Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
File:                     xVRM5A0R1h07gKfRAyMBI_t9aKU.mft (raw, json)
Hash identifier:          c7W/sXFUbhWFo5CpLqN+ZPJ4bapCydUtUigwmlgscZ0=
Subject key identifier:   1C:DC:FD:90:15:DF:7B:0E:FC:92:3A:EB:8B:C4:20:2D:47:CA:FC:33
Authority key identifier: C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
Certificate issuer:       /CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Certificate serial:       018F86A388B452D142A82FD126BD7CE5B868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
Manifest number:          0A97
Signing time:             Fri 17 May 2024 13:00:15 +0000
Manifest this update:     Fri 17 May 2024 13:00:15 +0000
Manifest next update:     Sat 18 May 2024 13:00:15 +0000
Files and hashes:         1: xVRM5A0R1h07gKfRAyMBI_t9aKU.crl (hash: DfAllTnET02JbIlXjQUFRu46USUUIUNq3eUvndZ9gME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:88:b4:52:d1:42:a8:2f:d1:26:bd:7c:e5:b8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
        Validity
            Not Before: May 17 13:00:15 2024 GMT
            Not After : May 18 13:00:15 2024 GMT
        Subject: CN=1cdcfd9015df7b0efc923aeb8bc4202d47cafc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:ef:d1:6a:e0:60:ea:33:6e:c5:57:7f:33:
                    f6:96:cb:9d:1e:04:86:e5:e7:57:5c:05:06:3c:28:
                    d7:fe:e9:4a:7b:0b:9a:f6:b5:25:aa:52:df:e1:15:
                    2b:b6:03:fd:b6:b9:3c:11:00:ba:d0:52:0b:86:55:
                    c3:b7:52:15:29:db:63:e6:bf:1a:bc:4f:19:b5:3d:
                    9b:b8:b7:12:88:ac:a7:4d:33:45:9d:df:c5:af:69:
                    f1:3a:bc:49:2b:7b:cd:6b:2a:31:75:5f:f5:80:4b:
                    88:bd:08:5a:f3:ae:c3:d6:eb:7a:37:89:d5:ce:53:
                    3a:46:cf:9d:b3:42:08:65:5f:33:f7:71:f2:22:e8:
                    47:cd:a6:af:9c:4e:3d:fa:74:05:ad:c4:82:d1:81:
                    88:b0:41:06:9b:e8:6e:aa:eb:7b:7c:b5:22:13:64:
                    55:3a:8b:09:e9:ea:c9:97:4d:9c:6c:ff:4e:aa:08:
                    9e:e6:d3:72:30:70:c7:2f:e4:17:c9:4b:d5:33:d2:
                    ec:ea:c1:aa:40:63:14:ea:12:a3:4c:87:e8:30:3a:
                    ff:81:ff:ec:2a:b8:8a:a2:31:ae:30:2e:20:ec:ea:
                    9d:72:d3:02:cc:81:78:0b:c8:30:ba:d0:45:2d:6a:
                    ad:8b:e0:55:52:2f:a2:c2:0c:f3:1c:16:a0:27:b6:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DC:FD:90:15:DF:7B:0E:FC:92:3A:EB:8B:C4:20:2D:47:CA:FC:33
            X509v3 Authority Key Identifier:
                keyid:C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0c:6b:68:6a:cd:61:5b:b0:57:4f:84:0b:09:41:d2:05:b8:
         fe:6a:ff:e1:1c:99:7e:7c:4e:df:c4:67:6c:47:84:87:65:8b:
         a5:c4:dd:08:6e:41:08:d5:8e:64:fd:2d:95:13:2b:53:71:83:
         f2:1a:51:51:3b:c1:cb:15:37:81:d0:2d:b7:f6:c1:48:2e:c2:
         ee:40:4d:b5:25:39:cb:58:e3:98:f2:3b:3a:c0:cf:8c:80:86:
         28:b2:60:00:fe:82:bd:86:70:9e:ed:bf:e9:5f:a3:49:1d:ef:
         fd:79:e3:fe:bb:7b:5b:02:d2:07:1f:71:7a:78:3c:86:81:72:
         bf:23:81:74:49:c0:ca:f1:05:cf:4d:26:05:62:ee:88:1c:49:
         16:33:6e:29:16:b1:85:4d:a9:c9:a4:62:b3:ba:60:51:30:f5:
         ab:c4:55:38:61:ad:dc:79:90:22:d0:51:2e:8a:50:d0:e9:1f:
         f0:05:07:34:34:45:4e:f1:72:4e:c4:4c:0b:f3:a1:42:2e:bd:
         d5:46:9a:79:9d:f3:93:a0:5c:10:51:f4:0f:17:39:96:c4:80:
         bf:5f:03:22:85:71:23:1b:67:a7:2f:c8:33:b1:2d:bd:ab:8c:
         33:bc:66:c6:07:20:01:02:cc:93:85:50:73:de:a5:86:33:89:
         4c:75:be:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:10 2024 by rpki-client on console-fra.rpki-client.org