Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File:                     dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier:          5TljPyMrOy9B987xvPYa+9fwmxuTU7e/XZbYRXGMx3Y=
Subject key identifier:   27:4B:8A:FD:70:3C:54:70:6E:EA:51:81:30:88:D6:B3:00:06:C5:01
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer:       /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial:       018F86A3A183B7C1640414C641EFBFEE9E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number:          0F1C
Signing time:             Fri 17 May 2024 13:00:21 +0000
Manifest this update:     Fri 17 May 2024 13:00:21 +0000
Manifest next update:     Sat 18 May 2024 13:00:21 +0000
Files and hashes:         1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: 0zN3nTEQx2Irx6gR/BC2tV3QceDpJZLFETVpT5apNO0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:a1:83:b7:c1:64:04:14:c6:41:ef:bf:ee:9e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
        Validity
            Not Before: May 17 13:00:21 2024 GMT
            Not After : May 18 13:00:21 2024 GMT
        Subject: CN=274b8afd703c54706eea51813088d6b30006c501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:0c:53:86:8c:4a:55:1a:fe:16:cc:db:49:
                    6e:1c:be:97:14:f6:cd:43:3c:b5:18:fc:02:be:32:
                    ef:51:b9:13:71:97:70:d3:24:09:eb:30:0f:2c:6f:
                    76:1d:e7:c3:d9:37:1f:77:40:8d:21:11:7e:9a:44:
                    25:5d:b4:8b:4f:e4:e0:7d:2c:99:f9:c7:5b:83:17:
                    94:cc:25:00:61:a8:af:d4:16:74:96:a4:2b:d1:ba:
                    e2:c6:62:e6:53:75:4b:8f:28:22:cb:3a:4e:a5:e3:
                    11:4f:96:b8:2f:60:02:61:f0:f1:ee:9a:66:27:48:
                    44:d3:03:8b:93:87:69:7c:8c:fe:2f:fa:30:20:67:
                    88:60:78:2d:48:6e:32:56:0f:97:03:0a:86:02:2e:
                    f6:97:98:61:f3:54:1f:51:35:39:a5:6f:50:f4:a4:
                    c2:c1:19:f5:8f:e3:22:e0:6f:e6:54:3f:6a:02:cc:
                    94:70:7b:ce:4c:99:42:df:fb:ec:f2:c8:4d:79:77:
                    16:c4:9c:a1:f9:20:50:35:99:fb:1d:8d:98:68:39:
                    35:df:78:39:1c:12:3f:61:ab:20:7e:e4:25:88:21:
                    6d:3a:84:fa:52:ca:3e:58:de:07:57:f9:da:cb:5a:
                    f8:34:5f:a8:b8:7f:a5:21:90:49:1a:77:81:35:bc:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4B:8A:FD:70:3C:54:70:6E:EA:51:81:30:88:D6:B3:00:06:C5:01
            X509v3 Authority Key Identifier:
                keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3e:d8:44:eb:bd:5f:30:dc:d8:f1:7e:43:e9:be:b9:1f:db:
         c4:e0:ef:8c:15:05:02:c2:b0:b7:b2:9a:3d:6e:c0:49:44:83:
         84:90:0c:9a:31:54:9d:9d:c9:da:73:ca:0c:f0:b0:42:84:ef:
         a2:a1:fd:86:ef:0a:17:d6:9c:1e:e7:36:d8:97:40:50:90:8d:
         72:1c:2f:6b:e5:44:48:13:c3:13:7d:29:ad:cf:ad:35:61:15:
         ce:03:91:bf:f4:7e:2c:e8:f5:b3:df:4c:ad:c1:79:82:eb:b9:
         19:7a:01:d0:13:fd:d9:4a:40:91:57:a8:67:92:04:9e:f9:70:
         c2:7f:c7:e8:5e:e0:d8:0f:bd:5f:ee:4b:47:5c:02:0a:07:17:
         ca:54:c6:83:64:39:92:1f:42:c0:97:fa:89:e1:ac:bd:38:f9:
         9a:5e:87:f0:57:65:51:8e:80:d2:3e:b5:6a:ef:26:fe:c0:69:
         df:30:ca:81:c2:2a:80:86:d0:38:40:a4:79:42:8a:d6:4d:f5:
         04:1a:c6:12:6d:4b:0b:22:8a:ba:1f:db:aa:0b:a3:ad:69:d3:
         1b:db:34:4c:b0:a8:ec:72:7f:26:09:b6:9b:16:79:06:b1:20:
         82:cd:3d:d2:d7:ec:d8:98:d0:e4:e2:1c:fa:d6:e4:85:6e:f9:
         e6:55:ed:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:10:57 2024 by rpki-client on console-fra.rpki-client.org