Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File:                     7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier:          oFgekMNQ8CefQMCxb+5sX5g5YkFGX2AbeiskZ1dqtps=
Subject key identifier:   4A:41:16:61:60:33:59:4F:7A:21:E1:7E:08:C7:19:29:87:47:EB:D2
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer:       /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial:       018F362E8057EE54C1F5CEB7E16E79340D2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number:          03C4
Signing time:             Wed 01 May 2024 22:02:48 +0000
Manifest this update:     Wed 01 May 2024 22:02:48 +0000
Manifest next update:     Thu 02 May 2024 22:02:48 +0000
Files and hashes:         1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: k5uJSg2cEeIV4rZFtgpQav2bsgjVYbjoYNLMcBk3i+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2e:80:57:ee:54:c1:f5:ce:b7:e1:6e:79:34:0d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
        Validity
            Not Before: May  1 22:02:48 2024 GMT
            Not After : May  2 22:02:48 2024 GMT
        Subject: CN=4a4116616033594f7a21e17e08c719298747ebd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:df:a0:70:63:54:99:05:ef:06:22:4c:f9:
                    9d:20:39:bc:60:cd:45:2c:74:04:4a:70:a9:2b:58:
                    d1:94:46:4b:f1:a4:df:30:d0:71:22:95:95:04:86:
                    8b:7e:c8:ac:c7:c8:c0:95:3c:c6:fe:4c:74:40:44:
                    3a:2d:f3:fd:f5:54:d1:4e:f5:f3:93:9c:0e:0d:85:
                    13:18:be:cc:03:50:4e:c0:9b:00:cb:42:98:62:ba:
                    fd:ed:c6:dd:7a:e4:3e:be:cc:45:c7:9d:b0:78:d5:
                    ba:e7:11:22:5e:63:ae:3f:60:ed:ba:0a:0e:80:e5:
                    02:2e:44:79:10:ee:5a:3d:9d:02:d5:9d:60:28:3a:
                    b0:90:16:e5:3b:5a:31:e8:9a:49:79:53:a5:e3:e4:
                    5c:ca:87:f7:d9:a0:30:74:b7:d7:ac:a1:ef:04:41:
                    c0:eb:03:db:77:bc:f1:be:32:73:8b:6e:a3:5b:9a:
                    d1:1d:6c:42:db:67:a2:5c:dc:0c:3a:c2:b0:d9:5a:
                    40:cc:7c:fa:04:d4:db:15:2c:4a:bb:58:dc:f5:5a:
                    58:6c:b5:0a:dc:be:6b:c4:9a:ad:db:e4:c0:51:13:
                    2d:98:95:43:9b:d3:5e:fc:64:dc:43:c7:ab:60:03:
                    d8:97:14:a0:70:4a:c4:3b:aa:f8:66:b8:94:f8:f9:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:41:16:61:60:33:59:4F:7A:21:E1:7E:08:C7:19:29:87:47:EB:D2
            X509v3 Authority Key Identifier:
                keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:03:d7:ee:07:92:e1:74:df:e4:cd:c3:12:dd:e1:8e:ca:35:
         34:4d:4b:d2:28:3c:28:ac:92:27:28:93:bd:49:fb:16:00:eb:
         71:ea:37:dd:a9:f4:58:30:7f:ab:e8:21:e9:9c:2d:0c:f9:c3:
         e6:56:4e:36:82:fa:ec:2d:56:52:81:0c:0a:54:70:cc:d0:50:
         2c:19:75:8c:78:91:fe:56:cc:b2:19:6b:18:8f:36:39:6a:be:
         f7:17:c8:f7:99:28:7d:4b:49:b7:bb:fc:79:28:34:29:3c:db:
         2c:49:5d:33:86:bb:53:3b:46:f1:36:bd:02:1e:d9:d1:e0:59:
         35:45:8e:68:03:ac:3a:31:d0:9a:1e:01:b4:81:e6:fd:fd:7e:
         c3:22:9d:01:d3:a8:dd:1c:99:6c:07:0e:d9:20:59:01:b6:1a:
         d6:9d:b0:04:d7:94:b2:67:12:90:67:ec:c7:b7:ed:8c:4d:63:
         37:fe:36:cd:f4:e1:fb:1e:8a:61:30:f3:23:19:c3:b1:48:f4:
         32:fa:93:55:86:68:4e:56:d3:67:12:09:33:ee:f5:d6:e2:58:
         f7:96:a1:8a:0f:19:ad:63:a8:81:8a:c1:f3:eb:95:4e:6e:49:
         a8:05:24:72:0f:b7:67:d3:dd:df:81:e4:af:34:6a:ac:87:7b:
         c3:ae:6e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:44:07 2024 by rpki-client on console-fra.rpki-client.org