Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
File:                     078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json)
Hash identifier:          2QdLxYMgcZr6I54l1LhvqlwOyLWwENLsGs5uGqsA0Q0=
Subject key identifier:   3A:D0:39:47:26:92:2F:CB:FB:A5:CC:FA:D7:73:27:C5:B4:F4:8F:AC
Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12
Certificate issuer:       /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
Certificate serial:       018F46E9910F04F2A3D1984A1985F7CB8367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
Manifest number:          0BDF
Signing time:             Sun 05 May 2024 04:01:03 +0000
Manifest this update:     Sun 05 May 2024 04:01:03 +0000
Manifest next update:     Mon 06 May 2024 04:01:03 +0000
Files and hashes:         1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: A+4RbJgVWN6e44+XgJwRVbrbtUZ64Jkhm8quS718+xA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:e9:91:0f:04:f2:a3:d1:98:4a:19:85:f7:cb:83:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
        Validity
            Not Before: May  5 04:01:03 2024 GMT
            Not After : May  6 04:01:03 2024 GMT
        Subject: CN=3ad0394726922fcbfba5ccfad77327c5b4f48fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:11:40:5e:97:38:5d:50:bb:35:55:e0:00:
                    85:92:87:d9:f5:6a:7a:c7:91:ec:fd:7c:e3:b7:44:
                    63:70:20:c9:f4:89:a7:48:b3:5f:ae:a3:62:0a:06:
                    ca:ba:a9:82:d8:c8:e5:00:76:61:cc:36:ad:88:ba:
                    51:af:b4:6c:9c:cb:96:3f:90:17:34:79:dd:3c:01:
                    bc:c1:09:2f:ea:a6:14:dc:21:0b:7a:c3:17:00:92:
                    9f:78:1d:15:ee:0b:6f:5d:c0:af:71:2c:c1:16:42:
                    a5:ee:cb:e9:32:de:78:ff:ab:08:71:b5:df:aa:ea:
                    2c:a4:36:40:36:14:a0:84:4b:c2:cf:d3:0e:c9:ba:
                    24:27:9e:8d:48:6a:10:8d:88:b7:4a:7d:c7:fd:6a:
                    a2:30:06:9c:9e:f1:d4:08:42:2d:2a:f0:8f:9b:aa:
                    fb:c1:5d:e8:5e:e1:cb:77:42:73:3d:03:37:06:4b:
                    f0:8d:0d:1a:66:8a:10:80:4f:79:db:b7:7e:41:7f:
                    6c:99:d7:91:1d:5f:e7:bb:a6:12:32:8b:88:65:72:
                    4f:24:05:e7:68:72:5b:2f:86:7c:40:bc:0b:0d:15:
                    2f:10:bf:a7:30:da:57:cb:5a:6a:86:7d:f8:7d:df:
                    b7:3f:84:94:28:47:33:49:df:12:cb:79:68:a8:c8:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D0:39:47:26:92:2F:CB:FB:A5:CC:FA:D7:73:27:C5:B4:F4:8F:AC
            X509v3 Authority Key Identifier:
                keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:20:e9:35:82:44:ab:a3:38:1b:53:c7:ff:53:31:43:1e:f1:
         74:bd:cf:ef:70:b5:aa:ca:83:da:86:37:c3:cc:13:e9:64:d8:
         ad:83:cf:c1:6d:2d:3b:e3:2d:21:51:c0:1a:f4:1b:1b:1f:dc:
         a6:eb:fe:74:98:3a:13:d7:d6:a1:2a:b5:9b:14:8e:07:94:23:
         fe:47:a2:7f:da:9b:ee:0a:9a:d3:e2:ba:d1:7a:d8:45:22:3d:
         18:14:cb:c9:09:2e:70:a2:38:6b:4b:67:2c:e9:4a:4e:4c:0a:
         eb:7a:74:46:1a:ef:1a:cd:c0:d3:33:be:3c:02:19:9f:00:47:
         f4:eb:60:f8:e5:5e:ef:7a:61:3a:00:fd:41:e7:ee:be:35:97:
         a6:37:c4:a5:59:48:42:5b:33:d4:92:de:79:d1:de:0c:d8:ff:
         28:84:37:54:5f:00:dc:37:ed:d6:56:12:6a:0b:de:76:3a:a1:
         21:8c:58:c3:68:00:23:e8:32:b2:65:a3:1b:e1:79:11:9f:ff:
         37:e5:b7:f3:1c:34:5b:e1:e7:db:8f:29:d3:2a:90:dd:c7:28:
         a6:0b:d5:2e:79:14:27:e4:31:14:a3:b2:35:72:f7:a5:93:3f:
         2e:ce:9e:80:1b:fa:84:3d:58:17:ae:f3:25:d3:27:b9:53:82:
         7b:8c:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 04:40:40 2024 by rpki-client on console-fra.rpki-client.org