Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File:                     F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier:          kwIst9IsHRcQkA+jwz6gHa0q6iuwIVA/JZLwDcAIKFs=
Subject key identifier:   2F:61:14:D4:5B:F6:C4:84:91:8D:81:8A:96:02:AC:06:93:70:F5:87
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer:       /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial:       018F43B211CF2CFE48C179C6BAFC43BA7D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number:          03B9
Signing time:             Sat 04 May 2024 13:01:34 +0000
Manifest this update:     Sat 04 May 2024 13:01:34 +0000
Manifest next update:     Sun 05 May 2024 13:01:34 +0000
Files and hashes:         1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: YMm3kc7LY32Hs+9Ia/Rfb/kNCYw8yZaWEQEc0CGgRRo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:11:cf:2c:fe:48:c1:79:c6:ba:fc:43:ba:7d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
        Validity
            Not Before: May  4 13:01:34 2024 GMT
            Not After : May  5 13:01:34 2024 GMT
        Subject: CN=2f6114d45bf6c484918d818a9602ac069370f587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:66:f9:06:62:9c:ad:6c:1c:12:f4:70:9e:e3:
                    3d:11:ba:49:e6:bd:f6:f2:a6:5a:18:c8:f0:4c:62:
                    93:b8:fe:6a:59:f4:24:17:6c:af:63:d6:01:5d:5a:
                    46:47:e3:19:02:19:bc:19:af:cb:94:26:83:73:1a:
                    5c:1a:7b:6b:05:60:b0:87:8f:17:6d:cc:6b:e9:4c:
                    fd:6b:ec:19:41:68:25:e2:fe:2f:b1:01:50:5c:aa:
                    f3:b8:e5:93:6d:04:95:85:d2:46:5e:bf:16:d6:e4:
                    55:c5:52:a5:a6:97:52:5a:96:3e:6b:39:69:f7:b0:
                    da:9a:82:f7:8e:12:73:b3:65:fc:ab:ee:d0:68:1e:
                    fa:12:4b:42:d7:8d:ea:63:0a:44:cc:b9:df:5f:1d:
                    a2:10:61:da:46:87:87:d1:71:35:32:1d:1b:f0:07:
                    19:26:61:5b:ad:c0:0a:a3:37:eb:d1:45:de:c1:5d:
                    a1:1e:5d:7f:f5:c4:31:7f:10:71:51:60:3f:70:16:
                    b0:51:50:fc:e7:d7:ca:40:e6:2d:94:39:c8:f1:1d:
                    66:50:9a:db:0d:58:c7:9d:a7:ac:f4:99:17:e2:ca:
                    23:b7:a9:bd:f9:03:48:0a:3a:b9:53:96:a8:a8:3c:
                    a8:ad:60:60:ba:cb:19:05:e7:df:3b:3b:c1:81:3d:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:61:14:D4:5B:F6:C4:84:91:8D:81:8A:96:02:AC:06:93:70:F5:87
            X509v3 Authority Key Identifier:
                keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:42:87:dc:6c:4e:f0:19:87:d5:ab:9a:5f:82:12:3e:ff:c4:
         71:92:a5:c1:72:73:59:e3:ed:b5:b7:ea:39:55:a2:98:fe:a6:
         e6:67:ac:51:8a:6d:aa:bd:7a:e1:83:00:ed:b3:db:6c:fc:70:
         ae:79:ae:e9:af:73:9e:59:9d:36:d4:f2:5d:68:24:5b:01:5f:
         60:ff:88:47:f0:6f:1a:f5:cc:82:9d:5e:36:9f:7f:17:55:d0:
         fa:ed:6e:cf:cb:d3:ea:b0:21:31:78:31:d1:36:8e:af:1a:5d:
         78:ab:ed:7f:32:66:23:79:a9:75:9f:b4:8e:d4:aa:69:84:ff:
         1a:9e:52:0d:3a:e7:ef:86:88:3c:e8:f7:45:9b:33:39:2a:0e:
         ab:66:35:7d:d9:9e:2d:4c:75:35:17:6d:97:5c:03:ad:b6:d6:
         55:a9:81:86:13:a8:7e:5b:26:6c:8e:7b:30:e9:19:4f:7a:2e:
         6c:93:31:48:be:4f:59:9e:29:ea:56:a0:4e:5b:3c:49:ba:22:
         2e:a9:fe:01:00:77:c0:aa:ed:10:f2:2d:b1:46:ad:53:3e:ec:
         92:05:63:34:4a:94:3e:ca:be:de:63:39:13:01:c1:4d:96:45:
         c3:e0:b1:f3:1d:fc:fb:38:27:ac:b0:4c:63:ba:a0:b6:1d:a4:
         41:77:28:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:59:10 2024 by rpki-client on console-fra.rpki-client.org