Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File:                     CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier:          MW8Hk9LC9p3ZrapwxIvhNRLSnmHeFUjqzrVijx/n/e8=
Subject key identifier:   A1:B1:41:F6:59:F7:14:29:C8:56:DE:2E:91:14:65:8A:72:C5:72:1B
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer:       /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial:       018F55EEFE6F13BAABA95C00243BBC8DBFE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number:          115C
Signing time:             Wed 08 May 2024 02:01:16 +0000
Manifest this update:     Wed 08 May 2024 02:01:16 +0000
Manifest next update:     Thu 09 May 2024 02:01:16 +0000
Files and hashes:         1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: FpbvOhIEPq3q4AiluCllZvbo/EAE7CN/IArvINrgyso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:ee:fe:6f:13:ba:ab:a9:5c:00:24:3b:bc:8d:bf:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
        Validity
            Not Before: May  8 02:01:16 2024 GMT
            Not After : May  9 02:01:16 2024 GMT
        Subject: CN=a1b141f659f71429c856de2e9114658a72c5721b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:e0:73:24:51:5e:5c:7c:9a:a4:7f:30:d8:
                    9f:7c:20:83:09:85:bb:72:e1:28:e4:de:a8:85:c6:
                    57:60:df:c3:2c:cb:6e:40:38:d8:34:02:39:5e:19:
                    e2:d5:d4:09:42:f0:24:37:b2:0d:49:74:0b:d6:68:
                    3d:3e:be:c2:52:22:f6:73:21:60:19:9c:1c:7d:d1:
                    ae:33:5a:1c:7f:0b:58:b9:1c:d8:3d:95:2e:72:c5:
                    2c:bc:1d:dc:69:f5:d3:8f:6a:80:f9:ba:33:60:a3:
                    23:34:63:b7:5f:f4:a5:4b:02:cd:de:18:b1:3a:ab:
                    da:74:23:4a:69:0f:29:25:92:98:c0:6a:7b:6d:e7:
                    bd:5f:e3:6a:0b:ae:e5:da:22:00:7d:29:7d:c9:99:
                    85:b5:20:23:fd:d2:ae:5f:36:5c:5b:db:bf:98:3d:
                    3c:4b:52:42:9a:87:f1:eb:3c:f2:48:2b:ae:16:d0:
                    92:e4:50:6c:e6:92:ab:d4:74:9c:b5:84:42:0e:4a:
                    b9:5d:b5:8e:2b:16:7f:26:45:5d:25:a0:77:6e:e5:
                    c3:7a:d3:37:87:eb:bd:ec:53:11:28:d5:32:68:8c:
                    89:c1:64:ba:39:f4:d3:4c:58:46:65:8b:a8:0b:01:
                    d8:de:71:df:5b:a9:8f:f9:b6:1a:b5:01:b6:dd:a4:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B1:41:F6:59:F7:14:29:C8:56:DE:2E:91:14:65:8A:72:C5:72:1B
            X509v3 Authority Key Identifier:
                keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:94:8e:30:41:39:66:4c:e5:88:7e:0d:2e:43:4a:95:8a:b4:
         47:66:35:22:52:f1:a2:e9:17:ac:78:0d:f3:91:9a:46:05:c2:
         97:7b:54:e8:54:66:4b:66:cc:d8:b7:46:6c:31:95:f7:6e:91:
         81:1f:d5:e0:97:6f:0f:a0:2a:b7:ea:c7:09:e3:9d:f3:9d:37:
         de:22:46:1c:fa:4d:7d:94:0c:e5:a9:76:e2:e1:49:41:b6:f5:
         c5:db:91:ae:70:30:31:32:60:9e:a8:cd:ce:f2:b8:12:b3:58:
         a6:d2:16:63:f4:28:8b:3d:39:94:cb:23:70:a5:b3:65:08:80:
         ec:81:29:c6:0a:2a:43:e2:76:75:5b:87:d4:fa:32:11:02:40:
         7a:2a:8f:af:78:96:96:8d:08:b9:ae:0d:1b:d3:7e:1b:16:c1:
         f8:fe:3e:6b:9b:00:d7:c8:28:df:a8:d1:e2:9f:8c:dc:60:09:
         19:d8:a0:3d:09:3c:1f:d2:d8:87:a0:2c:c9:99:ae:0d:a1:95:
         a4:a8:c1:dd:9b:cc:9b:15:94:8b:1e:85:38:df:05:c2:3f:ff:
         d1:5c:a7:be:7f:04:34:a7:f7:33:89:99:da:3b:f9:ed:c4:75:
         39:93:d2:cd:cd:f2:60:be:43:49:b6:61:aa:41:57:3c:d0:d2:
         16:65:ad:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:36:31 2024 by rpki-client on console-fra.rpki-client.org