Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft
File:                     036cbTJBKLdulycQNiNBGDxa9mQ.mft (raw, json)
Hash identifier:          goZDN/XgfC0CKZeS3V7b3Bc6zPS6c5zIKN2lxx+y+Hk=
Subject key identifier:   52:28:6D:92:B9:59:44:21:4F:A2:B9:62:5B:01:BB:A1:73:76:21:FA
Authority key identifier: D3:7E:9C:6D:32:41:28:B7:6E:97:27:10:36:23:41:18:3C:5A:F6:64
Certificate issuer:       /CN=d37e9c6d324128b76e972710362341183c5af664
Certificate serial:       018F874AD6B37BEAE5110423B2BF63765DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/036cbTJBKLdulycQNiNBGDxa9mQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft
Manifest number:          0384
Signing time:             Fri 17 May 2024 16:02:59 +0000
Manifest this update:     Fri 17 May 2024 16:02:59 +0000
Manifest next update:     Sat 18 May 2024 16:02:59 +0000
Files and hashes:         1: 036cbTJBKLdulycQNiNBGDxa9mQ.crl (hash: wgEoMQRGfveAh6va4OXyyMk7PNSD01Wn8FdmcskKS5Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/036cbTJBKLdulycQNiNBGDxa9mQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d6:b3:7b:ea:e5:11:04:23:b2:bf:63:76:5d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d37e9c6d324128b76e972710362341183c5af664
        Validity
            Not Before: May 17 16:02:59 2024 GMT
            Not After : May 18 16:02:59 2024 GMT
        Subject: CN=52286d92b95944214fa2b9625b01bba1737621fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:03:22:c7:e3:9b:75:27:92:b7:20:55:f9:
                    53:67:90:5f:a1:57:38:ee:b8:cb:73:b7:52:14:5d:
                    0c:b6:f1:95:f5:f1:a9:61:f9:c6:13:43:f6:3a:62:
                    29:61:1a:f0:6a:41:c6:7e:17:67:ab:29:83:c7:38:
                    1b:80:46:41:80:01:c8:0f:78:19:16:33:a6:2a:75:
                    42:a5:be:32:aa:62:91:0e:0d:92:d0:1d:6e:1e:f1:
                    af:7b:b6:43:00:22:41:2a:25:c2:01:7c:13:82:15:
                    04:59:dc:60:e3:92:ae:74:ea:75:4c:b0:b5:eb:84:
                    24:3c:45:51:07:ce:03:9b:fb:5f:c1:5e:d6:ae:95:
                    0d:f7:fc:a5:de:36:74:35:e7:1f:3e:c5:f8:f5:04:
                    ef:56:6f:c9:b1:e2:57:a4:28:8c:86:f4:c7:41:76:
                    90:3f:dc:85:0a:ed:9f:dd:10:e5:cb:7c:94:d8:03:
                    f5:dc:5d:8e:d1:d7:3d:4c:53:8b:a7:c5:78:0c:10:
                    09:4f:92:3b:a9:bc:f6:07:df:40:5b:72:5d:cf:a7:
                    0a:23:c3:7e:27:4f:44:fc:61:6b:f2:6e:4f:cd:a4:
                    ff:29:d4:15:45:9c:32:3b:c1:80:e9:3f:7d:2f:2b:
                    f5:a3:b7:c1:56:9d:00:f4:e3:d0:cf:d3:c5:69:3b:
                    6d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:28:6D:92:B9:59:44:21:4F:A2:B9:62:5B:01:BB:A1:73:76:21:FA
            X509v3 Authority Key Identifier:
                keyid:D3:7E:9C:6D:32:41:28:B7:6E:97:27:10:36:23:41:18:3C:5A:F6:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/036cbTJBKLdulycQNiNBGDxa9mQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4ac129-59e3-4331-82ee-c79c6be3e42e/1/036cbTJBKLdulycQNiNBGDxa9mQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:48:4b:bc:c1:d7:63:c6:2e:51:18:36:94:42:06:95:32:58:
         b2:29:4a:44:87:9c:4a:1f:72:fb:b3:d7:de:49:57:a1:b9:47:
         18:f5:52:4d:3f:4e:7c:63:41:2f:f7:6b:79:2b:35:6c:32:38:
         eb:c1:ab:4b:76:63:f2:bc:66:d8:a2:28:82:93:64:a9:0b:1a:
         af:46:7a:09:86:b4:bc:3f:ea:d1:b0:54:d8:63:3a:c1:ed:4d:
         2c:2c:80:27:c1:6a:8d:fa:d9:e9:91:c4:1c:d2:2f:5c:b3:c8:
         97:8a:75:d9:7f:37:82:d3:21:7c:a9:a6:50:fe:f4:6a:6a:94:
         b8:69:b2:55:3b:06:8c:d6:bd:7f:9d:36:97:87:58:17:2b:ff:
         3c:12:2e:22:48:6a:10:ca:8b:74:1f:85:a5:75:67:62:bd:d1:
         df:73:af:41:09:20:fe:78:e3:cf:0b:09:1b:55:48:e9:9c:c3:
         46:01:19:52:fd:90:3b:cb:8f:95:c8:2c:1f:10:5e:e6:7a:b8:
         3e:c2:96:ae:f9:37:4a:c3:a0:6d:51:2e:3c:cd:33:37:42:6c:
         11:c0:4f:a9:8a:ad:7c:39:79:e6:44:b1:21:30:a6:9c:3c:24:
         30:56:49:40:79:a7:db:cb:38:36:9f:6f:1f:85:6e:91:19:53:
         ea:44:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:39 2024 by rpki-client on console-fra.rpki-client.org