Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
File:                     t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft (raw, json)
Hash identifier:          i00hNjoXVPZ2zS5yydWRfqrHoWpogMBbQNcaUlNumRg=
Subject key identifier:   D5:B8:7F:AD:7F:ED:4E:CC:F0:19:C9:DB:D7:00:A1:DB:AB:44:FA:C6
Authority key identifier: B7:E3:AA:A5:9C:48:E9:0C:FE:25:B8:B4:A2:97:D3:DE:3B:AB:D2:C1
Certificate issuer:       /CN=b7e3aaa59c48e90cfe25b8b4a297d3de3babd2c1
Certificate serial:       018F87B628D1D2FFC475A3210D29DB7AE419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-OqpZxI6Qz-Jbi0opfT3jur0sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
Manifest number:          079B
Signing time:             Fri 17 May 2024 18:00:13 +0000
Manifest this update:     Fri 17 May 2024 18:00:13 +0000
Manifest next update:     Sat 18 May 2024 18:00:13 +0000
Files and hashes:         1: t-OqpZxI6Qz-Jbi0opfT3jur0sE.crl (hash: AQpC6ywc+VfENUOGeHQ5tsVYUivztB8ubLxMDgJBOcs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t-OqpZxI6Qz-Jbi0opfT3jur0sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:28:d1:d2:ff:c4:75:a3:21:0d:29:db:7a:e4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e3aaa59c48e90cfe25b8b4a297d3de3babd2c1
        Validity
            Not Before: May 17 18:00:13 2024 GMT
            Not After : May 18 18:00:13 2024 GMT
        Subject: CN=d5b87fad7fed4eccf019c9dbd700a1dbab44fac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:87:e4:fc:1f:d0:4a:7b:85:47:b3:c5:9c:
                    41:ae:27:79:9f:b2:04:1d:62:ac:42:48:69:fc:e9:
                    73:ca:03:7e:41:34:d9:14:a5:fd:4b:94:d8:38:1f:
                    30:ef:43:2d:52:de:29:6e:16:ac:47:01:f2:03:79:
                    c9:1e:a3:ce:fe:bc:6d:4f:90:b7:1a:91:25:67:c2:
                    9d:eb:12:a5:57:67:8a:98:a7:cf:74:4b:3f:d3:70:
                    dd:4d:1e:84:e2:2d:1a:a5:08:ef:05:ed:53:c0:fb:
                    55:57:ee:18:1e:5c:8c:a2:43:82:fb:4d:78:49:a9:
                    a2:b2:e6:e1:0a:89:c6:08:bc:41:d1:e2:34:f5:00:
                    77:5a:96:e7:28:bc:97:86:bd:df:7d:f7:40:76:26:
                    48:93:f4:a0:3c:7e:a9:79:cd:90:59:8c:2c:76:66:
                    1b:cc:37:5d:92:6a:6b:e7:af:99:15:4e:c4:c6:42:
                    21:25:ed:68:0f:e4:b8:8f:88:d4:a3:62:bf:bd:2c:
                    52:a4:96:5f:35:17:94:5e:d4:e1:34:9f:50:d2:2a:
                    ef:d9:72:b8:78:68:0b:29:1a:fc:8b:3f:d1:4c:05:
                    8d:6a:87:01:b2:05:e6:7e:a1:24:22:95:04:aa:88:
                    db:4c:4b:98:4e:70:db:cb:d1:8b:f1:be:16:fc:95:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B8:7F:AD:7F:ED:4E:CC:F0:19:C9:DB:D7:00:A1:DB:AB:44:FA:C6
            X509v3 Authority Key Identifier:
                keyid:B7:E3:AA:A5:9C:48:E9:0C:FE:25:B8:B4:A2:97:D3:DE:3B:AB:D2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-OqpZxI6Qz-Jbi0opfT3jur0sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c0:27:ac:a2:82:23:c9:e9:97:5f:f1:a2:bd:6a:db:68:e8:
         30:2e:9b:80:03:a6:cc:6d:27:8a:d9:e1:f6:65:4f:a7:85:b6:
         f8:46:58:cb:2b:25:6c:5f:b1:bf:82:fe:ce:77:8f:bb:c3:6d:
         9a:85:56:95:eb:cf:2b:36:78:15:e1:d5:a7:27:fa:88:f8:1f:
         ea:1c:6b:84:61:30:44:78:5c:a2:3e:82:44:1b:34:c7:94:56:
         a1:3f:13:a0:58:3d:69:c5:aa:fe:bd:4f:58:40:14:aa:af:5b:
         1b:87:5f:13:d6:dd:ee:52:00:f0:ed:63:99:57:71:12:3b:1e:
         0f:6d:d7:2f:03:34:af:5f:d1:0a:1f:7c:6a:95:e0:94:88:5d:
         00:41:e5:4e:04:37:52:2d:46:1f:cb:e3:0f:97:7a:10:7e:f1:
         d1:36:3c:fa:af:9c:70:0e:f6:5a:a8:67:5c:d9:7d:34:54:2e:
         d6:8d:44:b0:f4:36:35:0f:0e:77:40:43:08:c7:58:c9:56:7f:
         41:56:ea:a0:d9:e8:c1:88:64:8e:84:31:1e:34:f6:3c:7e:85:
         be:38:ea:a4:be:c0:89:d8:78:5d:36:6c:b2:77:bb:10:29:66:
         9b:41:e9:26:fb:a4:11:7b:26:35:bb:66:cc:0d:50:3e:d7:9d:
         e7:1a:6b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:54 2024 by rpki-client on console-ams.rpki-client.org