Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File:                     1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier:          T4I89W6VQP0BdES2ZQfxLKAmJ1AC2uJZjKK50qTWfbo=
Subject key identifier:   20:A1:6D:18:B7:60:56:71:78:A2:C1:6A:FD:AA:B5:AA:3E:58:4D:2F
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer:       /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial:       018F41C510CA1D579A7C8CC8D5A13C55F847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number:          0CD2
Signing time:             Sat 04 May 2024 04:03:04 +0000
Manifest this update:     Sat 04 May 2024 04:03:04 +0000
Manifest next update:     Sun 05 May 2024 04:03:04 +0000
Files and hashes:         1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: V1PbRWjpsqxwSn//iVBHe2lMYDBbFTB9AYv7I0SK9vI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c5:10:ca:1d:57:9a:7c:8c:c8:d5:a1:3c:55:f8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
        Validity
            Not Before: May  4 04:03:04 2024 GMT
            Not After : May  5 04:03:04 2024 GMT
        Subject: CN=20a16d18b760567178a2c16afdaab5aa3e584d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:83:5f:54:a8:dd:7f:fd:df:6a:4b:d2:4c:e6:
                    15:b1:52:2f:b9:34:27:d9:17:7a:a9:fd:50:dd:d7:
                    f2:09:55:7b:9b:2e:ff:9d:c5:56:60:e7:fd:22:2f:
                    7c:7a:16:cd:f7:6e:dd:7e:0a:da:92:78:47:c6:5b:
                    d2:8d:54:9d:d1:aa:04:39:1d:44:73:ec:ee:6d:06:
                    05:72:ca:26:f2:03:b4:52:40:fd:5f:17:8e:83:68:
                    cc:8e:6a:92:58:70:ff:e9:23:0a:1d:9b:fc:39:73:
                    27:ef:91:40:11:d0:f5:38:33:6d:8a:24:27:b1:5d:
                    2c:a7:3f:95:e5:f7:aa:4d:77:bb:2e:48:c3:f1:66:
                    5b:b5:77:8c:6e:58:2a:15:02:1e:db:14:bf:f4:a0:
                    88:1e:60:d1:a2:97:b1:80:eb:c8:44:c7:32:30:83:
                    c0:a4:eb:e3:d0:96:6c:3a:56:4d:45:04:c2:f1:e6:
                    28:9a:36:8e:c0:63:b9:21:20:40:bb:f3:89:1d:4d:
                    80:35:04:fa:ad:b7:3c:61:14:6c:0f:05:de:ec:53:
                    7d:08:ba:a2:f4:f4:86:43:02:02:95:83:8b:27:ff:
                    0f:bc:60:62:e8:ac:dc:47:bc:eb:cc:ec:f3:66:cb:
                    2d:bf:1d:35:42:fe:da:b2:ee:2e:01:d0:45:04:50:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A1:6D:18:B7:60:56:71:78:A2:C1:6A:FD:AA:B5:AA:3E:58:4D:2F
            X509v3 Authority Key Identifier:
                keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:bd:db:69:2f:e9:19:6c:a9:36:a1:31:70:1d:4b:0d:4b:5c:
         59:ba:03:a5:dc:12:41:45:a2:96:2a:9f:f2:1e:c6:5c:3f:30:
         03:34:3e:98:8b:eb:f2:b9:a0:c8:76:ad:fa:b6:fe:0b:23:39:
         ef:48:15:e5:00:ed:d0:1a:7d:ee:d0:14:6b:30:e2:2c:e2:de:
         49:90:61:fd:e3:a2:39:5b:07:98:fc:9c:e2:ac:dc:9e:8f:82:
         8b:c8:10:9a:5b:f5:7c:a0:d5:09:18:f3:35:fd:9b:02:c2:78:
         75:98:dd:0e:fb:57:f5:b2:6b:ea:59:dd:48:55:f6:39:65:6c:
         80:cd:a1:56:77:1e:a4:81:b9:96:35:3b:27:7c:70:59:34:48:
         ec:0b:86:07:24:c5:32:5a:09:74:21:cf:d7:c1:51:f6:5d:c7:
         73:d3:5d:38:9d:a1:8c:3b:38:48:3f:02:e5:8a:e0:34:71:05:
         8f:5a:bf:d6:35:75:72:41:e5:bd:10:a5:fe:3b:7b:0b:1e:12:
         43:9c:1c:c9:35:d0:2c:ce:32:77:9d:36:bc:84:53:3f:04:55:
         68:44:d5:43:08:8d:85:5b:5f:97:69:67:e1:13:e2:52:4f:ef:
         0f:d3:7e:26:b0:db:0a:66:ac:d3:ba:b9:73:83:a0:62:6b:50:
         28:ae:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:43:53 2024 by rpki-client on console-ams.rpki-client.org