Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
File:                     FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft (raw, json)
Hash identifier:          29tuiH3g5L+Qip0ovbRDpNnrCEMlBswSbzYvpklRiO4=
Subject key identifier:   43:0B:B9:3C:D8:43:08:0E:76:C2:4B:37:A5:22:28:C0:63:17:56:3B
Authority key identifier: 14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B
Certificate issuer:       /CN=14bb6fac6919d900a2febb781d197f4d8134e05b
Certificate serial:       018F430D3BB829D4B9092630C74897D3CE74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
Manifest number:          0D6B
Signing time:             Sat 04 May 2024 10:01:31 +0000
Manifest this update:     Sat 04 May 2024 10:01:31 +0000
Manifest next update:     Sun 05 May 2024 10:01:31 +0000
Files and hashes:         1: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl (hash: X8fiLDvI/ZL01sf7EFDW4KBIIV7eGyFE6vPX54pvhA8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:0d:3b:b8:29:d4:b9:09:26:30:c7:48:97:d3:ce:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bb6fac6919d900a2febb781d197f4d8134e05b
        Validity
            Not Before: May  4 10:01:31 2024 GMT
            Not After : May  5 10:01:31 2024 GMT
        Subject: CN=430bb93cd843080e76c24b37a52228c06317563b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:69:b3:f3:5d:23:e8:29:a5:c3:f2:ee:c2:
                    d0:df:5a:8b:b8:60:d5:d6:d0:e9:30:ca:97:96:7b:
                    f9:00:a0:f9:3e:ef:e4:ae:16:c6:92:e6:60:fd:3a:
                    71:e8:98:fe:c8:80:4b:54:5f:8b:f7:11:3c:ec:34:
                    1d:90:49:70:74:e2:13:fa:34:13:0b:2c:5d:dc:4a:
                    da:e2:ba:7e:41:03:3d:3f:af:67:e2:fb:e6:3b:60:
                    4a:52:af:df:75:15:3c:15:80:82:fe:e9:0f:c2:a2:
                    35:7a:92:11:5c:69:fc:57:58:4f:bd:0a:bb:48:9a:
                    8b:7d:39:bc:e2:d9:e3:4f:a5:d3:37:0d:c8:b0:ec:
                    52:af:a8:f8:0b:45:bd:b1:e3:8a:8b:b0:8f:7a:fe:
                    7b:62:11:d2:43:87:f3:e1:c3:04:5a:9e:04:c2:61:
                    dc:aa:b4:ae:4d:97:f3:fa:70:49:97:81:84:ea:43:
                    9b:6b:af:4e:6a:80:02:6b:81:9b:77:28:0e:0b:95:
                    87:0a:ab:1a:1c:e9:7a:24:97:20:1b:7b:6d:fd:1c:
                    4f:66:66:ea:b0:70:ff:30:ac:53:42:83:14:ea:f0:
                    6b:51:53:22:b1:57:56:47:a4:ad:dd:52:07:fe:df:
                    11:f4:f9:ad:ec:7b:80:af:ea:4c:03:3b:6e:ab:bf:
                    4c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0B:B9:3C:D8:43:08:0E:76:C2:4B:37:A5:22:28:C0:63:17:56:3B
            X509v3 Authority Key Identifier:
                keyid:14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8b:51:6f:d1:d7:d7:9e:24:99:53:58:fc:8c:85:51:05:86:
         64:32:cf:b7:c4:6b:4a:db:6e:16:e9:29:14:6c:cf:ba:37:58:
         cb:4e:82:b3:28:66:b2:9b:22:ff:70:ad:5e:aa:27:ff:24:2b:
         98:70:bb:e7:dc:6a:2f:60:82:17:ff:0e:e6:8b:af:db:6a:9c:
         ce:9c:61:6c:d8:ea:c6:43:67:ba:20:88:ab:ca:04:c5:4d:ba:
         f7:85:26:fc:41:04:d9:19:e4:c1:98:af:0e:72:56:19:6a:cf:
         e1:1f:7f:a7:91:ec:1b:01:5e:42:8f:e0:77:9e:a3:14:50:d5:
         fa:e6:52:ac:f1:2a:26:64:34:86:10:5e:ff:d7:1f:14:9c:c7:
         9c:d7:7a:f2:03:c6:bb:d1:0a:ff:54:f4:ab:05:2f:5f:36:b6:
         53:b7:6b:0e:4c:86:52:bd:76:9c:b0:92:3e:bd:a5:fb:a7:a8:
         6d:7c:8b:29:68:1c:ae:5e:5e:d9:19:3c:58:ae:08:57:61:cc:
         2f:52:85:ea:d8:d5:87:4f:be:18:2e:e1:76:da:35:a3:cd:88:
         94:de:bc:74:24:20:f6:cd:f1:eb:44:57:96:c0:cb:fe:46:b7:
         6a:f9:48:1d:b8:6a:19:e5:24:cc:25:1a:42:e6:15:f0:4d:0f:
         dd:b8:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:31:04 2024 by rpki-client on console-fra.rpki-client.org