Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
File:                     w16ED0bhmFswYQC1wTG7uGO33AY.mft (raw, json)
Hash identifier:          0rkHSQpFmngumbDYQV9ruX1PSxE2uqU+u+R9OwGDs38=
Subject key identifier:   6A:56:A6:BA:7D:1F:20:3F:10:CB:EC:54:61:AD:74:88:4A:81:83:63
Authority key identifier: C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
Certificate issuer:       /CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Certificate serial:       018F86A3D6B6649B262FB596DEB24BC2D8DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
Manifest number:          0FF9
Signing time:             Fri 17 May 2024 13:00:35 +0000
Manifest this update:     Fri 17 May 2024 13:00:35 +0000
Manifest next update:     Sat 18 May 2024 13:00:35 +0000
Files and hashes:         1: w16ED0bhmFswYQC1wTG7uGO33AY.crl (hash: MaD1ygY8AE5wajMK9IEW42NAeT9Y/+tawrUucEbIEmg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:d6:b6:64:9b:26:2f:b5:96:de:b2:4b:c2:d8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35e840f46e1985b306100b5c131bbb863b7dc06
        Validity
            Not Before: May 17 13:00:35 2024 GMT
            Not After : May 18 13:00:35 2024 GMT
        Subject: CN=6a56a6ba7d1f203f10cbec5461ad74884a818363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:94:eb:24:43:1b:aa:18:9e:ad:cc:4a:28:ce:
                    e3:16:c1:0e:6b:6b:2c:3b:bc:18:2e:55:9b:0e:df:
                    72:26:80:9d:fd:0c:84:15:32:91:a9:20:19:6e:53:
                    19:b0:8c:f2:4d:21:8d:78:3c:79:32:54:a4:c8:18:
                    df:9d:e4:d5:db:dc:7e:1e:32:00:ce:41:e1:e0:66:
                    01:55:0d:00:fd:86:c2:4e:72:e6:18:79:07:7a:aa:
                    39:43:a4:1a:1f:53:5a:44:5a:f4:8e:f4:31:4a:61:
                    6b:e5:e1:6c:4b:03:d2:73:a0:84:7a:87:2f:1d:06:
                    9b:ed:a7:ab:cc:6f:93:99:ba:b9:e1:f5:16:8d:ba:
                    71:19:74:85:d2:e7:72:0f:de:1b:27:0c:f7:e7:53:
                    ed:61:02:38:68:f6:a0:91:1c:f3:9b:0a:d7:16:45:
                    2c:7b:6e:e5:e1:fb:18:08:cc:ff:10:d3:4c:36:db:
                    67:07:2c:23:af:3d:1e:77:4c:88:aa:d0:35:8f:75:
                    3e:d3:f2:4d:58:3d:fc:3e:44:79:c2:9a:11:f9:3d:
                    f5:33:24:e4:99:de:c3:d8:8e:83:f5:64:d9:51:04:
                    92:a3:0a:dc:c6:b3:45:9d:ea:e3:74:81:fa:7c:37:
                    af:5a:6f:b2:21:37:3e:21:57:6c:50:26:dc:28:06:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:56:A6:BA:7D:1F:20:3F:10:CB:EC:54:61:AD:74:88:4A:81:83:63
            X509v3 Authority Key Identifier:
                keyid:C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:57:73:13:53:bb:60:a9:95:17:0b:8e:e9:15:6c:1a:44:db:
         2c:ea:47:b5:17:fe:a0:ee:58:b3:32:f1:74:88:58:3a:0c:d5:
         1f:4a:6d:5f:bf:b4:2d:5c:03:71:66:44:75:ce:4b:25:d8:49:
         c0:6f:50:0f:45:25:05:8a:51:0e:7e:55:aa:c7:90:cc:4d:66:
         5a:3c:81:9c:61:d7:5e:a7:7f:b7:df:b4:58:80:7d:89:a2:54:
         74:fa:11:35:c6:98:a0:81:c9:2d:a7:3d:a1:e0:c9:84:0b:d4:
         4b:78:66:23:01:57:c1:bf:f5:89:c3:ee:2f:4e:cd:b4:ab:a5:
         d1:be:75:89:3b:83:ed:68:08:7d:72:3c:0f:7e:18:8c:d5:83:
         bb:bf:4e:09:fd:d8:ab:ba:a2:4a:ae:f0:7f:3d:43:f4:0b:e2:
         e4:93:ad:12:6b:81:04:44:34:d1:87:68:71:ba:e9:55:dd:18:
         86:09:cf:5e:44:f6:d9:2b:f0:6a:7b:c4:d1:b5:83:a3:84:ab:
         2e:ce:ed:d5:54:f3:aa:f2:d2:de:88:60:23:5e:ca:ce:22:10:
         c7:19:dc:c6:84:19:48:bf:bb:34:49:c3:4a:00:d0:b2:bb:c9:
         c7:07:0d:26:66:f7:50:59:1a:ca:c7:27:e8:f3:63:cf:ca:c5:
         0e:14:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:38 2024 by rpki-client on console-fra.rpki-client.org