Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File:                     6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier:          OA6KyzhxqEddkkKSPBxHirbTpxRL4kEViWesAxSzs5Y=
Subject key identifier:   75:41:50:DE:65:26:97:D6:45:92:2A:8D:59:0E:94:60:4F:3E:BC:95
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer:       /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial:       018F4C102A15C528A5F2FE509CD54E49693C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number:          100C
Signing time:             Mon 06 May 2024 04:01:18 +0000
Manifest this update:     Mon 06 May 2024 04:01:18 +0000
Manifest next update:     Tue 07 May 2024 04:01:18 +0000
Files and hashes:         1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: G+TwdfyJE+f5pDMwkzzbGl0PNIez3CC4ULsHkd62t8o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:10:2a:15:c5:28:a5:f2:fe:50:9c:d5:4e:49:69:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
        Validity
            Not Before: May  6 04:01:18 2024 GMT
            Not After : May  7 04:01:18 2024 GMT
        Subject: CN=754150de652697d645922a8d590e94604f3ebc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:14:df:5b:06:a7:ec:90:17:d4:b4:a9:47:
                    d6:0b:a2:ea:36:af:b7:b6:de:b9:53:ba:0c:fe:96:
                    7c:ad:50:6d:9c:65:0b:ff:ef:92:a3:7e:b7:7b:c8:
                    11:68:4d:b9:01:5d:eb:1d:f0:41:93:48:38:d4:db:
                    a7:2b:a7:c8:75:b6:c0:19:38:2f:cd:77:54:0b:bf:
                    df:cd:dc:c5:0a:03:2d:09:bf:73:90:f0:9e:ba:71:
                    c6:ab:55:90:6f:34:ac:05:72:85:41:3a:61:26:78:
                    2d:1d:e2:6c:a2:0f:c9:93:c7:10:8d:32:d8:67:a2:
                    cf:8c:cc:6f:a8:72:97:21:72:e9:e6:5e:1d:9c:e9:
                    49:18:3c:60:9f:bd:d9:b6:50:b0:ce:d0:84:d9:3c:
                    23:4c:e7:9a:f5:e8:d7:21:4c:15:04:51:ed:26:2c:
                    91:8a:86:50:5e:bb:ad:fd:57:d1:21:42:77:70:e8:
                    f4:b2:00:bf:17:57:e0:44:d1:7c:84:43:bc:14:da:
                    af:ec:01:97:50:89:3f:93:17:a0:15:9d:e1:af:64:
                    75:20:ac:81:55:c9:bd:3e:34:f4:cf:53:3a:d8:cd:
                    08:d8:93:e8:74:54:66:c3:d0:e9:64:b5:6d:95:fe:
                    24:61:63:28:a9:57:c0:4e:83:19:48:5a:f0:db:b7:
                    59:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:50:DE:65:26:97:D6:45:92:2A:8D:59:0E:94:60:4F:3E:BC:95
            X509v3 Authority Key Identifier:
                keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:97:18:6d:e3:ac:b1:a9:aa:cc:52:5d:ca:25:59:5a:65:2b:
         2c:51:1a:a7:89:f8:1c:2a:cd:f2:05:1a:77:6b:77:34:b1:3b:
         05:9f:22:f1:a1:00:4d:15:9e:35:5a:f7:13:d8:1a:b4:dc:84:
         87:a7:13:bc:71:7b:8d:4e:fb:b0:5e:2b:1b:c9:f4:88:46:5f:
         5a:05:5f:3d:d5:a8:68:80:de:62:bc:fc:07:fc:61:95:79:3d:
         9d:8d:1a:56:76:16:fc:0e:93:0a:39:9a:b6:ff:9c:6f:19:30:
         35:33:d3:10:90:83:8f:83:1c:0c:3a:8e:5d:d5:26:e6:fa:96:
         bb:bd:c4:4b:c5:3e:16:cc:cd:6a:12:24:f6:b6:2a:35:5a:b4:
         41:f5:df:0b:e2:b0:83:7e:45:ea:79:38:63:4a:76:8d:8c:c6:
         cb:59:8e:9a:ad:a1:a4:50:db:1c:6e:56:77:71:9f:48:2d:4b:
         1c:95:27:1c:c2:87:fc:32:07:90:6b:5a:47:15:b9:78:4c:b9:
         be:42:4e:85:2c:b5:d0:e6:76:3b:3f:0e:09:1a:ae:86:0c:12:
         eb:17:61:dd:81:aa:b9:b6:01:68:12:08:b2:db:5f:cf:ae:3f:
         4d:b2:1e:7c:84:c2:26:94:48:65:d8:84:fe:14:58:1b:9e:a7:
         f1:b9:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:30:03 2024 by rpki-client on console-fra.rpki-client.org