Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.mft
File:                     q3goucqidFn-adNK5WhfenqGPps.mft (raw, json)
Hash identifier:          FJwth5pROkeWXhm1Jopo2Go47eJFaEIY568mOwZIfcU=
Subject key identifier:   D3:79:99:56:6B:A1:56:5C:5B:1E:09:12:40:7B:6E:DD:C3:4B:62:23
Authority key identifier: AB:78:28:B9:CA:A2:74:59:FE:69:D3:4A:E5:68:5F:7A:7A:86:3E:9B
Certificate issuer:       /CN=ab7828b9caa27459fe69d34ae5685f7a7a863e9b
Certificate serial:       018F87ED2AD160506E6566A91A93DD778170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3goucqidFn-adNK5WhfenqGPps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.mft
Manifest number:          0BF8
Signing time:             Fri 17 May 2024 19:00:17 +0000
Manifest this update:     Fri 17 May 2024 19:00:17 +0000
Manifest next update:     Sat 18 May 2024 19:00:17 +0000
Files and hashes:         1: q3goucqidFn-adNK5WhfenqGPps.crl (hash: +c61MRMKMeAT8WeUy2ALW9T0eMz91l/CgMQJSrrlKOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q3goucqidFn-adNK5WhfenqGPps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:2a:d1:60:50:6e:65:66:a9:1a:93:dd:77:81:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7828b9caa27459fe69d34ae5685f7a7a863e9b
        Validity
            Not Before: May 17 19:00:17 2024 GMT
            Not After : May 18 19:00:17 2024 GMT
        Subject: CN=d37999566ba1565c5b1e0912407b6eddc34b6223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:05:76:e3:ab:84:ad:a1:90:a3:d6:5e:7f:
                    b4:07:4d:41:cf:4c:ab:51:fb:41:f9:b1:8a:0e:13:
                    76:40:d1:ea:43:99:83:f0:c5:54:83:df:25:d2:62:
                    d9:c5:33:fd:2b:66:54:56:a3:5f:fb:1d:cf:8e:b0:
                    b5:ef:45:42:05:be:80:73:36:ef:ad:99:85:5e:c0:
                    26:b5:46:b0:fa:f7:7f:5e:94:9e:65:57:b5:83:36:
                    b9:e6:09:09:ee:9e:de:1c:c7:33:24:88:23:8e:b8:
                    fe:0f:9d:9d:a6:a2:4d:2c:de:e6:89:a5:74:cb:a6:
                    cf:3e:60:ec:17:77:7d:ce:f1:6c:aa:1a:d2:c0:ff:
                    2f:1c:78:3d:44:c9:aa:f7:ac:3a:47:5e:bb:16:20:
                    23:65:cb:10:a0:59:34:fb:20:52:e7:92:3b:01:1b:
                    9b:41:7c:bc:5a:32:e6:8c:9a:a7:3b:86:5f:b3:9e:
                    c1:c0:a4:87:66:c1:5b:b5:ac:00:51:4b:07:72:0c:
                    39:db:93:52:79:a3:64:96:f3:51:41:b8:e9:e1:79:
                    09:f9:40:ba:f2:f0:c4:be:ea:84:ce:53:2e:10:b6:
                    1f:a4:23:97:22:c0:f7:94:5b:2e:e0:68:48:b6:97:
                    7a:95:0e:38:a0:e9:4a:ab:f8:cb:6a:9c:d0:fe:97:
                    09:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:79:99:56:6B:A1:56:5C:5B:1E:09:12:40:7B:6E:DD:C3:4B:62:23
            X509v3 Authority Key Identifier:
                keyid:AB:78:28:B9:CA:A2:74:59:FE:69:D3:4A:E5:68:5F:7A:7A:86:3E:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3goucqidFn-adNK5WhfenqGPps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:eb:56:53:52:ec:38:bf:d6:03:2c:d3:53:25:d8:dc:bd:88:
         6c:50:3e:07:2c:16:df:a6:cd:ee:7c:81:03:d1:4b:7e:12:c0:
         c7:8b:fb:0c:92:2a:55:83:8b:42:5f:dd:8b:78:5e:10:4b:77:
         25:a0:48:57:24:36:d3:38:cc:84:8d:bc:46:6c:ac:6d:a6:50:
         98:b9:fb:63:c7:54:49:c0:ba:95:a6:71:e5:18:b8:01:e7:10:
         12:8a:76:17:6a:37:34:26:8a:fc:d6:08:ae:3b:4d:10:29:b6:
         99:ba:22:1e:93:db:3a:f9:a7:f9:63:d7:bc:ce:68:6a:26:2f:
         a9:66:d0:dc:57:56:ae:bc:e2:a3:2a:8b:13:ea:1a:0e:96:f1:
         87:65:7f:6a:68:bb:1f:02:c8:a4:54:74:cd:1c:75:9a:a5:22:
         29:12:cb:39:70:ca:76:38:ed:3c:b6:fa:94:0f:c6:b5:e6:1c:
         01:c8:bc:1c:47:9c:f1:75:0d:61:65:0c:0f:50:98:bf:76:b4:
         51:d2:3c:b3:08:c8:4e:9f:f1:b6:cb:e0:bf:17:28:c0:87:36:
         cd:7d:4f:53:a3:f3:05:d2:d7:ff:1a:d1:50:65:c5:2a:1b:7f:
         e6:b3:66:78:1e:b3:10:33:4a:56:db:2d:76:1e:64:17:f8:fb:
         89:00:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:23:26 2024 by rpki-client on console-fra.rpki-client.org