Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File:                     2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier:          D/tvNuTJxkcLK8Xb3pPW4ONtbyRMJHsfxgByYd6LAGA=
Subject key identifier:   98:6F:9B:3A:9D:C1:21:A7:1D:93:24:A2:81:76:38:75:82:37:8C:EE
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer:       /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial:       018F576F473BB6C36243BAF6F625C835278F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number:          10EF
Signing time:             Wed 08 May 2024 09:01:01 +0000
Manifest this update:     Wed 08 May 2024 09:01:01 +0000
Manifest next update:     Thu 09 May 2024 09:01:01 +0000
Files and hashes:         1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: LXWQWJaGhZusyjkjvlbtucKh8hlRMfpSYJP6kA3UWeM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:6f:47:3b:b6:c3:62:43:ba:f6:f6:25:c8:35:27:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
        Validity
            Not Before: May  8 09:01:01 2024 GMT
            Not After : May  9 09:01:01 2024 GMT
        Subject: CN=986f9b3a9dc121a71d9324a28176387582378cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:5f:57:f7:5b:a1:e5:3e:a4:0a:29:8d:85:
                    42:57:17:b5:46:c1:95:ce:cd:4c:f1:12:b1:72:ca:
                    8e:60:20:c0:1e:67:b1:18:5c:d0:7b:e3:93:6d:d5:
                    30:ad:d6:1c:ce:9a:22:b4:47:53:0f:5c:9e:ba:e9:
                    be:ea:b2:95:c9:9a:3a:5a:e6:65:72:7e:a1:3a:57:
                    7a:76:1b:3e:07:f3:ad:24:6f:8e:9f:3f:8f:15:d3:
                    39:a4:01:52:78:c4:90:08:30:4e:08:2a:f3:9a:57:
                    d0:c8:c2:e0:fb:77:44:df:5d:b1:5c:72:d7:7a:f5:
                    74:cd:18:c8:fe:ca:05:b5:f0:93:51:4e:52:ff:7b:
                    5f:ce:b8:34:3f:42:74:6f:1c:1c:21:2d:78:93:65:
                    9a:5f:22:6a:44:9c:9e:79:6e:50:9a:04:94:7a:0d:
                    c2:13:93:b4:2a:ee:6f:b8:30:19:ee:08:80:1d:a2:
                    bd:ec:2e:ca:c5:7d:82:06:82:6a:ec:51:d1:7d:6a:
                    ec:40:31:80:40:f6:3f:48:a7:6a:57:2e:65:89:7c:
                    ce:1e:ab:94:04:97:04:33:5d:4c:6a:5c:13:ef:74:
                    8c:f6:c6:a1:8c:67:f6:4f:2c:67:13:bf:18:6c:65:
                    14:56:67:f2:76:58:df:5c:51:6b:7f:79:e9:f8:72:
                    14:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6F:9B:3A:9D:C1:21:A7:1D:93:24:A2:81:76:38:75:82:37:8C:EE
            X509v3 Authority Key Identifier:
                keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:b3:31:59:eb:e9:35:cc:12:4a:90:4d:22:13:0c:16:79:34:
         32:e8:b2:e6:64:b2:3c:2f:ae:7a:6d:c3:65:48:f8:53:2a:ec:
         30:4b:e1:b9:2e:92:f5:7e:52:5f:ae:c1:f2:f1:09:a3:42:e2:
         1c:65:6c:80:7f:44:c7:4a:8b:8f:a4:b6:a5:c7:b3:44:93:a1:
         56:36:31:0b:57:df:30:dc:ca:b3:a2:35:20:36:99:11:e2:d8:
         1e:6d:b6:a4:e9:aa:4b:41:d3:54:ec:54:6b:3b:7f:b9:be:10:
         cc:7d:27:a7:cc:b8:96:c0:84:4d:4a:cf:4c:3d:86:0a:4f:4f:
         4f:8b:8e:c9:8a:f1:62:02:fe:9b:59:65:f9:2f:14:1c:4c:98:
         5b:77:b3:97:38:bf:cc:a6:6f:cd:63:af:1d:1b:88:49:34:ba:
         c9:aa:df:e6:cb:aa:63:1d:5e:7f:18:52:40:21:d2:68:a1:2f:
         f1:12:1d:96:dd:ac:8a:03:05:83:cd:a1:85:7c:49:68:07:57:
         3a:90:27:aa:26:46:98:2c:50:84:05:48:3b:c3:da:6f:d4:4f:
         75:46:13:26:b7:89:c5:fa:7c:94:18:91:5a:cb:c5:f6:bf:46:
         2e:c2:6d:4c:25:4e:d3:c1:d9:5a:09:ed:29:88:11:80:94:18:
         a0:a2:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 13:28:26 2024 by rpki-client on console-fra.rpki-client.org