Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77faf5-ee05-40ee-a49f-f33753748951/1/eCoJqDzjmTOS8pNE74Q7cIqQYoM.mft
File:                     eCoJqDzjmTOS8pNE74Q7cIqQYoM.mft (raw, json)
Hash identifier:          aicqcP7rciUULeTOCUnM9ftfn58pKbP7iIq1r8yYTZY=
Subject key identifier:   A2:8F:A5:CC:42:8F:61:97:C1:E4:AB:A7:9C:C0:99:48:C1:92:A7:F2
Authority key identifier: 78:2A:09:A8:3C:E3:99:33:92:F2:93:44:EF:84:3B:70:8A:90:62:83
Certificate issuer:       /CN=782a09a83ce3993392f29344ef843b708a906283
Certificate serial:       018F96BB599E3114ED335B368D97C0C805A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCoJqDzjmTOS8pNE74Q7cIqQYoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/77faf5-ee05-40ee-a49f-f33753748951/1/eCoJqDzjmTOS8pNE74Q7cIqQYoM.mft
Manifest number:          02FB
Signing time:             Mon 20 May 2024 16:00:11 +0000
Manifest this update:     Mon 20 May 2024 16:00:11 +0000
Manifest next update:     Tue 21 May 2024 16:00:11 +0000
Files and hashes:         1: eCoJqDzjmTOS8pNE74Q7cIqQYoM.crl (hash: e5ML4OI42c3IM4vHHmFRnrIpyQB11RJhsFCoAwsZLR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/77faf5-ee05-40ee-a49f-f33753748951/1/eCoJqDzjmTOS8pNE74Q7cIqQYoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/77faf5-ee05-40ee-a49f-f33753748951/1/eCoJqDzjmTOS8pNE74Q7cIqQYoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eCoJqDzjmTOS8pNE74Q7cIqQYoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bb:59:9e:31:14:ed:33:5b:36:8d:97:c0:c8:05:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782a09a83ce3993392f29344ef843b708a906283
        Validity
            Not Before: May 20 16:00:11 2024 GMT
            Not After : May 21 16:00:11 2024 GMT
        Subject: CN=a28fa5cc428f6197c1e4aba79cc09948c192a7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:51:f3:ca:51:08:b9:cc:67:f9:51:1c:ea:
                    b0:a8:b2:97:22:7e:fc:09:0c:5e:c8:61:39:27:ec:
                    d0:47:6d:d8:24:a3:7d:02:24:4f:d4:69:84:ca:82:
                    e2:17:49:20:bb:22:64:a6:1c:6c:9b:e6:9d:c5:e1:
                    35:01:38:0b:e8:46:19:01:80:35:a0:3d:cf:ac:2a:
                    fb:dd:ee:95:6e:29:9e:a6:6b:3c:89:d3:06:19:12:
                    92:54:d8:dd:a2:f5:6c:fc:6f:2b:1d:15:68:88:79:
                    39:ae:46:df:74:ec:0c:fc:96:f5:64:ca:42:db:6b:
                    aa:ed:fb:f6:72:2c:3f:c8:1b:79:09:40:de:ac:5e:
                    25:b4:a7:de:7f:c9:8c:1e:69:e5:82:52:a3:ab:62:
                    81:79:38:ec:73:30:3a:06:fd:ac:8c:a3:9c:6c:e8:
                    b3:56:c6:0b:ee:01:ba:15:54:3c:cc:99:8e:93:cb:
                    09:81:3a:b1:35:1d:4a:83:25:58:ae:ea:cf:04:44:
                    4c:5c:05:a3:8c:b8:20:b0:64:29:3a:8a:12:11:98:
                    d2:cc:27:de:2b:ca:10:4b:e6:98:80:88:53:a0:f6:
                    be:77:be:ac:0a:37:22:a7:7d:d5:6a:40:ab:5e:5f:
                    82:21:57:04:c9:4e:ca:d4:d9:36:55:de:3d:43:9b:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8F:A5:CC:42:8F:61:97:C1:E4:AB:A7:9C:C0:99:48:C1:92:A7:F2
            X509v3 Authority Key Identifier:
                keyid:78:2A:09:A8:3C:E3:99:33:92:F2:93:44:EF:84:3B:70:8A:90:62:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCoJqDzjmTOS8pNE74Q7cIqQYoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77faf5-ee05-40ee-a49f-f33753748951/1/eCoJqDzjmTOS8pNE74Q7cIqQYoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77faf5-ee05-40ee-a49f-f33753748951/1/eCoJqDzjmTOS8pNE74Q7cIqQYoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:02:69:f8:67:04:5f:2f:bd:37:ef:dc:87:ca:0f:ae:ad:53:
         be:71:82:86:1d:af:38:69:0f:c4:e1:e3:8d:60:e6:ff:2c:13:
         26:11:d9:fe:26:4f:f4:18:5a:3d:7e:c2:60:f0:61:3e:73:68:
         18:17:4a:dc:00:28:51:7f:c3:46:e7:b6:52:b6:f8:73:42:1d:
         a5:da:17:6a:9b:5d:df:33:b1:3d:41:20:b7:e3:b5:a2:f0:4f:
         b6:1f:85:f7:80:31:01:c8:00:a4:aa:ee:ba:3e:8b:b7:70:fa:
         68:f7:68:8f:32:14:41:c8:6f:2d:60:5c:9f:c3:54:49:6b:6f:
         9e:e3:72:25:79:6b:71:c9:f7:32:89:dc:c1:3a:e6:33:76:16:
         e5:d4:d4:8a:43:51:ea:52:69:80:81:f8:5e:cd:3b:e1:cf:e3:
         d3:75:8e:65:52:8d:d4:f3:d4:76:5e:58:9d:f2:57:fe:e3:f5:
         ca:fa:7f:a4:a7:6e:3b:b4:1d:3f:ec:85:91:5c:7a:90:c5:1d:
         10:bd:aa:03:5b:63:ce:cb:1e:fb:78:f4:73:53:a4:52:0c:fc:
         5f:c1:c6:36:a5:88:85:e0:6e:ab:0b:22:aa:12:7c:5d:1d:05:
         e2:b8:42:43:2b:a3:d6:33:ec:29:13:53:2d:11:33:5f:f8:49:
         5c:f6:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:15:16 2024 by rpki-client on console-fra.rpki-client.org