Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/2VYH_yEnTNoubzTOaXbIhQXd4tU.mft
File:                     2VYH_yEnTNoubzTOaXbIhQXd4tU.mft (raw, json)
Hash identifier:          yuRYToJw2lqufgyLsPEd3NktEPJAo93zIfckHgj69Y4=
Subject key identifier:   68:90:FC:45:FF:4B:CC:93:95:29:3B:26:91:F6:E7:E0:A8:4E:82:3B
Authority key identifier: D9:56:07:FF:21:27:4C:DA:2E:6F:34:CE:69:76:C8:85:05:DD:E2:D5
Certificate issuer:       /CN=d95607ff21274cda2e6f34ce6976c88505dde2d5
Certificate serial:       018F36D1CEB678830238D9058EEACDD2A923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VYH_yEnTNoubzTOaXbIhQXd4tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/2VYH_yEnTNoubzTOaXbIhQXd4tU.mft
Manifest number:          0A48
Signing time:             Thu 02 May 2024 01:01:10 +0000
Manifest this update:     Thu 02 May 2024 01:01:10 +0000
Manifest next update:     Fri 03 May 2024 01:01:10 +0000
Files and hashes:         1: 2VYH_yEnTNoubzTOaXbIhQXd4tU.crl (hash: ZzfRK9Bl/MiLUU8gzIKueWQc4674BM4rOhmD2ujRJ88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/2VYH_yEnTNoubzTOaXbIhQXd4tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/2VYH_yEnTNoubzTOaXbIhQXd4tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2VYH_yEnTNoubzTOaXbIhQXd4tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:d1:ce:b6:78:83:02:38:d9:05:8e:ea:cd:d2:a9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95607ff21274cda2e6f34ce6976c88505dde2d5
        Validity
            Not Before: May  2 01:01:10 2024 GMT
            Not After : May  3 01:01:10 2024 GMT
        Subject: CN=6890fc45ff4bcc9395293b2691f6e7e0a84e823b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:ec:2c:18:61:5f:b3:7a:d2:00:23:5b:e6:
                    a4:ba:79:cd:f3:05:51:81:a4:d8:c7:b4:66:2b:e4:
                    32:fd:e4:fd:6d:e5:57:cf:ac:dc:ce:0b:db:f2:0f:
                    b2:ad:c4:c3:02:ae:9d:61:5e:24:fa:4e:a4:71:1a:
                    10:80:f9:c6:de:8b:2f:99:d4:22:e4:95:3d:fa:e1:
                    21:e1:41:9d:a0:1a:e7:fd:4d:cd:7a:1c:75:e5:61:
                    77:e0:9e:4d:9c:cd:45:c6:2c:91:76:da:7c:41:80:
                    9c:46:48:87:7e:e8:da:6f:cd:59:8d:e1:b8:ba:db:
                    79:f7:5b:a4:b1:01:7e:1a:a5:07:3c:da:52:cc:4e:
                    b7:b9:d2:ce:9d:84:77:70:79:67:d8:fb:b6:ac:9c:
                    f3:20:33:2b:b1:d7:19:2d:ef:43:57:5b:3c:54:1f:
                    7b:f7:4d:80:87:b7:7a:27:94:e8:7d:65:06:40:47:
                    a7:3d:8d:56:4a:04:c6:7f:67:58:11:da:66:80:c4:
                    2f:87:98:f1:26:e3:77:4a:76:6e:25:b7:b9:f7:c8:
                    e8:21:61:67:1d:f8:87:c8:f9:4a:5c:48:20:80:02:
                    34:20:48:c4:df:71:52:e5:bb:37:7e:4e:88:d2:2f:
                    9b:21:96:e3:d5:a0:ae:72:cc:51:43:4c:76:8f:91:
                    43:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:90:FC:45:FF:4B:CC:93:95:29:3B:26:91:F6:E7:E0:A8:4E:82:3B
            X509v3 Authority Key Identifier:
                keyid:D9:56:07:FF:21:27:4C:DA:2E:6F:34:CE:69:76:C8:85:05:DD:E2:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VYH_yEnTNoubzTOaXbIhQXd4tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/2VYH_yEnTNoubzTOaXbIhQXd4tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ef23aa-2a00-4781-b335-1ae6cea89e3e/1/2VYH_yEnTNoubzTOaXbIhQXd4tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:f0:db:af:7a:cb:e1:60:99:0d:c7:68:0f:98:87:0d:2c:
         ab:b9:a4:fd:0a:39:a2:01:94:ff:7d:f9:29:6b:72:ac:1a:9a:
         7a:8e:ed:82:49:9b:45:35:5b:30:b3:71:02:35:cf:b9:1d:f7:
         ab:65:c7:42:af:3a:86:7b:6a:5f:31:14:ba:9a:fb:17:8c:9e:
         5d:5c:c7:3b:2c:b4:50:90:53:ef:eb:3d:87:07:d8:9b:2b:ad:
         91:aa:a2:ff:22:d9:a8:69:11:01:73:37:85:3e:fd:b6:bb:5a:
         df:8a:5f:34:c0:7a:e4:be:5b:10:5b:dd:49:cc:31:0e:8b:19:
         4a:ba:21:39:43:fa:bf:2f:14:96:99:53:76:47:f3:56:d2:d6:
         b4:02:df:51:7e:bb:d8:bd:95:3b:db:16:33:57:06:a0:7d:be:
         40:e7:ef:f4:24:1b:46:2e:5f:0a:7b:c0:1c:39:ae:1b:a0:8a:
         22:a3:be:c2:b4:ea:53:d5:53:78:ac:58:bc:b0:fa:5c:8a:48:
         bf:82:36:ea:f2:96:4b:d9:78:65:d7:3a:df:d6:b5:b0:2e:6a:
         d1:d8:68:9f:13:c0:32:7c:07:dd:af:05:29:d4:df:09:86:03:
         68:70:44:59:28:54:60:a2:54:db:60:5f:a8:ef:b1:14:cc:96:
         54:da:6e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:01:12 2024 by rpki-client on console-ams.rpki-client.org