Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
File:                     c5ojygLNDwflNvtppcC5vqDaYKU.mft (raw, json)
Hash identifier:          nfn7mQlInhfbSaxyReGisoxf3JmMe6bJ/EzFJey21Qk=
Subject key identifier:   42:F8:73:1D:83:9D:E0:7C:7A:38:C7:4F:1C:5A:92:CD:42:9C:7B:0C
Authority key identifier: 73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5
Certificate issuer:       /CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5
Certificate serial:       018F85C857793D1CB8BA82CDE5BF12B32AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
Manifest number:          046A
Signing time:             Fri 17 May 2024 09:00:50 +0000
Manifest this update:     Fri 17 May 2024 09:00:50 +0000
Manifest next update:     Sat 18 May 2024 09:00:50 +0000
Files and hashes:         1: c5ojygLNDwflNvtppcC5vqDaYKU.crl (hash: nrAlmrLBFhHW0ojlwJJSLwBHP8mCQ/wUIzpMsoyV4ns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:c8:57:79:3d:1c:b8:ba:82:cd:e5:bf:12:b3:2a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5
        Validity
            Not Before: May 17 09:00:50 2024 GMT
            Not After : May 18 09:00:50 2024 GMT
        Subject: CN=42f8731d839de07c7a38c74f1c5a92cd429c7b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ac:41:e3:84:ad:a0:31:db:67:55:86:a8:b7:
                    e1:19:ac:09:3c:13:2e:84:62:0e:c0:d6:5a:e2:2e:
                    7b:1e:63:77:bd:2c:65:84:08:cb:a9:57:95:63:3b:
                    64:e3:59:cf:ea:27:a7:89:a3:32:ee:9c:8c:58:fe:
                    1a:71:cf:eb:f4:bb:69:31:c9:6d:15:a2:d8:8a:dd:
                    a9:f7:83:60:67:ce:1a:02:ec:dc:f3:b7:b4:d6:f9:
                    c9:56:9c:31:df:76:1b:ee:c5:70:fe:71:ba:e1:79:
                    4f:b2:d9:f8:a6:cb:43:dd:75:84:a3:68:90:95:04:
                    b2:c7:42:cb:99:c0:87:ee:d0:3e:80:ab:09:56:01:
                    49:1c:a7:8b:7a:b6:85:26:c6:f4:dd:46:28:61:4b:
                    71:9d:32:c1:b0:28:49:d0:46:24:75:22:bc:bd:fd:
                    52:31:63:56:fd:4e:40:8a:50:64:39:2e:e7:af:b0:
                    c0:23:48:79:79:cc:8f:a2:51:3b:ba:6f:64:e9:21:
                    a6:b2:de:12:05:cb:b3:20:03:ad:40:43:6c:f5:d7:
                    45:e3:78:59:23:c5:20:f2:4c:8e:59:b1:63:ed:ee:
                    70:79:ce:cb:18:17:b7:f8:01:0e:c5:72:9e:95:00:
                    b0:bd:36:68:38:07:44:11:d3:92:0a:55:0d:52:5c:
                    8f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F8:73:1D:83:9D:E0:7C:7A:38:C7:4F:1C:5A:92:CD:42:9C:7B:0C
            X509v3 Authority Key Identifier:
                keyid:73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8d:94:00:2a:35:f9:30:27:74:51:83:33:1c:c7:cb:cc:57:
         0c:b7:c8:08:c8:c7:b0:a9:91:8f:5b:cd:7f:b4:63:2d:c9:4b:
         f6:a9:35:35:9c:ea:b5:14:2e:1c:11:b0:9b:74:db:7a:93:6b:
         de:0a:7c:4b:fd:2a:9a:ce:3e:52:a8:67:84:bc:95:4b:2e:57:
         2a:d0:21:64:cc:5b:c3:a0:62:50:72:9b:bb:52:07:a8:ae:ca:
         70:6a:56:60:8f:6c:0f:da:95:06:10:35:4e:31:4a:98:7f:ed:
         15:23:69:24:ba:7d:a8:ba:01:d2:c5:e1:1a:39:0d:6e:c6:61:
         68:23:5f:f8:15:ce:e5:02:4c:1e:c5:61:aa:7b:d3:5f:d0:7c:
         9d:c3:8f:96:28:eb:d6:7e:8a:76:f4:49:12:1c:d4:d5:dd:0c:
         6b:12:f6:35:76:56:d9:73:3b:72:db:e5:a3:6f:23:91:da:4a:
         e8:7d:65:7c:96:58:2f:ed:e6:3e:62:bb:be:03:c2:66:16:ba:
         a4:6e:06:d4:a1:41:97:06:93:01:e8:70:a4:91:fc:6e:c0:9a:
         20:fa:d0:08:18:58:c3:f1:0a:c5:01:9a:9c:74:8f:cd:76:97:
         9e:71:89:0b:22:9b:fd:bd:22:46:e7:42:b6:bc:33:f9:e8:a0:
         59:4f:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:15 2024 by rpki-client on console-fra.rpki-client.org