Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
File:                     3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft (raw, json)
Hash identifier:          Ipfg9bBk5UZVMltSvewLdx4uFv4c6y+oSEwC1QmSlXw=
Subject key identifier:   C8:04:20:51:5D:F1:79:15:27:F8:57:1D:AC:7C:19:31:23:0B:B0:34
Authority key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
Certificate issuer:       /CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Certificate serial:       018F49EB13F5DA368A2E18EBD954DAB87519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
Manifest number:          08BB
Signing time:             Sun 05 May 2024 18:01:33 +0000
Manifest this update:     Sun 05 May 2024 18:01:33 +0000
Manifest next update:     Mon 06 May 2024 18:01:33 +0000
Files and hashes:         1: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl (hash: vIgES2ppMJReBqqQEGXWDWn/0/eKTjqw1bvWbMjqkG4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:eb:13:f5:da:36:8a:2e:18:eb:d9:54:da:b8:75:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de11cc6df13366fc595a6e72ed03c53800792b4b
        Validity
            Not Before: May  5 18:01:33 2024 GMT
            Not After : May  6 18:01:33 2024 GMT
        Subject: CN=c80420515df1791527f8571dac7c1931230bb034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:7b:ac:f1:91:4d:8e:43:d9:70:94:88:a8:
                    60:ee:58:c6:f5:91:1e:03:65:62:29:6d:ba:38:b1:
                    a8:54:c8:5e:40:be:11:3d:f5:3f:c4:a9:2e:07:bc:
                    38:3a:0f:30:09:6c:82:c4:70:f6:f2:c3:5d:8b:a8:
                    4d:1f:53:93:79:d8:c4:32:3d:37:6f:65:d5:a3:77:
                    fa:1c:f3:ad:9f:9c:66:e9:62:70:a8:df:30:c0:b8:
                    85:46:6e:02:f6:f5:51:a4:29:56:02:83:a1:7b:24:
                    a0:55:f8:a6:03:ac:9e:a7:af:47:56:2c:f5:be:f8:
                    8b:28:f9:98:ea:45:b1:a1:96:3c:1d:b1:8a:09:47:
                    54:8a:31:98:d7:99:0c:d4:48:aa:2e:fc:96:04:fd:
                    b0:ef:e6:fa:68:e7:79:b4:a5:6c:53:ae:d0:9a:c5:
                    5a:e7:55:d7:02:86:08:71:76:ff:58:c6:5b:b8:e7:
                    16:e3:01:a8:f0:f9:31:6b:ad:e3:8f:be:4b:83:ea:
                    b3:ea:3f:e4:c7:28:12:b3:d0:00:76:ae:ad:eb:59:
                    40:ab:78:b5:09:70:d2:f4:2c:3b:60:2f:7a:57:70:
                    9d:72:71:8c:70:c3:d7:70:7e:85:ce:ed:0c:f1:0a:
                    fb:9e:63:42:63:d2:b3:24:69:95:fe:36:8f:90:7d:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:04:20:51:5D:F1:79:15:27:F8:57:1D:AC:7C:19:31:23:0B:B0:34
            X509v3 Authority Key Identifier:
                keyid:DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:84:db:7e:ff:e1:a8:84:22:c6:7d:dc:2d:f9:7d:68:a8:01:
         bf:27:e8:de:6a:4a:e2:79:8a:6a:70:b3:96:e1:e8:21:ae:c8:
         0c:34:93:6c:88:20:f4:dd:46:91:29:bd:fe:a9:e3:1b:37:c2:
         d0:80:aa:23:26:e3:0e:cd:88:f4:4b:34:5e:ce:ce:9e:02:3c:
         ae:63:0f:98:8b:cb:9f:cf:3e:df:45:ec:54:f6:0b:cf:4e:9b:
         ce:01:5f:e9:15:69:b6:60:c9:16:94:2a:d6:64:64:56:7e:21:
         70:ab:55:e3:5c:e2:5e:5f:43:7c:f9:43:23:e4:f0:0c:c2:a6:
         b8:29:24:29:55:de:69:6c:cb:bc:81:e7:85:53:25:01:d0:4e:
         1c:ef:cc:91:8e:df:c4:cc:f0:94:32:e3:23:c5:18:1e:43:4c:
         3b:f4:11:75:0f:68:a5:5e:57:13:7b:c7:b6:4a:f8:ea:97:94:
         aa:26:a4:ea:c7:4b:f3:04:b9:2f:9b:73:67:cb:d7:4c:f7:7c:
         71:b0:29:76:a2:f4:ff:c5:7a:08:0d:2e:6f:b8:ee:c8:8a:c0:
         dc:0b:e0:e0:62:d3:30:c3:78:b4:ff:7e:52:a0:3e:0b:16:97:
         9f:7f:46:de:78:36:3c:29:2c:ec:10:07:19:56:d7:50:7f:c4:
         ea:40:35:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:03:22 2024 by rpki-client on console-ams.rpki-client.org