Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fcb189-00b4-4670-b0da-80b037d540ac/1/4Fe-vjRYm6Om54Ni5Ie19FkCs6s.mft
File:                     4Fe-vjRYm6Om54Ni5Ie19FkCs6s.mft (raw, json)
Hash identifier:          nbbbmFUChb2JXfNFlslls5ZZJq9KRkIB4p6mELw6VLY=
Subject key identifier:   83:07:10:92:82:6F:78:F9:2B:AC:66:F9:12:5D:D1:C5:E2:8F:78:62
Authority key identifier: E0:57:BE:BE:34:58:9B:A3:A6:E7:83:62:E4:87:B5:F4:59:02:B3:AB
Certificate issuer:       /CN=e057bebe34589ba3a6e78362e487b5f45902b3ab
Certificate serial:       018F3708DDB454E123877AA13EAF189AC765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Fe-vjRYm6Om54Ni5Ie19FkCs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/fcb189-00b4-4670-b0da-80b037d540ac/1/4Fe-vjRYm6Om54Ni5Ie19FkCs6s.mft
Manifest number:          1085
Signing time:             Thu 02 May 2024 02:01:18 +0000
Manifest this update:     Thu 02 May 2024 02:01:18 +0000
Manifest next update:     Fri 03 May 2024 02:01:18 +0000
Files and hashes:         1: 4Fe-vjRYm6Om54Ni5Ie19FkCs6s.crl (hash: HERT3MbWg946UEe3J6CdTmMvGv74HzslvKMQErDaOKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/fcb189-00b4-4670-b0da-80b037d540ac/1/4Fe-vjRYm6Om54Ni5Ie19FkCs6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/fcb189-00b4-4670-b0da-80b037d540ac/1/4Fe-vjRYm6Om54Ni5Ie19FkCs6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Fe-vjRYm6Om54Ni5Ie19FkCs6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:08:dd:b4:54:e1:23:87:7a:a1:3e:af:18:9a:c7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e057bebe34589ba3a6e78362e487b5f45902b3ab
        Validity
            Not Before: May  2 02:01:18 2024 GMT
            Not After : May  3 02:01:18 2024 GMT
        Subject: CN=83071092826f78f92bac66f9125dd1c5e28f7862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:93:8f:a4:3f:34:2e:02:17:15:bd:a7:8d:
                    55:a0:df:52:8b:ac:28:ec:d6:f2:ee:65:0a:a0:cb:
                    51:62:11:86:12:eb:57:27:ef:be:e1:35:4e:62:95:
                    e1:46:7a:97:75:55:ef:7f:69:08:42:29:87:e0:ad:
                    76:3a:86:c4:71:4e:f4:a4:9a:4a:3c:1c:a5:68:5e:
                    2c:0b:b9:96:6e:f9:a7:1b:f1:bf:45:a7:99:22:c6:
                    89:63:da:5a:ed:72:c5:7e:e3:0a:a3:6e:72:bd:02:
                    2b:5f:0e:99:6c:2d:d2:1a:0f:f3:3a:89:58:36:84:
                    d6:ba:e0:9e:fc:c2:4d:43:41:ad:5e:94:d7:11:ea:
                    37:07:92:3f:96:4f:0b:11:86:1a:69:5f:1e:a4:f3:
                    cb:8e:71:e3:e9:8a:72:43:2c:e5:29:e1:4f:67:de:
                    97:d5:e6:aa:81:8c:7d:35:2f:89:d8:5b:36:75:d4:
                    dc:ec:aa:9e:e9:eb:15:c2:5e:61:4d:b5:1a:67:65:
                    62:d0:bd:d2:00:f1:68:c3:fd:fe:24:12:61:b8:d2:
                    87:b3:eb:b9:b5:fc:04:c8:e0:d4:9a:3c:a0:99:d8:
                    55:02:81:61:48:52:c4:a8:3d:f5:ad:90:15:ad:ad:
                    e5:55:e9:14:7f:8e:d7:d8:5b:73:85:1b:e0:69:28:
                    66:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:07:10:92:82:6F:78:F9:2B:AC:66:F9:12:5D:D1:C5:E2:8F:78:62
            X509v3 Authority Key Identifier:
                keyid:E0:57:BE:BE:34:58:9B:A3:A6:E7:83:62:E4:87:B5:F4:59:02:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fe-vjRYm6Om54Ni5Ie19FkCs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fcb189-00b4-4670-b0da-80b037d540ac/1/4Fe-vjRYm6Om54Ni5Ie19FkCs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fcb189-00b4-4670-b0da-80b037d540ac/1/4Fe-vjRYm6Om54Ni5Ie19FkCs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:12:cc:e5:78:52:22:19:c1:16:ce:05:f5:05:95:d5:19:
         8a:93:b0:33:d0:f4:43:42:08:7d:85:cf:ac:a9:8d:c4:8b:b0:
         ca:a5:20:d2:6e:ca:44:bd:7e:b4:86:be:90:75:53:10:7e:98:
         93:e1:05:65:c7:02:c4:e4:98:cb:ec:c8:45:7f:b8:34:0d:fa:
         9a:12:ff:f2:a0:ce:32:8c:db:c6:ce:61:92:26:4e:96:a2:b0:
         63:f4:f7:cc:4b:c8:49:f4:f1:37:6e:ce:eb:63:2e:85:f6:49:
         f4:31:95:65:3e:55:77:89:f4:86:fe:bb:6d:7f:bd:da:b8:21:
         f0:46:40:3b:9d:f4:e6:18:dc:30:97:15:24:e5:98:5a:66:58:
         2a:8c:7d:b0:ba:43:70:18:5b:a0:cd:db:58:57:46:fe:40:e8:
         a4:cd:9e:d0:bf:98:27:23:73:30:0e:e2:14:a2:97:8e:af:31:
         6e:e6:c9:16:85:68:66:ea:b1:32:44:e6:51:60:18:86:95:5d:
         90:55:6f:f3:d6:60:a0:8c:fd:18:31:5c:4e:52:0f:29:46:0a:
         c0:de:8f:ab:a5:88:05:08:73:c5:75:1b:28:a6:cb:c2:8b:e1:
         c5:d8:11:6a:ad:e7:00:36:bb:30:ed:ad:38:9a:5b:84:d7:b4:
         d8:24:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:36:39 2024 by rpki-client on console-ams.rpki-client.org