Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File:                     9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier:          vJKq8WwzFrdiXPfLGIeiU9htMmibTOlwWrS5q08rqGg=
Subject key identifier:   E5:B9:6B:FF:BC:D8:FF:37:79:3E:18:90:B5:CD:09:F6:7D:84:71:74
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer:       /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial:       018F369B5CB558521D978B99B1592D4A6EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number:          082E
Signing time:             Thu 02 May 2024 00:01:42 +0000
Manifest this update:     Thu 02 May 2024 00:01:42 +0000
Manifest next update:     Fri 03 May 2024 00:01:42 +0000
Files and hashes:         1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: anGbvyx9AxEnIrA3IdhLLVOJiL1TD0QB3QpviaXa3ZE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 00:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:9b:5c:b5:58:52:1d:97:8b:99:b1:59:2d:4a:6e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
        Validity
            Not Before: May  2 00:01:42 2024 GMT
            Not After : May  3 00:01:42 2024 GMT
        Subject: CN=e5b96bffbcd8ff37793e1890b5cd09f67d847174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:ad:cb:39:b2:45:0e:9c:09:b9:61:0d:77:
                    d8:8f:a2:43:db:5b:01:31:39:7a:b4:c5:b3:42:3e:
                    d3:43:81:a1:34:0e:83:d7:f3:ea:a3:e5:ad:f2:73:
                    01:aa:e1:bc:42:2c:5a:4c:1d:39:7e:74:5f:0d:73:
                    33:df:4f:9d:99:3e:dc:01:ae:f9:22:0b:00:66:6f:
                    80:ca:87:07:b7:9d:09:09:e6:f7:78:3b:d7:b9:ce:
                    a1:73:d5:3e:84:34:c8:0f:ee:73:f9:fa:04:97:c4:
                    17:bc:f5:b9:a7:8d:cd:a5:bc:d6:ce:a6:86:e3:f0:
                    f8:e5:f8:36:92:ea:30:82:6d:3a:69:88:9b:7e:17:
                    5a:3c:3e:58:7e:1e:e0:1d:51:28:ff:a8:62:ca:dd:
                    e6:07:d1:bb:13:44:86:e7:2f:eb:ad:0f:41:2a:6e:
                    6d:7b:25:43:e0:91:24:e2:ed:bd:ca:22:ae:f3:bd:
                    25:dd:b4:61:b9:5c:48:84:8e:6a:e4:3e:89:6b:e4:
                    b4:25:7a:c4:b1:1f:cb:14:a3:09:ee:d5:a4:3b:eb:
                    f9:a6:57:eb:ab:ba:96:38:7d:11:aa:dc:0b:4b:ec:
                    12:d5:5a:6f:40:5d:c5:57:ad:00:14:59:14:9d:d1:
                    05:35:79:5a:fc:d5:d4:1e:73:de:84:30:da:0f:85:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B9:6B:FF:BC:D8:FF:37:79:3E:18:90:B5:CD:09:F6:7D:84:71:74
            X509v3 Authority Key Identifier:
                keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ff:a6:b1:4d:ea:60:ef:40:b8:c8:83:e5:eb:51:25:d9:58:
         46:af:38:e2:e0:58:a2:e8:ac:72:5e:62:2b:50:1b:cd:71:50:
         02:cc:36:aa:62:53:d7:6f:af:72:b3:f5:59:ff:52:60:38:d3:
         6f:0f:fc:61:8f:bf:b3:0e:8c:fb:c9:f6:5b:91:93:6f:21:81:
         0b:fa:3b:27:28:ee:8c:49:98:14:f0:ee:b7:ec:d4:05:65:30:
         50:b3:8c:45:bd:2e:7d:0c:22:de:e2:1d:95:01:b2:a3:38:ab:
         29:d0:dd:2b:d8:63:7e:1e:7e:8e:c6:69:19:63:85:ee:b1:d3:
         f5:e6:1f:9d:f7:80:b5:39:6b:e8:8b:14:2e:76:83:41:83:9b:
         3c:e3:ba:b1:42:90:2d:05:5d:f4:95:6e:cd:a9:eb:6f:3a:fe:
         7f:27:fe:4a:32:ce:52:6b:66:b1:a3:c7:31:91:39:18:50:1d:
         eb:35:04:6f:d0:0f:49:84:9e:e5:73:3f:ac:26:7f:1e:ea:ba:
         75:1a:d9:a7:43:b3:dd:ce:59:06:05:71:81:70:aa:a4:57:1f:
         28:c7:55:3d:64:15:07:20:4e:06:50:ab:b5:3a:61:8c:b7:16:
         0f:67:5d:c5:0b:a1:c8:f1:2d:21:d1:0d:5e:c7:ef:2b:5b:31:
         20:4b:e0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:10:36 2024 by rpki-client on console-fra.rpki-client.org