Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5c7a03-a083-4a22-8f7e-6ac71f5e5f44/1/35U8EJpyGMtop-GCaQOJHV5DGl0.mft
File:                     35U8EJpyGMtop-GCaQOJHV5DGl0.mft (raw, json)
Hash identifier:          w4emdXty71+TFG3s+s8caA0TXLSabFdq3ykZZZyyMmY=
Subject key identifier:   4E:3E:AB:AB:D4:A9:DD:52:69:52:0C:0C:00:82:56:09:E4:47:32:2D
Authority key identifier: DF:95:3C:10:9A:72:18:CB:68:A7:E1:82:69:03:89:1D:5E:43:1A:5D
Certificate issuer:       /CN=df953c109a7218cb68a7e1826903891d5e431a5d
Certificate serial:       018F5514BCB306062F111974661A9F289740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35U8EJpyGMtop-GCaQOJHV5DGl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/5c7a03-a083-4a22-8f7e-6ac71f5e5f44/1/35U8EJpyGMtop-GCaQOJHV5DGl0.mft
Manifest number:          0490
Signing time:             Tue 07 May 2024 22:02:53 +0000
Manifest this update:     Tue 07 May 2024 22:02:53 +0000
Manifest next update:     Wed 08 May 2024 22:02:53 +0000
Files and hashes:         1: 35U8EJpyGMtop-GCaQOJHV5DGl0.crl (hash: eR0MV+2hX3Y6Qr54WjDrwQ66A459Ns44SQ034lV1e7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/5c7a03-a083-4a22-8f7e-6ac71f5e5f44/1/35U8EJpyGMtop-GCaQOJHV5DGl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/5c7a03-a083-4a22-8f7e-6ac71f5e5f44/1/35U8EJpyGMtop-GCaQOJHV5DGl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35U8EJpyGMtop-GCaQOJHV5DGl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:14:bc:b3:06:06:2f:11:19:74:66:1a:9f:28:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df953c109a7218cb68a7e1826903891d5e431a5d
        Validity
            Not Before: May  7 22:02:53 2024 GMT
            Not After : May  8 22:02:53 2024 GMT
        Subject: CN=4e3eababd4a9dd5269520c0c00825609e447322d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:78:03:3b:d8:8e:4d:24:30:28:53:f5:1a:
                    fc:f1:ab:e9:3b:f6:bb:cc:08:6d:6c:be:9d:c9:15:
                    37:08:35:a0:5c:c1:18:07:46:8a:f5:62:46:d0:5c:
                    f5:d3:7f:46:26:ac:bb:c1:ad:22:f9:50:6a:d8:ff:
                    22:b1:b4:c9:d6:91:02:e2:db:b1:41:61:63:a2:4a:
                    95:f7:31:aa:b2:83:1b:9b:7f:f4:f0:5f:43:8f:0b:
                    3c:b3:b6:46:cd:46:e3:b9:31:08:d9:bc:f8:b0:03:
                    7c:c9:0c:55:ce:24:4e:23:95:80:11:bf:7d:b5:b0:
                    45:0a:5d:6e:6b:2b:3f:95:01:b9:94:d7:d7:e5:89:
                    a2:7b:9c:1a:fb:9f:39:c9:55:14:30:bf:23:9f:23:
                    6a:84:09:83:85:b4:2d:bd:6b:8d:5e:d2:26:cd:b1:
                    aa:dd:91:5f:d2:a8:b7:49:d1:46:4c:84:fd:65:6f:
                    2b:58:c2:b5:32:17:5d:9b:9e:f2:be:9b:78:45:27:
                    8d:ce:4a:a0:51:fd:53:cf:d2:6a:d2:d5:4c:fd:1d:
                    7f:91:7f:1a:d0:d8:fc:b2:c1:50:cb:d9:dd:40:b2:
                    25:a6:83:e8:d4:f2:4b:b6:ac:9a:8a:1b:e5:c5:70:
                    14:ba:17:8e:72:e1:28:be:ff:7c:33:bc:78:12:f7:
                    4b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3E:AB:AB:D4:A9:DD:52:69:52:0C:0C:00:82:56:09:E4:47:32:2D
            X509v3 Authority Key Identifier:
                keyid:DF:95:3C:10:9A:72:18:CB:68:A7:E1:82:69:03:89:1D:5E:43:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35U8EJpyGMtop-GCaQOJHV5DGl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5c7a03-a083-4a22-8f7e-6ac71f5e5f44/1/35U8EJpyGMtop-GCaQOJHV5DGl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5c7a03-a083-4a22-8f7e-6ac71f5e5f44/1/35U8EJpyGMtop-GCaQOJHV5DGl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:17:31:c6:a6:89:15:ed:67:d3:3c:27:fb:c5:11:98:41:33:
         9b:98:78:8f:c5:06:f9:5b:a3:d9:52:6d:5f:67:74:42:b6:38:
         7d:d9:67:33:b5:92:0d:f9:ef:bf:40:bc:f9:fb:d6:8e:51:bc:
         47:e8:4c:e7:0b:4c:b4:99:b8:5b:27:09:a0:12:b4:5e:36:45:
         5e:b3:aa:0a:53:f4:a6:05:00:8b:dc:66:88:f6:55:ee:da:4f:
         6f:59:f5:be:91:cc:e0:ec:bd:2b:9d:33:96:03:c6:20:1c:6a:
         c1:61:36:41:27:96:60:16:c2:7b:ac:dc:47:8a:c8:a6:41:15:
         5e:e2:f4:7d:ad:29:2c:be:44:d2:44:24:67:c4:bb:94:90:7e:
         8f:18:5d:fb:b0:82:c6:80:d4:4c:e3:03:f3:e3:e3:a8:bd:79:
         38:bb:ae:f3:2a:de:6d:e1:b8:b0:4e:4c:54:7c:df:32:f5:31:
         e6:f2:ce:75:b5:7c:08:7d:98:1f:44:a3:a3:4c:fb:66:3b:49:
         63:c2:08:62:52:bb:40:7a:2e:ae:b9:a6:ac:97:ab:26:5c:00:
         6c:87:b2:9b:37:82:41:cd:2b:76:46:ff:95:78:f7:c5:dc:ac:
         e3:f4:fd:dd:9e:2e:af:9a:3a:28:c0:42:eb:bc:10:d6:18:c0:
         71:d9:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:34:53 2024 by rpki-client on console-fra.rpki-client.org