Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
File:                     sBblecxJQEjsEqI_8lOacAS7duU.mft (raw, json)
Hash identifier:          V5fUB9kxi/I6EUBwgjqPa7l4ctm69ghDaKmaOhMvJ1M=
Subject key identifier:   0D:03:C5:58:A3:16:60:D3:4C:14:3B:C7:65:67:6E:E0:9D:A3:BB:1E
Authority key identifier: B0:16:E5:79:CC:49:40:48:EC:12:A2:3F:F2:53:9A:70:04:BB:76:E5
Certificate issuer:       /CN=b016e579cc494048ec12a23ff2539a7004bb76e5
Certificate serial:       018F874AF73FA9E1B658090F0AD8C69BC433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
Manifest number:          09BC
Signing time:             Fri 17 May 2024 16:03:07 +0000
Manifest this update:     Fri 17 May 2024 16:03:07 +0000
Manifest next update:     Sat 18 May 2024 16:03:07 +0000
Files and hashes:         1: sBblecxJQEjsEqI_8lOacAS7duU.crl (hash: dBlOiU4CtKzR4gv0KdYxmnsvnWWcfbSeGA3N7MhQx4M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f7:3f:a9:e1:b6:58:09:0f:0a:d8:c6:9b:c4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b016e579cc494048ec12a23ff2539a7004bb76e5
        Validity
            Not Before: May 17 16:03:07 2024 GMT
            Not After : May 18 16:03:07 2024 GMT
        Subject: CN=0d03c558a31660d34c143bc765676ee09da3bb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:7d:9d:28:b7:df:3c:02:4c:e3:bd:08:3f:
                    5d:a5:4b:a0:92:03:25:b9:07:e9:ef:c7:4c:44:3f:
                    0d:9a:96:9e:e1:66:8c:70:1f:12:3c:0f:ac:5a:df:
                    8b:eb:45:27:52:f5:ce:7a:c5:dc:17:46:1c:ce:27:
                    42:a3:ed:6c:af:d9:50:95:bd:32:69:2b:d3:93:1c:
                    fe:fc:c3:9c:6d:3e:df:ef:20:4c:af:b1:51:f4:5f:
                    6f:78:cb:5a:bf:75:3b:52:24:2f:69:ca:6b:fd:9f:
                    1a:0f:74:ae:b2:1b:cc:2b:2e:c3:5d:d6:0f:a5:e2:
                    20:4c:5a:39:5c:43:9c:29:1f:d1:6e:97:9b:a0:ca:
                    8c:e6:7f:09:39:8e:6a:d3:f8:c2:21:3d:be:a8:9a:
                    07:3d:57:21:39:20:e4:e1:b0:19:31:9d:14:88:4e:
                    fa:b7:00:24:0d:37:ab:38:fc:df:55:3b:d8:91:a9:
                    2b:90:03:bd:24:70:28:b0:83:e5:9b:7a:74:bb:75:
                    22:1c:58:50:2a:4c:3d:a4:a3:a2:ca:01:8a:28:06:
                    f4:aa:2e:13:03:0c:ea:11:3c:4f:ac:19:a8:47:b7:
                    13:27:fe:13:3a:1e:ae:4b:3c:34:d1:57:f4:01:ad:
                    78:d4:37:08:53:e0:9b:62:2a:37:15:1c:42:bd:7b:
                    26:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:03:C5:58:A3:16:60:D3:4C:14:3B:C7:65:67:6E:E0:9D:A3:BB:1E
            X509v3 Authority Key Identifier:
                keyid:B0:16:E5:79:CC:49:40:48:EC:12:A2:3F:F2:53:9A:70:04:BB:76:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d7:6f:94:a5:91:88:63:11:5e:b7:17:79:fc:42:72:59:b4:
         c1:c5:0d:42:40:87:7e:0f:92:8b:0d:75:db:0c:f7:bc:d6:71:
         ea:a8:c0:f1:b1:75:ae:f5:b0:b9:3a:d8:f8:0e:fc:8e:6c:10:
         8a:a0:b0:09:74:56:6f:71:19:35:4c:49:d2:fa:1a:15:95:ab:
         5a:ed:ec:96:e5:b0:d6:66:a2:e9:e5:9d:15:65:28:75:db:ce:
         4c:4d:2e:e3:65:00:77:65:d4:26:da:98:e7:26:61:a9:47:0d:
         06:b4:49:50:d6:47:9d:c1:35:a4:25:f7:66:91:ca:a7:b3:82:
         7a:f9:2b:b9:b2:e9:59:42:aa:19:10:36:fb:e3:ff:9a:af:23:
         70:3a:ec:ee:fa:7f:32:ce:9f:53:7b:2f:75:4b:8d:f4:30:e5:
         5b:54:be:6a:91:58:09:72:4a:57:da:02:93:f4:cc:a8:08:75:
         9c:1e:d1:01:00:00:2f:91:b5:74:b2:a1:68:39:2b:74:d2:7f:
         a4:24:db:22:f5:d8:f4:df:81:ed:92:c0:04:5e:71:ad:0d:8d:
         b2:83:1f:10:f6:a7:92:fd:cd:02:4c:77:54:ec:ef:f5:89:a0:
         e3:46:d3:92:c9:f4:0e:35:57:99:ec:9b:ed:c4:a8:91:34:50:
         e3:aa:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:28 2024 by rpki-client on console-fra.rpki-client.org