Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File:                     vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier:          crYSe5VXy94SqBgXkC3TKMYK1RAn9xWnXPMcW1kWHqU=
Subject key identifier:   29:5C:DA:A2:F4:2E:1E:D9:E1:B5:31:C5:FE:04:0B:54:D3:B2:35:B2
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer:       /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial:       018F86A4116359BACED98162DE6889EE79AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number:          07CC
Signing time:             Fri 17 May 2024 13:00:50 +0000
Manifest this update:     Fri 17 May 2024 13:00:50 +0000
Manifest next update:     Sat 18 May 2024 13:00:50 +0000
Files and hashes:         1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: KHcHIut/2mjSe/ch1UK5FQNFMzZEvQnZNfauwB6KoTg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:11:63:59:ba:ce:d9:81:62:de:68:89:ee:79:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
        Validity
            Not Before: May 17 13:00:50 2024 GMT
            Not After : May 18 13:00:50 2024 GMT
        Subject: CN=295cdaa2f42e1ed9e1b531c5fe040b54d3b235b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:31:c8:bb:84:30:b2:b4:4e:ad:3d:f1:5f:
                    fe:3b:8f:91:0e:e9:68:c8:2c:46:1f:fd:93:68:9d:
                    2e:79:ac:b0:49:b8:51:fd:7d:fd:db:e3:c2:ee:06:
                    e6:fa:50:1d:5b:4a:02:69:e8:2f:78:ab:4b:4d:b7:
                    3c:52:ab:12:69:f1:b8:04:25:89:13:c3:9f:1d:dd:
                    53:8e:ca:ec:15:58:a0:ab:37:7a:dc:e2:4c:6d:8e:
                    28:26:fd:fe:62:44:fa:45:21:6e:a9:0f:85:2a:82:
                    0c:c1:ac:c4:03:ce:c9:e1:a5:fe:76:db:88:b2:5a:
                    5e:98:dd:09:e2:68:e9:ad:57:44:4a:ea:42:2c:c6:
                    c1:4a:f5:7f:57:aa:24:9b:f7:a8:20:ae:67:37:b5:
                    2f:c7:5d:72:f2:74:d1:49:d9:00:17:31:12:a9:98:
                    cf:40:42:d8:d2:99:8e:a9:c4:18:b1:ff:61:0e:0e:
                    28:4d:2a:43:45:c6:9c:7a:bd:1a:9c:28:58:c1:d9:
                    e6:63:cc:c0:56:ca:70:3b:b5:2f:71:95:44:02:5b:
                    74:0e:2e:11:b9:6a:6e:86:86:6c:8e:05:e3:4e:5b:
                    cf:45:7b:8a:d6:fd:22:a7:56:50:80:2e:bb:98:7d:
                    54:f9:2c:5b:99:66:9f:18:25:55:2f:39:0a:8d:0c:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:DA:A2:F4:2E:1E:D9:E1:B5:31:C5:FE:04:0B:54:D3:B2:35:B2
            X509v3 Authority Key Identifier:
                keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b5:43:7a:63:5d:53:f3:02:66:76:ab:12:79:31:44:76:49:
         45:48:ad:ec:59:93:1c:77:9b:e7:b8:d1:b1:91:87:c2:3b:e9:
         0e:c7:8b:08:72:ea:8d:86:9d:77:a8:94:40:8c:36:2f:e1:eb:
         70:68:8e:e0:da:d1:74:1b:da:0c:98:85:e3:13:21:75:7f:47:
         07:7e:7d:4e:c2:ff:34:7e:4a:df:b9:0d:8a:6d:9b:8e:4e:c8:
         4f:65:0a:ef:09:9f:eb:c4:78:86:8b:36:a6:39:4b:6b:d4:70:
         dc:c6:f0:80:fe:5f:39:51:79:32:84:b2:0a:5a:fd:c3:e8:9a:
         c1:07:e4:c3:58:29:f6:45:aa:d6:8b:cd:7d:de:cd:e0:96:ad:
         f5:44:1a:ed:63:80:4c:63:22:cb:a6:bc:54:3f:54:6f:19:cf:
         08:90:68:ef:43:dc:a7:20:a6:fc:7a:ea:a4:18:b1:6c:34:b1:
         08:07:ca:d3:cd:9a:c7:88:f5:b8:3e:fa:6d:71:3d:2d:8d:3a:
         9b:7a:6e:28:a8:18:50:25:e7:05:8e:e0:d5:d6:9b:ab:7b:59:
         77:19:de:ea:30:95:c9:63:83:52:3d:57:0d:75:95:cd:14:c3:
         56:e7:f4:17:04:e2:36:40:cf:dc:44:85:32:c8:11:e0:d2:01:
         a3:4e:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:09 2024 by rpki-client on console-fra.rpki-client.org