Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
File:                     epHmw2HvM-JQ3YijH32Sfq03Xtk.mft (raw, json)
Hash identifier:          IrRxjBTXoHSNQNQlrWoWuc1ui8ygabw8Q165nst4qLU=
Subject key identifier:   EB:B8:2B:57:A8:B4:E5:56:7A:FC:CE:11:03:73:65:23:05:75:9E:4D
Authority key identifier: 7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9
Certificate issuer:       /CN=7a91e6c361ef33e250dd88a31f7d927ead375ed9
Certificate serial:       018F8748FBBE6398655806B53681F5119C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
Manifest number:          F4
Signing time:             Fri 17 May 2024 16:00:58 +0000
Manifest this update:     Fri 17 May 2024 16:00:58 +0000
Manifest next update:     Sat 18 May 2024 16:00:58 +0000
Files and hashes:         1: epHmw2HvM-JQ3YijH32Sfq03Xtk.crl (hash: hOLktV8IT536qyOYSkCRBU8jmw5QISJ23u2ps/SS/5Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:fb:be:63:98:65:58:06:b5:36:81:f5:11:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91e6c361ef33e250dd88a31f7d927ead375ed9
        Validity
            Not Before: May 17 16:00:58 2024 GMT
            Not After : May 18 16:00:58 2024 GMT
        Subject: CN=ebb82b57a8b4e5567afcce110373652305759e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:37:99:74:68:f0:79:25:b9:df:50:37:ce:
                    5a:30:b6:b2:83:48:d7:1f:02:bf:29:68:fb:3b:eb:
                    23:20:40:d5:67:20:11:6f:aa:e1:4b:a2:6c:e7:a0:
                    f1:6d:6c:eb:ef:de:d6:74:06:23:8f:6e:36:d6:4b:
                    ad:fc:d4:8b:54:12:e6:90:01:2d:a3:38:00:a0:a3:
                    8c:be:9d:69:36:32:08:f6:4e:62:3a:60:c0:08:cb:
                    84:b0:a8:f7:25:86:f6:60:c8:3a:1f:84:83:15:9b:
                    d6:87:99:38:b5:0b:61:38:24:3b:3e:5c:c4:90:d4:
                    ba:94:58:b2:13:39:24:03:e3:ba:bc:a7:98:df:22:
                    09:09:ea:ef:aa:3c:1b:47:a4:02:51:d4:d5:89:a7:
                    65:0f:32:f4:c5:e0:15:b6:dc:8e:ab:87:90:cd:71:
                    e0:e7:54:90:2c:5e:2f:52:6f:04:fc:0a:41:bc:8a:
                    7d:be:24:93:e5:dc:c5:2c:a8:d7:7f:4f:19:e0:af:
                    f9:68:7a:2a:61:f2:58:c1:68:63:e5:cc:1c:1c:bf:
                    27:75:c7:4a:ce:9e:0b:c9:1b:fb:be:49:47:77:33:
                    2d:48:32:f1:c6:00:9a:ef:28:de:f1:8b:f7:a2:c1:
                    74:c5:cc:a7:cd:51:a2:15:53:d7:6f:c2:86:58:09:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B8:2B:57:A8:B4:E5:56:7A:FC:CE:11:03:73:65:23:05:75:9E:4D
            X509v3 Authority Key Identifier:
                keyid:7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:54:fe:bd:7e:04:57:ac:de:2f:9f:01:19:b3:72:6d:37:5b:
         ed:ba:bd:38:2a:6b:a5:85:53:19:c4:bf:05:d3:43:4b:0a:bf:
         24:5e:0e:fc:8f:e5:bd:30:55:32:b6:29:d3:e1:ad:34:14:43:
         c7:1a:44:3e:d7:e0:47:d9:d1:b6:aa:bb:3d:47:7a:93:0e:9b:
         3d:ab:d2:15:79:8f:b9:03:9d:92:d7:84:83:c5:1c:ea:f3:07:
         96:e6:e3:31:7f:89:d7:ed:36:17:cc:0a:20:07:52:9f:c1:46:
         5e:a9:1f:73:45:ce:b2:b4:87:5d:14:01:05:0e:05:ca:2b:8b:
         ed:a2:07:89:e3:4e:b1:d4:70:62:cc:2c:09:c8:13:85:74:69:
         e2:1d:56:43:68:c6:6d:5e:ea:d0:13:a9:37:5f:c0:7d:41:74:
         07:a7:65:75:05:8b:b9:b6:d7:92:c7:f9:9f:07:5a:62:14:2b:
         24:dd:a1:ed:84:fb:42:f6:56:51:12:09:71:25:31:a4:1b:3c:
         90:f8:2a:7b:d5:2b:07:e4:75:9d:1d:94:6a:d6:31:b2:18:76:
         a1:47:fa:33:83:b2:0b:f4:9b:dd:b4:27:46:67:a7:50:81:31:
         b7:57:74:43:3b:e4:18:13:ff:b5:12:1f:2e:36:93:3a:c2:63:
         15:15:e9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:22:30 2024 by rpki-client on console-fra.rpki-client.org