Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
File:                     29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json)
Hash identifier:          zF4Ow7uRb4aMtxImcSCJp9A29N9YQ0tOQfhgSsA3me8=
Subject key identifier:   98:4C:65:74:A5:E1:5B:7F:61:5A:2F:44:5E:08:10:06:66:E6:3E:81
Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Certificate issuer:       /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Certificate serial:       018F45A30BA876361310B2DD530E069B5A0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
Manifest number:          0A0B
Signing time:             Sat 04 May 2024 22:04:24 +0000
Manifest this update:     Sat 04 May 2024 22:04:24 +0000
Manifest next update:     Sun 05 May 2024 22:04:24 +0000
Files and hashes:         1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: CqkcOEeWkFxhTv6d3Gz0rEwIQlTSYygvCnuGf0YSLBw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a3:0b:a8:76:36:13:10:b2:dd:53:0e:06:9b:5a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
        Validity
            Not Before: May  4 22:04:24 2024 GMT
            Not After : May  5 22:04:24 2024 GMT
        Subject: CN=984c6574a5e15b7f615a2f445e08100666e63e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:ff:74:7a:5f:e3:b1:e7:8a:69:30:04:b1:
                    a1:e3:72:41:20:32:a7:ab:2a:6d:41:a3:9d:04:16:
                    aa:d0:f8:38:43:a2:e4:c0:f1:3c:c1:43:d2:ed:49:
                    4c:9c:37:dd:c9:59:c7:ea:6c:c5:aa:7d:87:f0:8e:
                    24:f8:cc:ad:28:8c:cb:e6:80:8b:74:c9:9e:3c:2b:
                    fd:0d:b9:a7:52:19:00:1e:74:bc:66:a0:5b:79:65:
                    4e:df:a3:c2:a6:9a:76:22:c4:c9:66:ed:93:66:9c:
                    40:31:72:6f:35:69:be:c8:4f:3c:d1:38:c0:4b:8c:
                    2f:0d:6c:f9:10:48:a3:ee:18:15:4e:fb:4c:ce:38:
                    47:b1:9d:67:41:93:f8:fe:9c:b4:43:d6:d6:c2:c0:
                    27:54:ef:2f:2c:41:1b:b3:02:13:b2:f9:fc:d0:b0:
                    eb:fd:9f:7e:69:32:d4:96:70:e5:d0:15:36:97:46:
                    f6:ac:a6:62:55:36:5f:6a:48:96:9c:06:a7:94:df:
                    8a:03:af:e5:9e:cb:8a:2f:1f:05:2f:4a:96:3a:61:
                    13:45:e7:d4:d3:a9:bf:e8:38:55:ee:86:57:fc:11:
                    db:e2:84:c4:29:b3:5a:13:01:36:27:0c:e7:a2:02:
                    11:66:6f:77:3b:70:d4:70:75:d5:d7:a1:c6:63:3c:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4C:65:74:A5:E1:5B:7F:61:5A:2F:44:5E:08:10:06:66:E6:3E:81
            X509v3 Authority Key Identifier:
                keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:51:7e:70:31:b7:72:a1:c6:ec:7d:b8:3b:08:3d:30:71:d8:
         5e:c9:21:cc:61:80:2b:a9:96:af:9f:5a:cb:2a:4a:2b:bf:e3:
         e9:51:b4:f7:86:ce:0a:fb:a2:00:32:81:6a:68:43:34:8a:d0:
         27:48:b8:90:fd:73:4a:1b:56:41:91:cf:24:db:e8:dd:ae:ef:
         3a:49:89:b8:c5:05:b5:fa:84:e2:f9:bb:ae:32:e7:4b:e3:84:
         c9:be:50:55:90:c7:18:99:14:9a:f0:7f:c9:ae:5a:26:a1:be:
         5f:4c:5a:41:11:76:5a:ec:9c:5a:85:3d:18:ae:94:2f:cc:93:
         7f:4e:46:73:20:4e:05:63:5d:d4:d1:79:8b:99:f7:b2:f7:a2:
         a8:04:9f:00:84:de:f7:47:88:15:ee:12:1b:67:9f:77:13:1b:
         43:0a:cc:31:57:eb:27:0c:0e:13:25:26:78:0e:4c:73:b0:65:
         c9:21:e8:26:62:8b:e1:27:01:57:79:50:73:d6:56:5f:49:c3:
         97:f6:26:21:5f:26:c8:7b:67:5e:56:5b:61:66:3c:e1:d4:9c:
         c9:dc:21:2b:da:8c:83:e5:ab:14:c6:2c:c5:d8:d5:9c:61:24:
         4a:58:a3:28:0f:e4:64:cc:69:fa:8d:66:19:52:30:98:08:82:
         f8:dd:c3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:29:47 2024 by rpki-client on console-ams.rpki-client.org