Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
File:                     r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json)
Hash identifier:          wwWOHzfgFQoFH0uRHGseBBvTHWJo2phZMg9MaCHay1Q=
Subject key identifier:   16:D8:4A:B2:98:F6:EC:EF:9A:9B:B4:FE:67:FB:0A:FC:10:70:CC:95
Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
Certificate issuer:       /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Certificate serial:       018F889240D9AF782215985018407A6739B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
Manifest number:          06CE
Signing time:             Fri 17 May 2024 22:00:37 +0000
Manifest this update:     Fri 17 May 2024 22:00:37 +0000
Manifest next update:     Sat 18 May 2024 22:00:37 +0000
Files and hashes:         1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: UF9G/87DCcFwI/GiTe4ElH6WaYptxQB4g4F0kKJ3zsc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:40:d9:af:78:22:15:98:50:18:40:7a:67:39:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
        Validity
            Not Before: May 17 22:00:37 2024 GMT
            Not After : May 18 22:00:37 2024 GMT
        Subject: CN=16d84ab298f6ecef9a9bb4fe67fb0afc1070cc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:60:ce:ec:66:77:cc:34:1d:10:bb:e3:09:
                    68:d0:eb:93:10:43:9e:81:cb:83:12:38:f4:f3:69:
                    c4:cf:20:f5:6b:86:d4:0d:b0:19:da:3b:b7:78:08:
                    11:c8:8e:99:e8:35:e5:15:d5:5b:a7:19:26:bf:a4:
                    8c:38:54:4b:40:9e:11:73:87:0c:6c:e4:0a:3f:56:
                    75:26:8d:a6:73:49:60:ad:d0:87:5b:dd:1f:b8:93:
                    cc:99:e0:e4:fe:2e:29:78:7b:ac:ef:10:d1:d8:65:
                    be:e2:0c:d6:67:06:af:69:9d:51:80:5e:a7:ca:2b:
                    2c:f9:db:4b:02:3a:f5:4d:11:1b:1a:17:7f:bd:a6:
                    e6:2e:25:2c:98:26:64:5d:0f:32:ad:b5:79:55:aa:
                    fe:f7:bc:3f:dc:ca:b2:a0:f1:bd:95:f1:ee:00:73:
                    cf:f4:af:df:56:0f:8b:c3:b4:74:34:bf:8f:47:8b:
                    47:1f:ee:a9:6f:ff:3a:38:8d:91:57:90:cf:a5:07:
                    b9:c0:6e:63:1d:93:da:66:1c:fd:86:9f:df:9a:5c:
                    ef:b3:6a:72:e9:7a:6c:db:41:85:80:fe:15:82:5e:
                    6c:40:19:ca:a3:02:d1:3a:b9:04:93:a8:f2:25:fe:
                    02:e2:c5:61:ab:39:43:1b:9c:6a:8c:ce:3c:e1:df:
                    e8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D8:4A:B2:98:F6:EC:EF:9A:9B:B4:FE:67:FB:0A:FC:10:70:CC:95
            X509v3 Authority Key Identifier:
                keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9d:1d:3d:20:71:e1:04:6f:54:76:20:4b:32:a7:12:40:20:
         ec:d2:18:10:15:10:c5:a5:2f:af:de:66:6b:ee:c1:c8:e9:f8:
         bb:a2:c2:71:28:ca:19:1a:28:2b:20:97:10:59:1a:01:9f:b9:
         cd:4c:db:83:c5:ed:de:57:3e:4d:44:79:94:19:aa:de:a4:a1:
         1d:26:a6:19:02:95:b1:f2:96:9c:e0:b0:7e:c4:0e:47:89:18:
         3d:f5:05:30:49:43:8c:36:8b:82:17:e9:28:c7:43:cf:13:64:
         5d:18:32:37:01:ef:13:94:dc:e1:29:e0:c7:71:1a:ef:f7:93:
         be:15:7d:16:52:6f:e6:5b:98:39:1a:b0:61:b7:51:62:ef:91:
         7c:57:82:99:43:d9:1b:06:9f:6c:60:33:34:06:d9:00:13:47:
         2a:6a:30:ca:7c:f6:df:a9:24:c2:98:77:c0:d5:9c:84:82:ec:
         70:62:2c:47:24:76:0a:4f:98:8f:e7:5c:78:9a:1c:49:71:65:
         8d:03:e9:49:ec:f1:e3:44:cb:30:de:39:bb:c1:08:9a:fc:b7:
         70:c1:82:c4:ec:f5:69:76:5c:c0:36:02:48:4d:c8:69:ff:ec:
         a3:37:68:eb:b5:bb:62:ac:46:ed:51:a3:64:fb:95:3f:c4:89:
         ba:57:16:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:40:50 2024 by rpki-client on console-fra.rpki-client.org