Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File:                     aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier:          MnG1YI+hsLik9tGsTghHwK9Zx24ZZq7tjGZLaPeQQTA=
Subject key identifier:   8B:BC:10:4C:DF:FA:69:17:1B:B0:C9:3B:60:86:D1:EC:0D:6B:73:5D
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer:       /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial:       018F866CD933E781D1E73B7A176D7147E535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number:          C3
Signing time:             Fri 17 May 2024 12:00:31 +0000
Manifest this update:     Fri 17 May 2024 12:00:31 +0000
Manifest next update:     Sat 18 May 2024 12:00:31 +0000
Files and hashes:         1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: O/TxT9QPxk296eqllyJekzWzCgW2EvO6flX91Uzumms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:d9:33:e7:81:d1:e7:3b:7a:17:6d:71:47:e5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
        Validity
            Not Before: May 17 12:00:31 2024 GMT
            Not After : May 18 12:00:31 2024 GMT
        Subject: CN=8bbc104cdffa69171bb0c93b6086d1ec0d6b735d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:c1:08:7e:b7:4b:ab:91:61:f5:5c:04:8e:
                    9a:7c:bd:d1:79:44:0e:06:82:1c:bc:ae:24:6e:10:
                    77:77:f5:51:03:4e:ad:0f:87:76:c6:e5:61:72:aa:
                    ef:47:ab:86:90:ed:29:0b:0f:72:02:0a:6d:1a:f4:
                    05:88:db:4e:8e:74:ff:12:15:23:51:30:d6:1f:43:
                    a1:b8:56:97:18:40:8b:91:4a:4e:e3:e8:40:89:f5:
                    5f:e7:5c:ea:de:e6:ba:89:e0:1e:9b:7a:0f:b9:f0:
                    39:79:fd:f1:ae:91:6a:8c:d9:63:21:97:90:68:8d:
                    ab:90:53:cc:09:68:40:be:75:71:db:3c:c9:8c:9a:
                    4c:d0:9e:79:39:a3:ba:45:da:3e:9f:59:0c:a4:93:
                    a3:41:f9:49:86:67:55:f2:02:43:2d:c7:50:75:48:
                    78:81:91:81:94:19:1b:9d:37:cc:03:6b:0d:a8:64:
                    01:4f:78:55:fe:ee:a7:cc:02:0c:e1:bb:29:ca:4c:
                    bb:68:0e:ba:53:a9:85:60:3d:91:69:0f:f4:d0:e1:
                    a9:24:e6:50:9f:1e:ef:d9:53:55:9e:3f:d7:20:11:
                    c1:bb:ef:80:ba:50:7f:ae:88:f5:f6:15:1a:d4:5f:
                    3c:51:65:45:d7:b6:49:6d:88:5f:19:04:e7:86:54:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BC:10:4C:DF:FA:69:17:1B:B0:C9:3B:60:86:D1:EC:0D:6B:73:5D
            X509v3 Authority Key Identifier:
                keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:36:01:a5:fe:f9:19:79:f6:e9:78:14:ee:fb:75:61:76:0a:
         15:ac:b3:56:b4:d2:ba:94:b0:b8:b7:c2:5e:8f:e0:e1:7f:77:
         ad:4e:4a:f8:a9:36:ec:26:25:e0:9d:ec:e0:22:e5:d2:04:73:
         7f:7e:3b:5c:29:06:30:df:be:57:43:18:cb:e8:d9:99:4b:e4:
         53:24:80:f1:03:50:a2:87:74:fb:8d:87:50:21:d3:c0:b3:8b:
         c6:69:21:31:5a:8c:e3:30:6a:56:43:6b:29:18:ae:91:8b:2b:
         b5:0d:92:94:a0:00:8e:ad:ca:bb:a9:62:69:a0:3d:3b:3f:e3:
         ef:2a:5b:85:14:3d:52:8f:69:3b:9f:13:b8:cd:ba:b7:c5:b7:
         a6:2e:7f:f9:be:e2:c8:0d:b5:a4:30:e6:46:1b:ee:94:ee:eb:
         3b:31:3b:e7:4d:80:70:16:c8:21:51:18:dd:c1:6d:c7:e0:b8:
         9c:51:70:c2:48:d7:d1:04:9f:62:79:f8:27:13:09:c7:0b:42:
         5a:0d:24:30:32:3d:c4:44:d0:84:47:2b:fd:b7:01:ae:91:63:
         07:2c:ed:40:f3:6c:a2:b4:4f:a2:7a:65:54:35:ee:da:71:24:
         f1:59:f9:ce:27:69:7d:f2:e3:e7:71:3c:9d:fa:7f:05:ae:95:
         12:32:78:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:24 2024 by rpki-client on console-ams.rpki-client.org