Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/36775d-aaa1-4b94-9537-6963bd2b4430/1/4woGJCPcOdp8ziKDEzP77UTftVU.mft
File:                     4woGJCPcOdp8ziKDEzP77UTftVU.mft (raw, json)
Hash identifier:          Nnr+dSa0VeLEpalEATNRqYN08QD2WiuctLouSV2dGT4=
Subject key identifier:   34:6B:70:D6:6E:2D:10:5D:61:85:30:F4:66:68:2F:CC:37:0E:64:4C
Authority key identifier: E3:0A:06:24:23:DC:39:DA:7C:CE:22:83:13:33:FB:ED:44:DF:B5:55
Certificate issuer:       /CN=e30a062423dc39da7cce22831333fbed44dfb555
Certificate serial:       018F4C0FFC38A2959980224FDCDFB41ED544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4woGJCPcOdp8ziKDEzP77UTftVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/36775d-aaa1-4b94-9537-6963bd2b4430/1/4woGJCPcOdp8ziKDEzP77UTftVU.mft
Manifest number:          0AFD
Signing time:             Mon 06 May 2024 04:01:07 +0000
Manifest this update:     Mon 06 May 2024 04:01:07 +0000
Manifest next update:     Tue 07 May 2024 04:01:07 +0000
Files and hashes:         1: 4woGJCPcOdp8ziKDEzP77UTftVU.crl (hash: +Se476ZYtXOjOiG8I4KE/yA5TrBLGZMNLDXKg/E2zqY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/36775d-aaa1-4b94-9537-6963bd2b4430/1/4woGJCPcOdp8ziKDEzP77UTftVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/36775d-aaa1-4b94-9537-6963bd2b4430/1/4woGJCPcOdp8ziKDEzP77UTftVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4woGJCPcOdp8ziKDEzP77UTftVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:0f:fc:38:a2:95:99:80:22:4f:dc:df:b4:1e:d5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30a062423dc39da7cce22831333fbed44dfb555
        Validity
            Not Before: May  6 04:01:07 2024 GMT
            Not After : May  7 04:01:07 2024 GMT
        Subject: CN=346b70d66e2d105d618530f466682fcc370e644c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:57:79:92:5a:ee:97:55:a4:1f:2b:ac:fe:
                    aa:78:5e:f0:2b:dd:66:8a:f1:72:16:2d:c7:11:54:
                    d4:18:d1:28:31:ac:74:60:74:d5:22:b7:89:49:d2:
                    cf:8f:cb:57:cc:ea:43:38:a4:16:0d:09:a4:f3:fe:
                    e4:ef:5f:fd:49:af:28:46:4b:50:3f:46:b9:8f:75:
                    b1:9e:8a:88:68:d6:26:da:8c:58:c4:f8:1d:1b:40:
                    d7:3c:b3:2c:82:38:28:4d:33:4b:6f:10:0a:b9:db:
                    03:2c:fc:cc:84:c0:70:1e:33:d3:94:09:1d:49:75:
                    d0:2e:14:0b:e7:9d:c2:8d:dd:b0:f1:19:79:68:8c:
                    c7:b0:ac:36:ce:5a:be:ca:78:ef:06:3d:8b:b6:79:
                    a8:38:72:7f:3b:ed:be:e9:21:28:f7:e2:04:24:fb:
                    2c:90:7b:e2:5c:c6:63:a4:6d:ff:4b:0f:0e:92:a5:
                    f8:bb:5f:47:5c:55:41:09:6d:b0:67:00:c9:1d:96:
                    d5:7d:2a:df:84:52:e8:cb:36:27:ba:f3:94:a1:ec:
                    48:2f:9f:78:43:38:14:ad:03:cb:aa:42:a3:f0:69:
                    82:83:98:83:64:ca:05:2c:ad:0b:fb:8a:45:1a:ac:
                    43:5c:75:78:a9:10:87:8e:e4:59:17:f3:1d:cf:db:
                    43:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6B:70:D6:6E:2D:10:5D:61:85:30:F4:66:68:2F:CC:37:0E:64:4C
            X509v3 Authority Key Identifier:
                keyid:E3:0A:06:24:23:DC:39:DA:7C:CE:22:83:13:33:FB:ED:44:DF:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4woGJCPcOdp8ziKDEzP77UTftVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/36775d-aaa1-4b94-9537-6963bd2b4430/1/4woGJCPcOdp8ziKDEzP77UTftVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/36775d-aaa1-4b94-9537-6963bd2b4430/1/4woGJCPcOdp8ziKDEzP77UTftVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:19:35:ec:61:05:ea:9f:37:28:f3:0f:07:fd:4e:a4:27:7b:
         3d:5d:5e:84:78:35:68:6e:8c:32:f1:75:a2:5e:ad:2e:c6:2b:
         8d:07:07:4d:e5:f0:92:02:5a:47:84:34:38:84:c8:1f:e7:2e:
         00:51:31:51:cf:05:0e:e4:2b:d0:70:64:3a:70:b5:17:cc:8b:
         42:e6:27:59:0d:5f:0f:09:b5:ef:84:52:17:bf:45:8b:f8:90:
         ca:bd:a6:19:fe:dc:e7:f8:a8:e8:e0:7c:94:59:f7:ba:7c:08:
         3b:1d:43:88:a1:30:8a:65:c1:4f:2c:f5:a0:b2:1a:ca:75:eb:
         46:90:32:57:f4:73:c9:69:87:ee:f1:1e:60:a1:c7:49:b1:b1:
         11:57:3d:43:ef:90:91:82:40:58:db:cc:36:02:d4:5f:9b:0d:
         ee:d7:59:69:c9:47:72:05:ad:9d:af:a3:98:80:82:ae:8e:d7:
         67:a9:57:18:13:31:d5:f9:13:f3:6c:a7:e3:4b:b0:09:b2:9b:
         ab:4d:c2:ff:d6:bc:c6:43:57:60:a9:3c:bf:4c:77:c8:6b:1d:
         81:a8:28:8a:92:f2:ae:50:14:36:fc:7e:7f:b1:33:17:21:ae:
         b4:82:08:ac:5f:af:82:83:7c:96:15:de:cb:65:b0:4a:ed:28:
         4f:5d:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:30:37 2024 by rpki-client on console-fra.rpki-client.org