Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
File:                     3kK6kvCUZ8GIi16eNEiVB0SweYE.mft (raw, json)
Hash identifier:          6yuQ04t0GL/FxeidoTSTmT2KTDWLc1MH5k+mEqBDN40=
Subject key identifier:   02:91:DF:88:C9:B6:C8:71:7B:B1:7B:1F:65:4E:49:44:67:5E:BB:55
Authority key identifier: DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
Certificate issuer:       /CN=de42ba92f09467c1888b5e9e3448950744b07981
Certificate serial:       018F4B6DA0922CD1AC6673A522092708B2FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
Manifest number:          0BC8
Signing time:             Mon 06 May 2024 01:03:46 +0000
Manifest this update:     Mon 06 May 2024 01:03:46 +0000
Manifest next update:     Tue 07 May 2024 01:03:46 +0000
Files and hashes:         1: 3kK6kvCUZ8GIi16eNEiVB0SweYE.crl (hash: 74q2Tr/wfK7LvJj9mn7UEbtm9JH8h25vXaw5SNPS9os=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:a0:92:2c:d1:ac:66:73:a5:22:09:27:08:b2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de42ba92f09467c1888b5e9e3448950744b07981
        Validity
            Not Before: May  6 01:03:46 2024 GMT
            Not After : May  7 01:03:46 2024 GMT
        Subject: CN=0291df88c9b6c8717bb17b1f654e4944675ebb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e7:20:d2:1d:19:04:0e:52:d5:d6:2d:5d:f3:
                    66:7f:8f:64:a6:c9:7d:48:d9:a8:4d:29:a2:bf:16:
                    5a:2b:f9:39:ad:c4:91:78:3b:03:f2:f2:0c:f3:bf:
                    ff:b8:c8:9b:7a:50:b7:1a:77:27:58:37:7a:84:50:
                    a1:a1:d0:1c:0e:9f:21:55:75:25:cc:a8:2d:bb:1c:
                    bc:29:e7:ce:d1:b7:3a:e4:82:b6:6c:a4:42:a5:68:
                    1e:a5:4f:ca:db:95:7f:eb:e1:ab:a3:c2:f0:d2:d7:
                    99:5c:b3:a0:e6:66:1a:10:ca:75:dd:cf:37:f6:e0:
                    5b:53:7e:d6:48:a6:94:a7:0b:b7:47:eb:22:bf:76:
                    7f:a1:4a:e7:0c:fc:12:c2:78:6c:5a:17:1b:3a:47:
                    d7:60:f8:22:b7:a8:cc:9a:ca:d8:54:bb:a7:a0:31:
                    70:cd:1a:d8:a2:fe:da:e8:fe:6e:60:f3:a1:3b:47:
                    1e:8b:18:28:f6:5c:37:4a:5a:b2:f5:f9:f1:55:53:
                    84:31:63:e5:98:9c:fb:0d:15:85:03:fb:b3:1a:e7:
                    0f:31:a8:18:9e:a8:fd:90:6a:59:0c:d1:b8:26:5b:
                    9f:61:aa:57:6a:aa:a4:ee:2c:0e:62:7c:97:a0:b8:
                    f5:58:3c:1c:b7:c8:e0:99:97:45:ed:4b:26:90:e2:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:91:DF:88:C9:B6:C8:71:7B:B1:7B:1F:65:4E:49:44:67:5E:BB:55
            X509v3 Authority Key Identifier:
                keyid:DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:56:57:f2:9f:5e:f9:dd:be:79:c2:cf:7d:5e:c2:18:f0:
         f2:0e:d6:5b:92:07:5d:aa:98:c4:e9:d8:0b:a3:f2:e1:c4:41:
         29:e7:25:f3:03:8c:e2:84:7c:ce:42:b7:37:16:af:38:05:95:
         2c:df:07:47:84:d0:9e:32:93:b0:4b:52:6a:a6:f6:e1:08:f4:
         30:c9:72:e9:98:95:43:75:65:02:74:5c:36:3a:6f:6e:f3:b3:
         4b:d0:b8:db:25:c8:a9:05:f5:d7:06:64:02:72:17:10:7f:88:
         e2:17:f7:de:76:4d:98:45:7e:07:2f:fa:ac:4b:02:1b:2f:a8:
         82:90:83:cc:5b:02:2d:c0:91:6c:73:6f:3b:e7:80:12:6e:76:
         f7:21:d3:8e:e7:e8:b9:9c:05:e6:e3:0e:a9:e8:e5:80:c2:1c:
         b7:e0:c1:3e:4a:57:84:af:44:98:8a:1a:df:bf:e7:d6:1b:81:
         74:01:a9:f6:78:f6:79:c3:39:99:1d:9f:a7:6b:58:5d:20:d7:
         bd:98:8f:6b:90:40:cb:5a:4b:71:76:e3:d0:14:05:ea:c2:38:
         7d:3b:be:02:d1:ce:46:a4:f4:7a:3d:e1:d1:9c:36:af:90:89:
         74:0f:be:15:bc:42:28:8f:6a:89:ec:1e:44:66:20:91:ba:a5:
         2b:49:77:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:33:41 2024 by rpki-client on console-fra.rpki-client.org