Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8c1e3-4a84-4b39-a3a9-97a267c756b7/1/884jUQitVrDzUIAkc5kLZc0cRSg.mft
File:                     884jUQitVrDzUIAkc5kLZc0cRSg.mft (raw, json)
Hash identifier:          DVDdbj7g3YMWVaYVRHwFBT/Sqg4m3j3/zh2rDMCWUDk=
Subject key identifier:   47:C6:45:24:74:08:34:F7:B2:A6:E7:61:1F:C8:A2:60:07:02:7C:E8
Authority key identifier: F3:CE:23:51:08:AD:56:B0:F3:50:80:24:73:99:0B:65:CD:1C:45:28
Certificate issuer:       /CN=f3ce235108ad56b0f350802473990b65cd1c4528
Certificate serial:       018F863632DA6C0F97E61417F22986B6531B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/884jUQitVrDzUIAkc5kLZc0cRSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/f8c1e3-4a84-4b39-a3a9-97a267c756b7/1/884jUQitVrDzUIAkc5kLZc0cRSg.mft
Manifest number:          0337
Signing time:             Fri 17 May 2024 11:00:49 +0000
Manifest this update:     Fri 17 May 2024 11:00:49 +0000
Manifest next update:     Sat 18 May 2024 11:00:49 +0000
Files and hashes:         1: 884jUQitVrDzUIAkc5kLZc0cRSg.crl (hash: 3on4tACm9uUGP1wo72F5nWN01cMedvjJ0lgm2DV793s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/f8c1e3-4a84-4b39-a3a9-97a267c756b7/1/884jUQitVrDzUIAkc5kLZc0cRSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/f8c1e3-4a84-4b39-a3a9-97a267c756b7/1/884jUQitVrDzUIAkc5kLZc0cRSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/884jUQitVrDzUIAkc5kLZc0cRSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:32:da:6c:0f:97:e6:14:17:f2:29:86:b6:53:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ce235108ad56b0f350802473990b65cd1c4528
        Validity
            Not Before: May 17 11:00:49 2024 GMT
            Not After : May 18 11:00:49 2024 GMT
        Subject: CN=47c64524740834f7b2a6e7611fc8a26007027ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:51:56:35:b5:75:b9:35:dc:5e:d9:5c:b8:
                    fc:4a:25:28:eb:17:df:c1:a2:1f:e5:a4:a6:26:f9:
                    ed:0b:b9:63:a7:4a:75:58:e6:b4:28:d4:bd:c6:7c:
                    fd:d7:67:88:df:14:0e:4e:4d:a3:8f:8b:e0:c6:25:
                    2e:73:b8:00:cd:f2:85:63:05:53:6c:ff:84:58:c2:
                    35:8d:26:3d:54:79:88:6a:e4:27:2c:16:25:62:cd:
                    dc:1d:bb:59:3a:bd:0f:e8:a5:6d:79:ad:38:bc:d6:
                    48:d7:4d:07:b4:21:94:6d:2d:ab:be:df:29:8d:c9:
                    1d:c2:15:c5:66:43:4b:c9:d2:8b:ac:fc:64:a9:c4:
                    08:c0:25:43:c8:35:0b:95:c2:d2:41:38:4b:ec:2e:
                    bb:c8:4d:5b:fe:92:56:80:db:fb:7d:12:45:52:66:
                    70:08:8f:06:6c:52:f8:8d:6b:2e:f0:84:fb:71:1f:
                    d5:fb:cb:4d:dd:a5:c9:ff:44:a6:03:f4:b2:56:42:
                    43:12:f7:48:81:a9:59:0c:4b:9c:cc:10:f2:74:fd:
                    88:35:09:8e:e8:07:dd:19:ad:7a:57:cb:cc:75:34:
                    ed:80:00:e4:18:0b:71:70:e1:30:19:2f:23:5d:9c:
                    f5:99:2e:f9:42:20:b4:ff:66:3b:e0:17:da:ae:b2:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C6:45:24:74:08:34:F7:B2:A6:E7:61:1F:C8:A2:60:07:02:7C:E8
            X509v3 Authority Key Identifier:
                keyid:F3:CE:23:51:08:AD:56:B0:F3:50:80:24:73:99:0B:65:CD:1C:45:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/884jUQitVrDzUIAkc5kLZc0cRSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8c1e3-4a84-4b39-a3a9-97a267c756b7/1/884jUQitVrDzUIAkc5kLZc0cRSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8c1e3-4a84-4b39-a3a9-97a267c756b7/1/884jUQitVrDzUIAkc5kLZc0cRSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:17:50:5d:af:73:c8:4b:3c:87:f6:fc:b8:59:7c:16:e2:c8:
         74:a6:e5:04:13:fd:f7:c6:e6:a3:9c:b6:18:3a:3b:fd:f2:29:
         ab:a2:9c:85:3b:88:1a:a4:a1:bf:cb:ae:12:45:a9:ac:35:78:
         70:fc:be:85:fb:e8:be:2e:af:49:69:ac:9c:94:41:68:94:9e:
         6c:f6:a8:25:d7:b6:cc:2a:7c:73:ae:d3:47:25:fa:61:d5:f6:
         14:4e:32:da:28:2d:4e:08:bf:ca:3f:0c:8f:8a:17:39:eb:f3:
         f4:de:0c:a9:51:34:e8:a9:58:3f:5b:ca:72:0c:b0:17:f7:2a:
         ad:58:34:67:f5:e7:8e:06:fc:bb:08:2f:89:14:4d:b1:4b:49:
         d2:49:c4:c9:ef:97:e9:0d:f2:90:58:5e:06:e4:4f:7f:17:5e:
         54:d1:b0:27:2c:a1:34:a7:3e:76:f3:f9:2a:6f:8b:08:98:d5:
         02:20:2e:a2:ef:74:bb:9e:27:bf:71:e5:06:2c:af:89:4e:68:
         77:de:04:f2:7e:9c:56:bc:ed:f6:ee:7d:65:b8:e8:88:21:01:
         b4:1d:2b:a1:88:9c:40:a7:c3:ff:f0:25:f3:60:d7:f0:cf:27:
         06:85:bf:75:46:98:fb:11:cd:37:f3:3e:dd:a6:5a:f2:22:73:
         7d:fe:eb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:28 2024 by rpki-client on console-fra.rpki-client.org