Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
File:                     XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft (raw, json)
Hash identifier:          HKo4R+Rwkpb+k79Zq8yObUfabjTT4hUCI0Zf1RkxMmg=
Subject key identifier:   53:67:97:64:76:43:89:78:D9:04:59:44:7E:75:A8:3D:4A:AC:5C:5D
Authority key identifier: 5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
Certificate issuer:       /CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Certificate serial:       018F863621A9CC77AA0C3D4D24D7CB4C2CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
Manifest number:          0584
Signing time:             Fri 17 May 2024 11:00:45 +0000
Manifest this update:     Fri 17 May 2024 11:00:45 +0000
Manifest next update:     Sat 18 May 2024 11:00:45 +0000
Files and hashes:         1: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl (hash: yne99pflX5xaH2K5yoJLuppEy6Zwv4FpTpVd7U0dEFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:21:a9:cc:77:aa:0c:3d:4d:24:d7:cb:4c:2c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
        Validity
            Not Before: May 17 11:00:45 2024 GMT
            Not After : May 18 11:00:45 2024 GMT
        Subject: CN=5367976476438978d90459447e75a83d4aac5c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:dc:5d:4c:79:bb:12:5f:cb:b9:e1:50:fb:
                    e1:10:ca:6e:92:d1:92:20:95:9e:49:59:c0:f6:9e:
                    aa:e0:12:2b:98:d4:5c:1f:37:a8:28:66:4c:39:d1:
                    39:06:5f:e5:6a:e3:2e:dd:e2:d1:98:24:2d:cf:8c:
                    fb:31:3d:9f:73:45:98:f8:2e:ce:2c:ce:62:6b:fe:
                    fd:38:f1:ff:ff:d7:49:cf:8b:69:32:0f:8d:1b:15:
                    c3:82:72:84:87:d5:a0:8a:1a:07:c1:4d:e2:e2:e8:
                    2b:71:50:a3:21:9a:94:60:8e:ec:5b:1b:07:36:af:
                    de:b8:ab:f2:49:26:e6:11:86:a5:20:0e:0d:85:a7:
                    e4:f1:4f:ff:7d:39:09:e2:07:23:f1:0b:78:45:34:
                    02:24:8a:b0:9f:d3:f8:bd:e9:7a:53:80:02:26:09:
                    69:35:13:c2:46:a6:02:b3:2b:0e:a6:19:92:c3:3d:
                    7f:be:6f:cf:71:3e:96:73:1a:0c:61:cc:d7:14:89:
                    64:03:f9:f4:c6:d6:21:b1:65:66:9a:52:0e:45:9d:
                    15:3d:21:07:33:0e:51:4f:b3:b5:f4:b1:83:bc:31:
                    25:18:07:4b:02:b9:8b:aa:d8:24:ee:2a:f9:0e:c6:
                    56:56:47:13:27:a7:b1:70:68:d6:f9:5b:42:fe:36:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:67:97:64:76:43:89:78:D9:04:59:44:7E:75:A8:3D:4A:AC:5C:5D
            X509v3 Authority Key Identifier:
                keyid:5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:54:ad:91:00:74:70:97:eb:6e:d3:c9:98:fd:62:da:97:71:
         37:3d:1d:33:78:64:2e:e4:e9:7e:15:2f:bd:b7:86:e9:06:dc:
         3f:dd:0a:10:17:98:cd:9d:d7:c1:d6:04:0c:02:f4:7d:43:b1:
         c9:5a:41:92:38:24:72:79:4c:72:ae:6a:d4:d9:f0:82:cf:09:
         32:c1:4d:ee:42:5b:a7:a2:03:77:0a:3b:c0:1b:dd:da:58:ff:
         2e:cd:2d:8b:e7:4f:25:c9:8e:54:0b:4a:c1:a0:a8:48:78:bd:
         c7:87:89:c7:d1:16:f6:9f:99:57:d6:fe:1f:d3:48:f4:e3:7e:
         4c:d9:98:e9:1f:73:54:b8:3d:6f:15:09:5d:6c:aa:66:86:62:
         bf:be:46:54:fa:fb:5a:d7:33:dc:a7:50:5e:ec:70:c4:0e:09:
         fb:0f:8e:c8:21:b4:16:a2:f8:48:23:94:a8:31:94:70:18:e1:
         7c:67:66:30:fe:f3:22:85:72:af:fb:bc:82:df:3f:c9:be:7c:
         b9:2a:10:34:82:cf:33:fb:30:20:85:6a:4e:3e:da:e2:6a:14:
         74:c3:29:cf:7a:b4:3c:15:83:4c:de:ee:c0:8f:4b:79:5b:5d:
         18:77:dc:49:02:5f:00:b4:ce:5f:95:b2:7e:59:ba:2e:dc:6d:
         52:4a:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:41 2024 by rpki-client on console-fra.rpki-client.org