Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
File:                     xRvfUzN6yxiydpUsNX6RmAvMWww.mft (raw, json)
Hash identifier:          LWRf1w3IkbdFoQAJHl/RjO7cHhcatbLmlOGJo+yx1/A=
Subject key identifier:   00:98:B9:24:75:EA:34:4F:D5:7C:98:48:11:47:13:93:5E:52:65:7B
Authority key identifier: C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
Certificate issuer:       /CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Certificate serial:       018F87494558C12F33A587D7774B51F7344E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
Manifest number:          0587
Signing time:             Fri 17 May 2024 16:01:16 +0000
Manifest this update:     Fri 17 May 2024 16:01:16 +0000
Manifest next update:     Sat 18 May 2024 16:01:16 +0000
Files and hashes:         1: xRvfUzN6yxiydpUsNX6RmAvMWww.crl (hash: /FXwfQvlZu4S05F5gpE/19QC8o6gigImmo2tq88stxY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:45:58:c1:2f:33:a5:87:d7:77:4b:51:f7:34:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51bdf53337acb18b276952c357e91980bcc5b0c
        Validity
            Not Before: May 17 16:01:16 2024 GMT
            Not After : May 18 16:01:16 2024 GMT
        Subject: CN=0098b92475ea344fd57c9848114713935e52657b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:08:46:92:44:98:04:96:c0:84:87:4a:8a:
                    6f:1d:27:db:9a:c8:30:1e:fd:ef:eb:95:5f:9a:58:
                    50:1b:99:09:7c:de:a7:96:be:4b:d0:1d:9b:1c:e3:
                    11:ba:5e:9a:e9:72:7c:e2:2b:de:74:2e:03:43:86:
                    9a:a2:d1:c5:fc:25:d1:88:00:bd:b7:cb:c4:39:19:
                    39:04:e3:a4:77:bd:97:ae:2f:d6:62:c6:50:c1:90:
                    09:4f:0d:d8:87:ba:aa:2e:33:ee:e6:a3:7d:5a:4d:
                    3b:bd:bd:32:ac:7c:3a:d6:90:2a:46:d6:9b:88:b3:
                    19:27:c7:d7:c7:9e:b4:1d:0c:66:cb:48:57:9f:4a:
                    fe:54:1f:09:4a:38:6d:d2:f5:86:91:cb:a2:8b:43:
                    f6:30:1a:0b:e6:97:f1:e3:40:46:09:85:2d:49:ff:
                    57:25:23:01:2f:93:61:39:00:be:cf:fe:d3:e9:ca:
                    a0:95:a7:36:d0:64:b7:03:34:07:70:e5:6a:c9:55:
                    ab:6a:3b:69:c6:0d:54:76:05:ab:7e:97:ac:c8:c5:
                    a8:b7:03:1d:2d:5e:79:4c:ee:91:cc:31:24:9f:5f:
                    e8:05:b8:3e:f5:fe:d4:cb:93:fa:de:87:1b:2a:22:
                    f6:dd:c9:2e:f9:6f:e1:fe:ce:7f:0e:b0:32:c7:dd:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:98:B9:24:75:EA:34:4F:D5:7C:98:48:11:47:13:93:5E:52:65:7B
            X509v3 Authority Key Identifier:
                keyid:C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2c:f7:1c:4a:db:23:1c:dc:de:76:6c:f9:20:2e:5e:80:b7:
         c4:68:6f:c9:03:f7:a4:84:4a:24:c0:94:9f:0d:57:38:b3:70:
         9f:87:17:94:28:57:d9:13:1d:9e:ab:04:1f:47:d8:58:21:1c:
         ae:56:2f:8d:d6:04:4b:5d:f0:43:cd:1b:08:de:16:d0:76:25:
         6f:08:a6:18:3c:91:64:a8:00:c2:8c:83:ad:d8:de:d3:8f:f6:
         5c:14:3b:a7:98:c3:70:37:5e:92:b6:9b:ce:52:99:6d:94:44:
         97:96:62:34:26:e6:e5:75:ab:0b:5c:c7:f2:68:6b:eb:3e:87:
         3d:94:31:e0:88:2b:06:19:d2:e2:3c:81:2a:63:4f:51:c9:35:
         5c:82:5d:f0:b9:d3:41:a1:53:37:a9:6f:20:85:d6:d4:8e:9e:
         b6:46:d7:a3:c5:c3:c3:43:62:3b:b3:0d:05:00:09:fd:e6:5a:
         fc:f3:b8:1c:ed:44:b4:e8:7d:7e:3c:43:aa:0a:7b:ed:e4:7c:
         69:5d:08:96:7b:5d:5e:20:7d:0e:1b:ff:9d:7b:d0:5c:0f:63:
         aa:01:53:93:fa:0e:c1:df:17:3d:58:fc:8e:ca:41:69:75:fc:
         08:48:fd:40:3b:ad:8a:b2:59:08:ef:e9:81:f2:0f:99:59:b3:
         d9:50:b3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:30 2024 by rpki-client on console-ams.rpki-client.org