After : May 18 16:01:59 2024 GMT
        Subject: CN=b694f283a6a9918a60469e961fd1b3522f0a8494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:85:c9:dd:06:11:44:29:0c:37:f0:44:6d:
                    98:99:75:65:e8:01:ad:88:32:33:14:92:c8:66:8e:
                    99:0d:23:9a:6a:d7:2d:e7:4f:73:f3:9a:d1:11:7c:
                    8c:42:b9:3c:a0:a3:6f:50:ec:49:74:e3:91:3c:6f:
                    fb:4e:52:59:1d:3a:9c:d5:7e:03:b0:73:fe:74:4a:
                    6f:f8:1b:12:7f:bb:1d:a1:06:e8:2c:cd:1f:70:85:
                    ca:3d:55:2b:6e:6c:0a:96:22:81:75:d9:f0:24:59:
                    74:0a:0e:bd:c4:0b:5c:42:d4:ff:44:9e:f7:dc:9b:
                    79:57:81:d1:8b:2a:75:33:fe:fd:b7:83:06:6b:36:
                    e8:40:4b:cc:48:e2:5c:10:52:75:fc:f4:7c:1c:99:
                    cf:e3:0f:ec:6a:66:f6:04:3b:b8:b1:93:6e:22:53:
                    4d:a3:7c:25:9b:76:a8:ca:64:62:b8:5a:37:16:bd:
                    e2:5e:3a:4a:0e:6e:36:ac:30:e6:64:7c:04:aa:1a:
                    bd:53:14:c1:e6:be:81:58:aa:07:8d:c1:53:79:3d:
                    11:3a:4f:46:f3:4f:61:e3:4b:53:00:14:50:7f:f8:
                    dc:06:0c:4c:9c:c9:13:5a:72:e1:d3:c5:e6:b8:cf:
                    e5:c5:e9:e5:cd:bb:fc:3a:24:24:4b:ba:ce:79:b2:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:94:F2:83:A6:A9:91:8A:60:46:9E:96:1F:D1:B3:52:2F:0A:84:94
            X509v3 Authority Key Identifier:
                keyid:99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:86:08:91:9c:d7:ce:da:c8:aa:0e:a9:ad:a0:78:62:86:cf:
         39:51:d0:32:77:e3:29:fc:59:10:b6:62:1b:1f:b3:99:53:cb:
         36:20:ad:a3:28:51:32:4f:2c:96:65:82:a2:f3:5e:c9:62:f8:
         80:cd:04:76:d0:f1:20:3f:7f:d6:69:6b:99:9b:6c:3b:88:c9:
         96:a6:d9:08:ae:04:08:17:e9:81:79:8a:0b:c2:00:e6:e1:d2:
         02:8d:90:52:d7:5f:74:ea:92:36:9f:f4:00:08:bd:7d:66:a6:
         f1:dd:d3:fd:c5:72:44:e3:9b:4a:ca:20:09:57:3c:60:58:f5:
         96:a1:70:52:16:97:db:4b:6e:0c:3e:72:b0:2e:cb:f4:c0:ed:
         18:9e:47:4a:ac:83:b8:74:32:cf:f2:f4:e5:98:e3:ab:99:28:
         b1:75:19:d4:6c:7f:78:2d:be:7c:d8:32:d5:22:eb:f9:57:cd:
         cd:de:1d:12:81:ad:a1:e4:e8:16:53:b0:26:27:cf:d7:10:6e:
         0e:46:0a:90:e7:cb:07:fe:b3:27:22:be:75:06:86:88:bd:dd:
         42:c0:40:ca:73:e5:a1:2f:85:3e:49:41:a9:00:de:98:2e:bf:
         6b:35:51:ce:eb:df:f1:ec:e6:e2:6a:39:3d:9d:80:55:58:0a:
         1e:d7:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:39:47 2024 by rpki-client on console-fra.rpki-client.org