Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
File:                     X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json)
Hash identifier:          5PhnXPKXAq02oi0xS1zWl5pw0LPBNsQ32eoRCxQehVU=
Subject key identifier:   A1:4E:C8:A4:76:46:E3:81:3D:17:15:64:7A:DC:B4:0A:60:F2:3A:18
Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Certificate issuer:       /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Certificate serial:       018F86A39803370D169A4AD661B5F34AE8CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
Manifest number:          0936
Signing time:             Fri 17 May 2024 13:00:19 +0000
Manifest this update:     Fri 17 May 2024 13:00:19 +0000
Manifest next update:     Sat 18 May 2024 13:00:19 +0000
Files and hashes:         1: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: XsUXtguovSBTVpRoc4qc3Vdumo/WMBEuGb9D7q1o7Mc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:98:03:37:0d:16:9a:4a:d6:61:b5:f3:4a:e8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
        Validity
            Not Before: May 17 13:00:19 2024 GMT
            Not After : May 18 13:00:19 2024 GMT
        Subject: CN=a14ec8a47646e3813d1715647adcb40a60f23a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:d5:28:b2:38:97:49:d5:b8:f0:62:62:0e:
                    05:ce:e6:16:1a:2c:67:c4:18:4a:1e:3a:2b:8d:01:
                    a8:8b:97:f7:ab:63:3e:04:39:35:17:34:eb:56:01:
                    25:d4:b6:c3:84:f5:8e:5d:6a:fc:40:09:1c:7e:7c:
                    f8:4e:b9:be:93:8d:2e:2a:1d:66:02:98:27:c1:a7:
                    c9:4e:7f:ab:70:1b:1b:33:70:93:8e:0a:bf:43:19:
                    09:dd:b6:52:ee:cc:dc:4d:d1:4b:f8:ab:8d:da:a1:
                    6e:bf:bf:17:84:1f:84:c0:21:f4:8c:55:70:88:38:
                    99:ae:01:9c:e4:4d:85:8b:39:c9:ee:36:70:96:93:
                    14:91:ee:03:84:4b:79:5d:52:85:17:29:2c:96:d8:
                    97:0d:cc:78:d2:15:17:80:c5:9a:44:37:12:f1:80:
                    71:56:8c:1d:06:48:d1:89:35:a1:93:8d:ef:db:7b:
                    d4:0e:d7:ba:4d:df:b0:60:28:27:38:8f:0c:bd:7f:
                    4d:01:71:1d:1b:76:d9:67:8b:ce:96:41:19:36:fb:
                    ba:9a:42:09:73:59:69:24:88:cb:c7:55:d2:17:6e:
                    1b:bd:2a:7d:68:14:5b:09:01:1f:88:29:b7:4c:8d:
                    3a:23:5a:e6:35:e6:51:99:09:df:4c:47:88:f2:c0:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:C8:A4:76:46:E3:81:3D:17:15:64:7A:DC:B4:0A:60:F2:3A:18
            X509v3 Authority Key Identifier:
                keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:53:4b:ba:f5:73:c0:f8:18:ae:10:f1:57:4c:df:b8:0b:
         45:17:0f:69:c8:33:5e:b0:a0:8e:af:fc:9e:98:50:a0:59:c8:
         5c:e2:71:34:0e:95:a1:6c:12:3d:ed:b2:91:8a:e5:d7:d0:d7:
         7e:dc:80:cc:0e:d1:c3:aa:1e:f3:a8:a3:34:8c:d7:0b:9d:eb:
         36:aa:7c:29:09:b8:4f:3d:e2:13:e2:a0:a6:8d:9a:12:a6:ca:
         19:cb:f5:42:e4:73:f5:db:17:0b:7e:f5:d6:91:92:4b:cf:37:
         46:01:2d:bb:c2:32:79:06:64:82:d9:ca:9a:67:25:2d:eb:93:
         31:d7:b8:ae:18:88:7b:07:4f:b0:5e:32:da:9c:4c:06:18:cb:
         b6:e7:e8:82:04:49:ad:98:c1:ce:3e:61:fc:ad:37:54:37:07:
         09:8e:92:6b:00:b2:f8:13:4b:44:eb:01:9d:06:ed:2c:f5:12:
         a9:a0:27:a6:5d:c7:54:13:09:c9:d6:4c:8f:78:db:c3:f0:2a:
         3a:3e:81:d5:8f:de:06:67:48:8a:14:e1:d1:7a:e2:71:d5:aa:
         fc:d5:89:4f:74:ee:19:6d:65:95:fc:e8:5d:de:d1:cb:d2:99:
         ca:3c:bc:a1:d1:ef:6d:05:13:8a:68:81:bf:e9:0c:28:17:97:
         0b:1c:ee:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:03:51 2024 by rpki-client on console-fra.rpki-client.org