Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File:                     sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier:          FPYyy5JY1yGhFGeOM2c9MoVzfYjObbpHI/4JVuOZj5k=
Subject key identifier:   14:90:33:03:9F:B5:42:8C:74:D9:F3:E6:15:34:5B:CA:19:55:78:0B
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer:       /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial:       018F874AB0DC609B34C8CA71B66BA04E3474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number:          0B07
Signing time:             Fri 17 May 2024 16:02:50 +0000
Manifest this update:     Fri 17 May 2024 16:02:50 +0000
Manifest next update:     Sat 18 May 2024 16:02:50 +0000
Files and hashes:         1: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: ZcPfg4RomidVpD9l+LBdNdJMqap0xIzlWgVvlucCoHA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b0:dc:60:9b:34:c8:ca:71:b6:6b:a0:4e:34:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
        Validity
            Not Before: May 17 16:02:50 2024 GMT
            Not After : May 18 16:02:50 2024 GMT
        Subject: CN=149033039fb5428c74d9f3e615345bca1955780b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:15:b5:27:aa:ba:c9:8d:25:03:6a:9f:70:f6:
                    8f:9b:cf:16:0f:d7:a2:b6:77:26:e7:66:2d:c6:b9:
                    16:59:77:09:d4:eb:63:52:f2:da:bf:60:55:89:81:
                    35:24:25:f2:87:66:c1:6d:2c:1a:a8:4b:ad:01:3e:
                    67:16:18:9d:d8:d9:bc:e8:7a:38:9e:43:e3:91:20:
                    4e:7a:73:47:05:d2:94:0b:90:fb:93:df:0c:dd:11:
                    18:d1:fa:2b:3b:91:be:37:8b:1d:79:0d:de:69:3b:
                    2f:30:b2:79:2e:ba:50:9a:a7:ca:75:cc:dc:d5:6a:
                    6a:15:10:a5:2d:da:e5:cc:a1:e4:88:b6:1c:e9:55:
                    d1:e3:21:d8:7a:5e:cf:1c:77:14:19:e5:58:ae:02:
                    7b:ab:b1:90:2d:36:b0:2b:fc:7e:64:03:d0:c3:d2:
                    cb:de:f6:9c:2d:3d:2c:bc:b5:29:e7:3b:e4:18:29:
                    7f:c6:c6:63:37:b8:49:49:d2:d3:f8:19:9b:a8:92:
                    0f:d0:a9:94:fc:14:34:07:a4:61:77:65:dc:cd:0e:
                    30:07:e9:2b:f2:91:6e:8a:65:10:fd:8f:1b:7d:fe:
                    5a:5d:64:e7:57:b5:20:5c:78:3e:33:38:cc:b9:5e:
                    99:09:64:51:a6:10:e7:9c:17:95:d6:2c:c8:42:14:
                    bb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:90:33:03:9F:B5:42:8C:74:D9:F3:E6:15:34:5B:CA:19:55:78:0B
            X509v3 Authority Key Identifier:
                keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:eb:b3:88:1c:a7:d0:5d:9a:38:8b:10:06:03:30:b6:dc:36:
         02:54:2d:65:0d:d0:98:8b:56:01:b3:82:35:1d:b6:89:98:86:
         cd:57:90:9a:ee:05:0f:8e:2d:ef:03:7f:35:50:2c:2c:1e:ce:
         97:36:c2:6d:33:cc:6f:0f:61:1a:e0:73:3b:15:92:7f:f3:6f:
         e9:7f:91:f5:cd:c2:49:31:34:16:4f:90:e9:1f:f9:49:d6:0d:
         42:1f:cb:9d:8f:06:69:e7:ce:56:1b:df:97:82:e1:8f:1c:ee:
         09:19:f9:50:41:b2:7d:36:53:1e:7e:b0:6a:b2:b8:bc:77:04:
         da:42:50:43:1f:27:b6:6e:30:05:41:e7:7a:6b:0d:ab:80:d5:
         39:de:b5:53:2e:66:8b:71:05:76:12:75:9b:0a:e1:e3:cc:70:
         a6:ce:2a:58:d5:1f:43:59:3f:a4:1d:8d:5c:7e:50:c8:a6:91:
         9c:83:6d:dd:ca:28:d1:db:cd:84:33:72:87:15:8f:b5:13:1a:
         12:25:9d:20:2a:2d:84:e7:a8:9f:e2:ec:e1:f8:fd:67:54:e2:
         f9:33:67:f8:79:71:8c:a7:41:0b:a6:90:f6:e1:68:c0:b5:1e:
         1a:b0:c6:99:af:6d:89:13:9b:04:c6:f2:ae:0e:59:a7:2f:3a:
         fd:f8:de:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:32 2024 by rpki-client on console-fra.rpki-client.org