Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/195d60-2e91-4c3f-ab9d-10dcad560443/1/dht9IeQ1pZElXFwd-fjXdIng8qA.mft
File:                     dht9IeQ1pZElXFwd-fjXdIng8qA.mft (raw, json)
Hash identifier:          7YiwH93RNGqjXU1kcODxrFshlfgY/CmIcwS83eGx0Bc=
Subject key identifier:   E1:5D:00:37:CD:35:A3:C3:63:59:14:D2:CD:1D:68:3F:CF:8A:9D:F5
Authority key identifier: 76:1B:7D:21:E4:35:A5:91:25:5C:5C:1D:F9:F8:D7:74:89:E0:F2:A0
Certificate issuer:       /CN=761b7d21e435a591255c5c1df9f8d77489e0f2a0
Certificate serial:       018F8749F8D92AAC62FAAFADCA6037438CA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dht9IeQ1pZElXFwd-fjXdIng8qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/195d60-2e91-4c3f-ab9d-10dcad560443/1/dht9IeQ1pZElXFwd-fjXdIng8qA.mft
Manifest number:          0C8C
Signing time:             Fri 17 May 2024 16:02:02 +0000
Manifest this update:     Fri 17 May 2024 16:02:02 +0000
Manifest next update:     Sat 18 May 2024 16:02:02 +0000
Files and hashes:         1: dht9IeQ1pZElXFwd-fjXdIng8qA.crl (hash: hk255FzjJeffG6WInfZ7vf8SMDbHu170AvaXQBwSDqw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/195d60-2e91-4c3f-ab9d-10dcad560443/1/dht9IeQ1pZElXFwd-fjXdIng8qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/195d60-2e91-4c3f-ab9d-10dcad560443/1/dht9IeQ1pZElXFwd-fjXdIng8qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dht9IeQ1pZElXFwd-fjXdIng8qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f8:d9:2a:ac:62:fa:af:ad:ca:60:37:43:8c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761b7d21e435a591255c5c1df9f8d77489e0f2a0
        Validity
            Not Before: May 17 16:02:02 2024 GMT
            Not After : May 18 16:02:02 2024 GMT
        Subject: CN=e15d0037cd35a3c3635914d2cd1d683fcf8a9df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:d9:48:2b:32:2b:eb:38:f6:4d:65:87:f4:
                    45:6e:c2:49:e2:2f:44:d5:70:79:f0:a6:7c:18:18:
                    a2:99:3a:9b:69:74:83:ac:c6:49:4a:c7:c3:73:a3:
                    4a:dd:48:98:63:46:bb:7c:c9:49:92:2d:a9:04:9d:
                    0b:3b:82:a8:53:b4:e7:55:ac:9c:11:b4:96:a3:d9:
                    b2:b0:d1:0a:d4:dc:43:38:4f:a5:cf:9f:35:73:80:
                    d2:c5:90:82:0b:86:8e:95:a9:98:29:5c:ac:50:a7:
                    85:2c:cf:30:ff:86:0d:7c:3b:ae:75:22:58:b2:96:
                    58:4c:b8:5b:66:f2:d4:01:dd:ea:f8:b7:37:26:b0:
                    6d:5a:2f:01:43:7d:1c:04:b6:2d:98:10:9a:4e:b3:
                    b7:cd:b6:38:06:36:95:58:0a:86:e1:e1:3c:24:aa:
                    6f:b2:f5:57:73:0e:e8:7a:9d:31:88:36:5b:84:96:
                    3f:7e:19:2e:f4:76:11:cc:23:5b:45:f1:21:68:7d:
                    30:4d:b6:f5:a9:6e:6a:c8:b8:e5:7a:95:1b:4f:17:
                    2c:0f:3a:ac:37:f1:4d:c7:c7:5d:f2:71:d9:09:00:
                    a0:84:e6:9e:0e:1e:e5:10:b0:85:fd:15:28:81:80:
                    5a:8e:0b:bb:ec:28:45:9c:70:0b:b9:13:8f:ef:68:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5D:00:37:CD:35:A3:C3:63:59:14:D2:CD:1D:68:3F:CF:8A:9D:F5
            X509v3 Authority Key Identifier:
                keyid:76:1B:7D:21:E4:35:A5:91:25:5C:5C:1D:F9:F8:D7:74:89:E0:F2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dht9IeQ1pZElXFwd-fjXdIng8qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/195d60-2e91-4c3f-ab9d-10dcad560443/1/dht9IeQ1pZElXFwd-fjXdIng8qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/195d60-2e91-4c3f-ab9d-10dcad560443/1/dht9IeQ1pZElXFwd-fjXdIng8qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:23:7a:7c:ee:c2:af:79:73:a3:49:28:f1:97:35:db:ee:6e:
         fb:70:4b:7d:00:32:ee:ca:8b:7d:3f:16:bf:0b:c0:5f:3d:5e:
         18:f9:e2:06:83:dd:5a:6f:7e:f3:ad:c2:a9:a3:6e:52:ae:e8:
         22:cf:02:d0:53:ed:18:03:a5:ce:ba:30:78:97:17:2e:a6:c3:
         92:7f:f0:39:d2:68:d1:a3:d1:b4:71:91:41:d7:c0:16:55:aa:
         36:6b:70:82:19:b1:b4:02:5d:b8:ea:88:72:97:aa:2c:d7:68:
         4e:7e:1c:3b:1e:76:eb:62:42:df:8d:07:fb:3a:61:36:0b:05:
         f9:94:3b:00:d7:89:ec:80:d3:d1:27:e4:da:ca:19:44:a7:9b:
         29:d8:32:19:8e:bb:ea:0f:14:90:5a:d5:88:f1:c2:60:7b:e0:
         85:e7:5e:c0:64:47:14:62:b1:92:79:ea:8c:81:53:bd:57:0c:
         8e:05:90:04:17:d4:97:a5:61:03:44:ba:fb:37:a7:4d:2e:2f:
         56:e5:b6:04:65:a8:e7:6b:81:f3:d7:87:69:55:14:9f:f6:b2:
         3b:1a:94:bd:0f:fc:d2:8c:95:d7:6c:2f:15:e2:c4:21:6b:a8:
         36:6f:0c:78:04:47:a4:38:f0:25:90:76:bc:28:d5:ee:96:c7:
         38:ad:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:51:56 2024 by rpki-client on console-ams.rpki-client.org