Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
File:                     guS0v-5FTQqkcKXAqUEDSdSh13Q.mft (raw, json)
Hash identifier:          5F7SVX0oZcsxmyh0uBNNc8ffuNuW3W0CstcbQ+LNUj8=
Subject key identifier:   FC:10:B1:E3:AF:F1:8E:59:33:27:5E:61:F9:A3:04:63:67:E7:64:21
Authority key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
Certificate issuer:       /CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Certificate serial:       018F87ED336912A10DDD206A0FC5EB64428D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
Manifest number:          0AC1
Signing time:             Fri 17 May 2024 19:00:20 +0000
Manifest this update:     Fri 17 May 2024 19:00:20 +0000
Manifest next update:     Sat 18 May 2024 19:00:20 +0000
Files and hashes:         1: guS0v-5FTQqkcKXAqUEDSdSh13Q.crl (hash: sIe+4GB5XDtmbm+PdCzw7vq8XxMHSsxTMgfsUmk/e1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:33:69:12:a1:0d:dd:20:6a:0f:c5:eb:64:42:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
        Validity
            Not Before: May 17 19:00:20 2024 GMT
            Not After : May 18 19:00:20 2024 GMT
        Subject: CN=fc10b1e3aff18e5933275e61f9a3046367e76421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:7a:64:e3:e1:3a:f0:fc:27:45:31:05:c5:
                    06:38:95:ec:71:3f:4d:29:5e:83:a8:dd:fd:4b:39:
                    18:49:5c:58:56:85:43:05:46:da:82:3c:d7:c7:83:
                    15:4b:66:bc:74:c3:2f:95:7a:44:6a:c9:5b:83:4b:
                    6e:8d:4f:4f:b3:31:47:99:90:fc:c9:a4:9d:95:23:
                    b7:e3:b3:2e:4a:4a:a2:c2:fd:c7:cf:c6:47:9e:5a:
                    16:29:95:fc:6d:48:1d:0c:c3:bc:78:e6:f4:81:36:
                    48:b8:35:f3:e9:dd:a5:38:41:d5:2d:cc:4c:e4:88:
                    01:7b:91:4e:58:ec:92:b4:c2:f8:17:4f:64:e8:4f:
                    bb:38:ea:c6:53:a9:97:bb:76:9a:b2:96:21:20:c2:
                    7f:08:f4:ab:8d:19:7d:01:e2:6a:26:4e:73:1f:88:
                    b5:6e:85:ef:30:32:27:54:42:24:5e:19:5d:71:aa:
                    4f:d2:fa:30:93:3c:45:18:d5:f2:4a:3b:72:43:7d:
                    82:ad:7f:ef:c4:e4:2c:b9:da:24:bc:e6:7e:09:2c:
                    72:67:35:7e:79:6b:4a:02:eb:0c:22:86:14:e4:b9:
                    a0:a0:92:f9:8e:d2:ab:a8:51:9e:0b:a8:c4:56:3f:
                    bb:b7:fd:db:f6:8c:0c:89:38:18:8a:ee:d9:21:2d:
                    82:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:10:B1:E3:AF:F1:8E:59:33:27:5E:61:F9:A3:04:63:67:E7:64:21
            X509v3 Authority Key Identifier:
                keyid:82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d7:77:30:0d:55:ba:a8:43:38:17:89:a1:dd:fd:02:e2:9e:
         cf:ab:e8:a3:25:77:53:a9:db:c5:ef:9a:43:5d:ac:0f:be:d7:
         15:0d:13:b3:cb:6f:fa:3f:bc:7a:0e:a2:04:fb:8a:a5:86:d0:
         ec:ea:a6:76:ae:3d:27:33:31:3d:53:9c:70:9d:54:c1:26:3b:
         3e:79:54:ee:f0:dc:6a:f8:f1:12:6d:b0:1a:52:69:05:0c:86:
         cd:bf:f7:a3:97:ba:31:fb:f3:57:25:dc:03:45:38:63:e5:7b:
         2a:05:c2:25:38:14:78:43:6d:fc:74:ba:dd:f6:f4:f9:32:1e:
         00:57:36:25:57:05:94:20:1d:bf:26:37:6f:02:7f:d1:ae:55:
         64:be:2d:a5:10:b7:c6:8d:a1:2c:da:54:fd:54:55:d1:d2:95:
         0b:2c:9f:87:00:06:b0:65:b3:07:b3:25:a7:04:b3:54:3f:f5:
         e4:08:f0:c0:d0:23:62:5d:a8:1c:13:5b:3e:57:f7:ac:28:27:
         c6:d3:f6:4f:bd:d3:c0:d7:42:4b:a3:af:d7:ac:71:8a:86:55:
         6e:64:a1:7a:ed:4f:fb:36:37:80:25:26:5c:70:eb:7a:52:70:
         f2:3e:b8:71:ef:e2:9a:21:e8:94:c6:f2:9f:6c:02:dd:15:7d:
         e2:3f:8a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:35 2024 by rpki-client on console-ams.rpki-client.org