Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File:                     3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier:          WCoFCnY1wyA/qHeGIc+D46vikf2PtBu5yGX0JrfjBo8=
Subject key identifier:   7B:17:CB:4E:F3:06:C0:29:1F:02:0D:94:00:4F:35:54:13:15:F9:D0
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer:       /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial:       018F3BF9615C8E158D1DA01ACC1BF3ED786F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number:          0E0C
Signing time:             Fri 03 May 2024 01:02:30 +0000
Manifest this update:     Fri 03 May 2024 01:02:30 +0000
Manifest next update:     Sat 04 May 2024 01:02:30 +0000
Files and hashes:         1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: LraEn1dutq1H335nVaoMda7o3/pTjKpNmOeQ03yip3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:61:5c:8e:15:8d:1d:a0:1a:cc:1b:f3:ed:78:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
        Validity
            Not Before: May  3 01:02:30 2024 GMT
            Not After : May  4 01:02:30 2024 GMT
        Subject: CN=7b17cb4ef306c0291f020d94004f35541315f9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:7a:05:c0:6a:e5:53:f3:33:0a:8f:45:d9:
                    2f:30:d1:e1:dc:b5:15:b3:8d:c5:73:2c:27:7f:8c:
                    29:33:d7:5a:af:f0:e2:a4:94:43:c1:41:d9:00:35:
                    54:f4:7b:98:30:50:94:bf:73:50:41:9a:a8:bf:ac:
                    09:9f:93:ea:8d:02:2c:af:4e:5c:0b:52:5a:90:91:
                    97:f0:be:19:16:86:7c:5d:b3:c1:fa:82:6a:b1:a5:
                    c8:91:82:34:31:8d:21:f9:77:f8:30:48:53:7a:1b:
                    3b:9d:9a:a8:e5:7f:3c:44:32:fa:ac:87:1b:8a:c5:
                    8d:b3:e9:76:aa:e8:a5:0f:a0:b8:79:99:93:f5:4d:
                    bc:ec:66:49:7f:22:58:8b:fe:7e:17:0a:f7:77:01:
                    54:13:7e:56:fe:3b:ae:d6:8f:f0:c6:95:ca:60:4b:
                    e0:83:98:c2:4a:74:a9:e8:20:b3:40:ac:a3:e0:86:
                    31:87:f1:44:16:f6:9f:77:59:64:17:6d:cd:e9:ac:
                    b9:8b:73:ef:be:47:fb:d3:e0:83:f7:a6:69:99:50:
                    01:4c:d2:34:d9:cd:b2:28:89:b9:11:1c:2b:e7:1a:
                    08:33:9a:80:9a:7e:13:68:ce:5e:82:d0:ad:74:87:
                    97:8e:18:cd:49:c0:b8:08:f1:d5:40:12:04:03:94:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:17:CB:4E:F3:06:C0:29:1F:02:0D:94:00:4F:35:54:13:15:F9:D0
            X509v3 Authority Key Identifier:
                keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:60:c6:24:28:aa:1f:0a:a5:64:c9:7f:4e:87:32:89:e4:dd:
         fe:00:dc:b4:8c:36:9b:29:2d:1a:73:4d:a0:ba:21:58:d5:b5:
         fa:b1:3a:96:d0:53:5c:49:9d:0b:86:bb:78:f7:aa:23:80:d0:
         b8:f3:46:a6:9d:a5:0b:ac:56:83:2e:ab:5e:0b:07:30:2d:b1:
         32:d0:0f:60:e1:3a:53:93:51:0d:66:1a:ae:77:06:fd:55:ff:
         24:b0:f0:d2:10:57:a4:26:86:c1:37:b8:67:80:68:76:4c:51:
         9f:80:80:6b:89:38:48:cb:57:d2:8c:4e:bb:b8:5f:47:f3:b1:
         e1:86:74:d3:a0:cb:6c:7e:53:4c:90:6c:f0:67:a0:d1:b4:66:
         54:60:11:c1:a0:1c:56:b6:c3:8c:47:a2:6d:31:9e:5e:59:2b:
         47:96:7f:75:e9:23:b9:8b:29:34:e4:3b:f7:c1:91:7b:96:6a:
         ec:22:9c:b4:c7:21:3d:e1:15:a3:8e:6d:d6:10:b2:46:c1:8d:
         0f:00:04:a3:70:94:fd:0e:59:f6:ed:d8:cc:67:46:72:d9:aa:
         93:01:f4:79:61:67:b1:25:64:8e:b1:e0:0e:8e:e7:d7:1d:32:
         7e:96:4e:99:e0:e7:2d:a7:c7:75:bb:ab:a4:63:96:f3:02:4f:
         f8:82:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:16:16 2024 by rpki-client on console-ams.rpki-client.org