Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af251f-0906-4f59-a169-1f72858224d7/1/5oFp_xMDpUYrzCZ-b6Ukk6Fljjk.mft
File:                     5oFp_xMDpUYrzCZ-b6Ukk6Fljjk.mft (raw, json)
Hash identifier:          VR8D5plwAm0mlm77dA0dfg+rFisYxHbXHGLWFa41Ekg=
Subject key identifier:   E3:02:BB:E4:FE:05:C4:04:A7:69:D8:D3:23:0E:CF:D2:08:AC:14:39
Authority key identifier: E6:81:69:FF:13:03:A5:46:2B:CC:26:7E:6F:A5:24:93:A1:65:8E:39
Certificate issuer:       /CN=e68169ff1303a5462bcc267e6fa52493a1658e39
Certificate serial:       018F3C6676F6CED96D02725D10FFFB603711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oFp_xMDpUYrzCZ-b6Ukk6Fljjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/af251f-0906-4f59-a169-1f72858224d7/1/5oFp_xMDpUYrzCZ-b6Ukk6Fljjk.mft
Manifest number:          114D
Signing time:             Fri 03 May 2024 03:01:39 +0000
Manifest this update:     Fri 03 May 2024 03:01:39 +0000
Manifest next update:     Sat 04 May 2024 03:01:39 +0000
Files and hashes:         1: 5oFp_xMDpUYrzCZ-b6Ukk6Fljjk.crl (hash: Tj3c6VC4OYsGvrW1ck24HgkWm3up6u1SKRGHR+Nf9bo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/af251f-0906-4f59-a169-1f72858224d7/1/5oFp_xMDpUYrzCZ-b6Ukk6Fljjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/af251f-0906-4f59-a169-1f72858224d7/1/5oFp_xMDpUYrzCZ-b6Ukk6Fljjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oFp_xMDpUYrzCZ-b6Ukk6Fljjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:66:76:f6:ce:d9:6d:02:72:5d:10:ff:fb:60:37:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e68169ff1303a5462bcc267e6fa52493a1658e39
        Validity
            Not Before: May  3 03:01:39 2024 GMT
            Not After : May  4 03:01:39 2024 GMT
        Subject: CN=e302bbe4fe05c404a769d8d3230ecfd208ac1439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:13:22:49:4b:90:cd:22:5b:d7:c3:0a:5f:
                    54:64:6f:08:00:b8:da:b1:43:e4:81:d3:e1:e8:60:
                    48:46:9f:8c:f3:f1:53:82:d9:26:8e:d3:cf:44:30:
                    b1:a7:01:38:14:19:27:5a:73:75:7e:c6:77:7d:23:
                    08:53:24:26:b7:0c:40:f4:5e:95:27:49:e0:80:4a:
                    08:6b:d5:3e:f9:70:ac:53:02:f5:e5:0c:36:a2:b4:
                    aa:54:76:4a:ea:52:7e:b7:43:ec:8d:83:2b:0d:60:
                    12:f1:d3:83:67:19:b9:b6:30:42:a0:fc:9c:dd:7a:
                    de:4f:8b:81:18:4c:a9:e1:05:5b:31:e0:f7:19:b2:
                    46:78:ed:d3:78:3b:64:68:96:f9:80:d7:fd:6a:26:
                    c2:af:ab:0d:19:14:8e:5b:af:3b:cb:82:cb:36:03:
                    41:7c:18:4f:00:fb:72:35:e7:b3:eb:2e:b6:f4:50:
                    93:ad:e9:80:6d:4c:ca:39:9e:a8:37:1b:5e:1f:07:
                    5e:bc:91:4e:ee:0b:3b:83:0d:97:68:cf:61:34:82:
                    41:f4:e4:f4:9e:77:88:76:d0:c2:da:8e:6e:ef:cc:
                    31:f6:e2:2e:c7:e8:98:cc:95:73:2e:7c:78:86:13:
                    16:9c:86:ae:c8:2f:c1:c9:62:fa:05:05:13:63:6e:
                    9a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:02:BB:E4:FE:05:C4:04:A7:69:D8:D3:23:0E:CF:D2:08:AC:14:39
            X509v3 Authority Key Identifier:
                keyid:E6:81:69:FF:13:03:A5:46:2B:CC:26:7E:6F:A5:24:93:A1:65:8E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oFp_xMDpUYrzCZ-b6Ukk6Fljjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af251f-0906-4f59-a169-1f72858224d7/1/5oFp_xMDpUYrzCZ-b6Ukk6Fljjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af251f-0906-4f59-a169-1f72858224d7/1/5oFp_xMDpUYrzCZ-b6Ukk6Fljjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:b1:1b:db:af:36:47:f6:8e:3d:06:3e:d4:5a:05:c1:f5:
         11:07:77:60:bc:15:02:8c:4e:a9:9b:c5:89:c9:ca:aa:82:53:
         b8:9f:ff:43:0e:64:28:2e:d1:9f:c0:9f:fe:7c:06:00:06:9d:
         7c:12:d0:37:9c:73:2e:b7:38:06:ba:d6:68:5e:44:ba:15:a1:
         a4:30:29:10:95:a5:7e:d4:9e:df:08:e0:cd:81:45:31:c1:9f:
         41:80:4a:ac:27:ed:44:14:28:cc:70:9e:0c:f9:0e:f9:35:ec:
         a9:ba:7b:57:17:8f:09:40:56:bc:0e:21:1d:97:fd:f3:4c:5e:
         1a:83:81:fc:fb:8a:6b:e4:cf:59:2f:e9:89:c4:5d:21:ba:be:
         4b:e5:fc:07:bb:e8:58:16:91:95:98:9b:ad:9b:66:7f:e8:c1:
         67:19:f2:13:5f:20:57:0e:ef:1f:1a:6e:b0:f9:9f:08:7e:81:
         7f:69:d2:7e:61:35:aa:0a:8b:23:13:68:9d:c9:67:57:fa:26:
         9e:34:7a:ea:0a:0f:95:22:08:31:b4:5e:3a:77:80:9b:74:90:
         48:2f:ce:96:0c:f0:39:b5:59:44:19:ff:3c:e5:b5:df:ba:a6:
         57:9f:f6:32:2b:6b:fc:70:17:26:a6:46:d8:b0:af:ab:a1:c0:
         91:0a:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:54:37 2024 by rpki-client on console-fra.rpki-client.org