Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File:                     c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier:          2058blEBq12CGLuqTxnpRo1gBc+O9pQ++daub5ZmkQQ=
Subject key identifier:   BB:0C:16:FD:9B:87:F6:CD:EA:02:B3:CA:E4:3A:31:81:73:7C:76:C3
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer:       /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial:       018F89385778B7B81F97F3947F2BF9D1C843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number:          0B40
Signing time:             Sat 18 May 2024 01:02:02 +0000
Manifest this update:     Sat 18 May 2024 01:02:02 +0000
Manifest next update:     Sun 19 May 2024 01:02:02 +0000
Files and hashes:         1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: Nxersx4rGdRnNr+ulpgkSJaVSDZPoYo5CtQhLnQJM4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:57:78:b7:b8:1f:97:f3:94:7f:2b:f9:d1:c8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
        Validity
            Not Before: May 18 01:02:02 2024 GMT
            Not After : May 19 01:02:02 2024 GMT
        Subject: CN=bb0c16fd9b87f6cdea02b3cae43a3181737c76c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:1c:07:1c:59:74:fa:0c:21:71:a2:94:9a:
                    17:ea:eb:61:51:56:42:1c:c4:c0:a6:81:09:3f:29:
                    7c:4b:77:50:f5:42:c4:4f:fc:26:51:fe:08:5a:ab:
                    38:b1:fe:aa:89:04:10:a9:29:01:dc:75:98:5d:f5:
                    7d:17:bf:0a:58:17:70:29:fa:b8:22:bb:c7:65:d7:
                    35:a2:da:bc:a8:e5:17:c7:0f:e4:63:65:1a:8f:e9:
                    c0:57:0e:88:83:d6:67:8a:21:d4:dd:6a:31:0a:db:
                    d9:42:ba:7e:02:7d:35:d3:f1:6e:3c:d4:af:0b:09:
                    79:cd:4b:58:01:fc:35:98:95:66:12:d0:aa:7d:dc:
                    dc:d8:59:e9:c1:e4:38:4c:8d:17:66:e6:44:5d:40:
                    5b:88:87:91:f6:21:54:38:2e:35:00:bc:ec:da:1a:
                    4d:80:c9:a2:ce:84:f7:6f:46:e1:8c:9c:96:3b:c4:
                    fb:c4:88:f0:ae:eb:b3:27:12:b7:0b:85:50:d2:1d:
                    4d:9b:39:f3:66:b3:4a:b0:14:a4:5f:41:aa:a2:9d:
                    8d:7f:ba:55:0f:47:c4:7a:d3:04:26:bb:39:e6:bf:
                    65:b6:96:f8:01:69:44:19:04:2d:1f:d1:2e:4a:e7:
                    a5:01:69:cf:65:91:ec:ad:22:5e:09:0e:88:b4:e8:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0C:16:FD:9B:87:F6:CD:EA:02:B3:CA:E4:3A:31:81:73:7C:76:C3
            X509v3 Authority Key Identifier:
                keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:93:6e:0b:80:8b:98:cf:cb:ec:cc:a7:d3:bc:94:ee:83:8e:
         eb:4f:e4:e1:7a:04:ac:93:54:ad:eb:9e:e1:5d:48:03:2e:0c:
         1a:2c:de:fa:51:ad:2a:44:b3:d3:96:d4:ac:ce:14:7f:7c:f8:
         78:6a:90:94:2b:71:18:4e:e3:39:72:75:7d:eb:e6:0b:35:6f:
         56:6d:c0:05:b6:57:b6:d5:26:57:05:10:8e:bb:df:47:a0:22:
         6c:c3:b1:4c:82:b6:66:d2:7f:c7:9f:5b:1b:b1:6f:e4:14:e4:
         c4:81:71:bd:39:6d:cc:80:dc:ad:fd:ac:b3:a0:19:35:d7:13:
         8f:86:e7:9e:44:20:55:98:08:1c:e9:23:94:97:82:f4:7d:e2:
         a3:61:c3:24:f5:f2:8d:ef:8a:68:e8:86:ab:eb:38:76:44:63:
         8d:aa:ae:61:6a:e4:b0:24:26:60:56:5e:63:5f:ad:fb:26:f9:
         aa:72:53:20:68:8d:73:14:d8:99:ce:6f:53:f7:b7:5f:89:01:
         97:44:f6:8f:07:b3:95:b0:13:d3:05:30:e9:c1:15:00:b7:65:
         77:56:da:20:14:d6:3e:41:c8:a2:e4:66:8d:6b:77:e2:1c:f4:
         34:4c:cf:c2:d7:28:60:f7:36:0a:ba:5f:64:0f:55:41:85:e2:
         3b:a7:60:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:49:49 2024 by rpki-client on console-ams.rpki-client.org