Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
File:                     XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json)
Hash identifier:          mSGbzBwOh7QdXlINb97WPQmnWFSzQoIZYO8qGigtqo0=
Subject key identifier:   61:34:BB:25:42:44:78:AC:BA:A2:1D:33:29:D9:6B:0F:2F:D0:47:18
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Certificate issuer:       /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial:       018F96BD654E53C06862EDC675924E1FEB83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
Manifest number:          0F2A
Signing time:             Mon 20 May 2024 16:02:25 +0000
Manifest this update:     Mon 20 May 2024 16:02:25 +0000
Manifest next update:     Tue 21 May 2024 16:02:25 +0000
Files and hashes:         1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: bGkfLv8hRwPyeusrBKuLsoMCUTpE0H+IiNvKMAtf4j0=)
                          2: xznBK4Ufz1GkTQ5VLhlpbsocvnA.roa (hash: MMiCgfXzRAf7K1FCFJn/e98o/tQg4auDDHhS6ZgjRc4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:65:4e:53:c0:68:62:ed:c6:75:92:4e:1f:eb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
        Validity
            Not Before: May 20 16:02:25 2024 GMT
            Not After : May 21 16:02:25 2024 GMT
        Subject: CN=6134bb25424478acbaa21d3329d96b0f2fd04718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:56:43:ca:7f:6f:f5:d4:d9:d4:a5:4e:34:
                    c1:17:7c:6e:84:cf:7f:52:47:cb:29:81:24:25:45:
                    be:c2:41:12:d4:29:e3:3f:7a:ee:8b:0d:79:69:c0:
                    53:d4:b1:34:23:36:ed:06:7c:ed:80:a2:95:96:3e:
                    4d:ce:34:39:66:99:f4:a3:76:04:69:d0:8e:e8:ab:
                    8e:33:ce:a5:69:a5:e2:95:7f:a8:fc:b3:bd:8c:ca:
                    5c:a7:cb:3d:2d:a9:84:6e:93:89:88:67:92:86:b6:
                    d1:51:ca:3c:91:f2:4b:b3:c2:c9:ba:c6:21:13:63:
                    82:2b:6b:cd:19:10:bd:fd:01:04:15:d0:88:95:e4:
                    b6:d4:65:8e:81:25:a9:b7:d8:04:f5:c9:95:29:c6:
                    1f:96:f0:d2:86:51:78:de:d6:ec:19:e1:35:f0:81:
                    bd:9d:72:0c:22:85:c8:07:c3:fb:05:a9:04:49:d6:
                    bb:72:e6:2a:06:eb:69:81:ea:ee:e0:f2:b7:4c:49:
                    2f:c5:52:74:d3:0b:fd:e4:5e:27:b9:08:ff:b2:b5:
                    52:40:aa:02:eb:cb:6e:f7:b1:7a:25:0d:be:fe:9e:
                    62:3a:ed:72:8f:a6:1c:34:3e:c3:b5:13:da:e6:5a:
                    91:d1:59:42:0e:b2:f9:42:c2:bf:5a:0c:f7:2c:e1:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:34:BB:25:42:44:78:AC:BA:A2:1D:33:29:D9:6B:0F:2F:D0:47:18
            X509v3 Authority Key Identifier:
                keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:39:00:10:9a:15:bd:86:1c:71:f7:67:46:70:58:f3:5b:33:
         b8:9e:98:f1:d5:53:40:3e:b5:2a:9b:46:e7:15:a0:ab:02:f4:
         03:8f:5d:51:b7:6f:2f:e1:e9:a9:82:59:fb:be:51:c0:e3:4c:
         a5:e1:f7:a8:f5:5e:7f:78:56:cb:c1:e8:20:9c:45:7e:76:44:
         0a:31:9b:43:f2:be:30:f1:49:86:a5:ba:71:60:d2:f2:9f:fc:
         8e:63:e7:3d:1d:2f:a0:81:b9:64:a6:0a:54:b2:d0:f7:e9:b7:
         55:34:e4:19:8b:b9:d8:4a:5f:3a:3c:8c:86:c0:52:6b:b6:b4:
         f2:f7:46:97:92:d0:12:d4:96:d7:75:e9:e2:34:07:71:d4:86:
         a1:74:59:0a:ef:a9:81:9a:5a:57:f1:be:63:ac:e1:fe:5d:58:
         b7:c1:5d:bf:e1:5b:1f:da:9e:1c:fb:67:7a:c1:41:95:29:c3:
         01:b5:21:f1:b2:9b:b0:20:9f:65:90:9a:69:4b:17:7d:da:6d:
         db:c3:b5:a6:f5:d1:23:d0:ec:aa:9a:99:96:41:e0:08:5e:8c:
         15:0a:13:f4:73:6c:82:dc:21:00:96:71:0e:78:e0:9e:8d:bf:
         3c:39:04:15:73:e8:d1:3e:59:19:d0:3b:76:ec:9a:0b:80:96:
         98:01:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:44:46 2024 by rpki-client on console-fra.rpki-client.org