Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.mft
File:                     rsV6nHwbEbPrKr2sjNVdWfx4gQc.mft (raw, json)
Hash identifier:          yc8b1tir71qM9NCAFlDqX2ft7AGDxESBfY0Jm1sGXJ4=
Subject key identifier:   33:73:12:4C:6B:CB:21:5F:84:C5:B2:7E:EE:84:CD:4C:F7:F8:B4:E4
Authority key identifier: AE:C5:7A:9C:7C:1B:11:B3:EB:2A:BD:AC:8C:D5:5D:59:FC:78:81:07
Certificate issuer:       /CN=aec57a9c7c1b11b3eb2abdac8cd55d59fc788107
Certificate serial:       018F874AFF5F5C069383871A6E93E5A31B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsV6nHwbEbPrKr2sjNVdWfx4gQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.mft
Manifest number:          0234
Signing time:             Fri 17 May 2024 16:03:10 +0000
Manifest this update:     Fri 17 May 2024 16:03:10 +0000
Manifest next update:     Sat 18 May 2024 16:03:10 +0000
Files and hashes:         1: rsV6nHwbEbPrKr2sjNVdWfx4gQc.crl (hash: Of0oE0YzrKIHSRoiVZ4Gpp8RTCE0Xt00x3Vd2dh6gJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsV6nHwbEbPrKr2sjNVdWfx4gQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ff:5f:5c:06:93:83:87:1a:6e:93:e5:a3:1b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec57a9c7c1b11b3eb2abdac8cd55d59fc788107
        Validity
            Not Before: May 17 16:03:10 2024 GMT
            Not After : May 18 16:03:10 2024 GMT
        Subject: CN=3373124c6bcb215f84c5b27eee84cd4cf7f8b4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:bb:73:73:e2:ed:31:05:33:3a:46:29:2c:
                    77:67:74:e9:7a:6c:99:d7:42:64:da:c2:98:d6:d3:
                    a0:38:c0:19:01:db:76:39:ff:0d:e7:39:e8:49:41:
                    02:9b:2c:0e:07:ff:4f:03:97:83:22:2f:a2:0b:db:
                    3b:9a:b0:04:1a:ce:12:72:d4:b3:4b:91:77:9d:4b:
                    f2:ba:3a:11:3c:35:e1:64:ba:41:17:9c:76:21:f3:
                    4b:69:cc:dc:d2:b3:48:b8:28:70:1b:e5:34:7d:f4:
                    9f:00:b8:10:1a:4a:7e:1d:cf:b9:ed:f3:94:eb:3e:
                    d9:e7:1b:9c:0f:03:2a:07:96:98:e4:0d:37:7e:e7:
                    29:54:3a:a0:bd:d4:6d:a6:d0:ae:3b:7a:03:5f:8e:
                    20:9c:9a:fc:2d:7c:d4:93:39:f3:62:0c:52:76:8d:
                    3f:6c:50:a6:db:3f:bf:8d:5f:58:fc:01:e0:c0:49:
                    3f:d3:46:ca:4d:d4:f2:9b:64:66:50:c4:f1:cc:ed:
                    23:ff:ee:95:54:c8:6f:13:d5:35:e9:06:4b:c4:76:
                    58:c2:a4:23:4d:88:d1:7b:ed:cc:a3:43:d9:85:c9:
                    4b:53:c9:e9:63:85:93:f1:b1:8d:96:9f:66:0a:09:
                    21:c4:db:cf:16:37:30:86:9c:e4:93:e7:1b:ee:54:
                    c0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:73:12:4C:6B:CB:21:5F:84:C5:B2:7E:EE:84:CD:4C:F7:F8:B4:E4
            X509v3 Authority Key Identifier:
                keyid:AE:C5:7A:9C:7C:1B:11:B3:EB:2A:BD:AC:8C:D5:5D:59:FC:78:81:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsV6nHwbEbPrKr2sjNVdWfx4gQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:80:c9:e6:58:15:cf:39:f1:6d:fa:04:14:ef:a7:03:e5:ec:
         d5:af:26:a0:ee:a3:f1:24:07:d5:b7:bf:6e:b3:41:b1:af:3e:
         27:3b:89:ba:cb:48:8b:f7:ad:60:07:48:2e:b2:b3:77:d4:d2:
         34:cf:0d:bc:5d:ae:a3:55:45:31:6a:2f:34:52:0d:1b:81:25:
         a3:18:4e:0b:8d:93:b6:ad:ca:b2:00:b0:7d:8e:e8:81:14:f1:
         b7:27:85:80:9e:02:b1:f2:22:97:ca:45:12:bd:3d:6a:50:c6:
         85:a6:8c:83:8d:57:33:12:4c:29:5d:b1:b0:ca:3a:54:49:5d:
         62:82:72:99:5a:80:0d:af:4c:47:9b:4c:0e:ba:04:54:b1:c2:
         fe:63:74:33:f6:e9:ef:9d:e0:75:bc:b2:db:b9:16:b5:b0:c6:
         d9:44:f9:fd:05:d7:77:c9:79:17:42:43:84:24:a9:e8:ba:23:
         8f:3a:65:89:73:81:46:d3:83:f7:a3:fb:5c:e3:00:20:8a:87:
         77:9b:39:46:d3:5b:3d:e2:da:c3:7e:e7:65:f0:dc:40:57:68:
         96:ee:05:78:72:ee:51:e8:4a:82:44:e7:7e:c6:96:69:e0:1d:
         85:28:32:d7:0a:5d:ef:e7:c1:4c:a2:de:50:55:c7:61:79:fb:
         d5:e8:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:19:14 2024 by rpki-client on console-ams.rpki-client.org