Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
File:                     z312VOh85PlnktVlxW4ZH0Ten1o.mft (raw, json)
Hash identifier:          R3DyfymJsQ8BWu2gQtsY6/PdGmvqtw7S0Qns0FNDh9E=
Subject key identifier:   FF:5E:5B:35:AB:63:55:9C:67:EE:9E:37:3F:26:D2:1B:F6:41:03:8F
Authority key identifier: CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
Certificate issuer:       /CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Certificate serial:       018F8891E18FDD835D45270CD8D2EC5FD254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
Manifest number:          0A8A
Signing time:             Fri 17 May 2024 22:00:12 +0000
Manifest this update:     Fri 17 May 2024 22:00:12 +0000
Manifest next update:     Sat 18 May 2024 22:00:12 +0000
Files and hashes:         1: z312VOh85PlnktVlxW4ZH0Ten1o.crl (hash: HLXSBpVfecM9zgLP20GM4KUqU4X/aCI5xg03sGgcVmw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:e1:8f:dd:83:5d:45:27:0c:d8:d2:ec:5f:d2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
        Validity
            Not Before: May 17 22:00:12 2024 GMT
            Not After : May 18 22:00:12 2024 GMT
        Subject: CN=ff5e5b35ab63559c67ee9e373f26d21bf641038f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:c9:60:e0:87:f5:25:a0:c4:4d:0a:9c:54:
                    22:4c:d3:1d:f1:26:14:9e:6c:ca:ca:ec:f8:9b:91:
                    37:e6:b7:43:ae:cf:a3:d5:81:79:bf:14:25:ea:13:
                    85:db:d8:c0:2a:b0:b2:ab:fc:73:a3:37:a4:d6:03:
                    af:f0:f9:bb:35:6a:11:1d:5d:c0:51:09:12:63:e7:
                    3d:8e:78:2e:ed:f0:6a:76:07:29:ec:8f:b4:1b:39:
                    f6:d6:e0:25:ee:15:c5:c7:a9:64:2c:96:b9:ca:ca:
                    72:4e:3b:36:75:88:f0:c2:5e:21:49:51:6a:86:7d:
                    ef:f4:a0:e2:ee:25:b7:d2:fb:3c:71:fb:34:04:73:
                    08:92:ea:c0:35:19:9f:93:82:2b:a8:11:71:e4:9e:
                    ed:00:38:e9:5b:c0:c4:bc:2f:4a:5e:b6:92:bc:69:
                    8b:a1:dc:2a:53:c9:05:c4:80:9f:f1:96:35:d4:c1:
                    d7:0d:61:fa:e3:2d:8b:ef:62:65:f7:89:f4:d1:56:
                    cf:f0:e8:39:1d:2a:c3:dd:10:be:52:25:e9:75:70:
                    91:a1:08:ac:c7:17:8d:97:72:20:41:3e:1b:bf:87:
                    ce:5c:84:85:45:cd:bb:ca:81:e7:8b:0f:44:ea:e5:
                    f0:80:9c:0b:f0:13:86:69:b7:e7:5b:c9:33:4f:ca:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5E:5B:35:AB:63:55:9C:67:EE:9E:37:3F:26:D2:1B:F6:41:03:8F
            X509v3 Authority Key Identifier:
                keyid:CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4d:e1:da:5a:96:c9:a5:eb:63:ca:32:86:63:2e:30:ed:d6:
         c4:9e:83:f0:a8:f1:50:22:7f:4b:a6:e1:c5:59:3b:e4:ac:39:
         e0:59:54:23:88:69:99:85:d4:2d:5e:47:5c:b9:d2:e6:ed:7d:
         f7:0d:53:fb:b2:80:72:93:b2:83:25:fe:e6:6f:d1:ff:29:4d:
         f5:bb:ad:ef:a0:75:53:76:92:aa:69:1d:a7:68:e5:7f:44:59:
         ab:d2:58:c5:dd:7f:38:53:bd:ae:fd:70:71:78:99:53:9d:4e:
         37:93:05:9c:57:6c:53:28:94:6c:6b:34:cb:d6:58:8f:7e:03:
         d9:ac:a9:a6:12:ab:b0:d2:2d:9e:2d:eb:1f:7c:aa:61:9c:de:
         db:b7:90:eb:e7:d1:da:d2:2f:c2:4b:9f:f0:d2:2b:ef:95:09:
         20:2d:f5:a1:b2:bd:4a:ed:99:37:c4:b7:6f:b5:41:c6:76:f2:
         79:50:6a:e0:65:e6:81:1b:b2:b9:b5:68:05:9c:67:16:23:e8:
         ff:8c:e0:9d:34:5e:99:5c:6c:60:50:5c:2f:51:b9:58:2e:b7:
         ce:0c:2f:9e:4e:44:db:6b:dc:25:a8:d9:8c:8a:ae:20:7c:eb:
         2c:d3:8d:e8:c0:af:66:c4:95:73:2e:2f:ea:4e:39:2b:65:17:
         87:61:f1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:12:58 2024 by rpki-client on console-fra.rpki-client.org