Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
File:                     97LAktArE86qejP_BXqECmjXFSE.mft (raw, json)
Hash identifier:          G/GZG73a7rau1lFemafdngLuGa2PDxLm/5Aj25Basy0=
Subject key identifier:   B8:F8:E3:46:15:BF:0E:CA:12:0D:F8:80:6E:69:BC:EE:3D:5A:50:A1
Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Certificate issuer:       /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Certificate serial:       018F4B6B8598CD85781C83391E6D84C86E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
Manifest number:          0B7A
Signing time:             Mon 06 May 2024 01:01:28 +0000
Manifest this update:     Mon 06 May 2024 01:01:28 +0000
Manifest next update:     Tue 07 May 2024 01:01:28 +0000
Files and hashes:         1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: dt3I0iWvEQgKLb6mfj6h8GTxSFpzvYGjTWmY11WkdxU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:85:98:cd:85:78:1c:83:39:1e:6d:84:c8:6e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
        Validity
            Not Before: May  6 01:01:28 2024 GMT
            Not After : May  7 01:01:28 2024 GMT
        Subject: CN=b8f8e34615bf0eca120df8806e69bcee3d5a50a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:4d:95:2e:d8:e3:e2:e3:3c:bc:09:f7:7f:
                    04:bb:e3:4f:e0:85:64:08:02:bc:46:7f:6c:de:83:
                    db:26:d7:fc:28:f8:79:3d:c5:06:33:dd:aa:27:c2:
                    cc:a0:9a:e3:4d:41:08:9f:42:bb:d5:01:b8:88:9b:
                    00:f8:2a:bb:94:eb:39:2b:bb:06:1e:43:4b:76:50:
                    fa:84:f9:0a:19:03:61:cc:fb:33:2f:eb:51:c3:e6:
                    a1:23:68:af:1b:cb:a3:e6:b0:93:30:86:bc:1c:ac:
                    f1:64:7a:f0:98:0c:d2:d0:45:48:fc:1f:0c:81:c0:
                    86:f8:fb:03:da:4f:b5:c9:32:a9:97:48:7e:17:07:
                    f3:e7:c9:4e:a8:e5:61:3e:f6:cf:f7:c3:0b:b8:4a:
                    0e:d7:9e:c5:1f:c9:eb:e3:a8:b3:d3:6c:d7:1e:e8:
                    fe:74:08:8f:e9:93:c6:a2:6d:d9:23:f3:f8:a0:10:
                    52:54:5e:86:88:25:e3:4d:7c:3c:49:08:85:87:87:
                    c0:09:f0:7e:2a:0a:9e:6e:da:7f:db:ee:5e:11:1c:
                    82:9e:84:ed:2e:1c:3c:e0:ae:8c:34:34:d9:e1:3a:
                    07:cd:92:33:27:d7:0b:6e:ae:19:b6:ae:74:53:42:
                    79:43:c5:fe:b3:fb:60:24:90:c2:3d:69:18:e1:90:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F8:E3:46:15:BF:0E:CA:12:0D:F8:80:6E:69:BC:EE:3D:5A:50:A1
            X509v3 Authority Key Identifier:
                keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7b:e2:4b:2d:8c:07:09:c9:44:08:f6:ee:ae:d8:40:ad:31:
         5d:00:8c:6c:11:dd:6c:be:ae:54:aa:9c:a5:5b:cf:c9:37:74:
         c2:20:e1:a5:c4:b9:30:8c:bd:86:e2:cf:ff:91:07:3d:3f:c8:
         01:32:05:cb:d7:98:c7:d4:74:d1:35:ef:62:2d:0e:f2:ae:23:
         92:be:46:92:f7:ec:ae:88:27:ae:71:1e:62:ec:68:a3:f6:bf:
         f2:85:f5:15:cc:7b:46:74:63:30:1b:41:c8:49:fd:6f:7f:2b:
         33:10:10:16:a3:93:a4:57:1b:61:48:95:22:34:63:67:ff:a1:
         70:fa:a3:b6:c0:5a:df:35:aa:b3:32:8f:66:4f:d4:3d:3e:a8:
         58:d9:b5:6b:b5:5b:db:fa:01:b8:0d:59:91:45:7e:b0:f5:82:
         0b:1c:39:18:4d:e1:6e:5b:6c:a9:23:54:c9:78:00:d9:44:93:
         6b:e1:f4:60:4d:1f:4a:85:d9:e1:2b:90:37:92:a5:12:49:1e:
         a5:5d:bd:ab:b2:42:f7:fa:0d:7e:64:89:74:fa:53:1c:1e:bb:
         d5:47:45:5a:cc:5d:e4:60:95:00:75:27:fe:bf:0a:c3:e9:41:
         ee:23:a0:00:e6:a9:56:35:50:fc:11:5f:2a:13:f0:ee:c6:97:
         66:41:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:01:17 2024 by rpki-client on console-fra.rpki-client.org