Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
File:                     Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft (raw, json)
Hash identifier:          2ha7zCEIIvzcTPVzmGnuoOcjzmXK6UjdCHwtCKwEOf0=
Subject key identifier:   E4:67:6B:D9:16:42:E7:50:10:4F:9F:85:77:6C:25:7C:53:F6:63:60
Authority key identifier: 2B:0B:77:19:C7:0D:DA:59:F9:33:A6:C6:70:3C:31:B6:85:08:9B:4A
Certificate issuer:       /CN=2b0b7719c70dda59f933a6c6703c31b685089b4a
Certificate serial:       018F8824438B70F26B91AB678FF328766EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
Manifest number:          019C
Signing time:             Fri 17 May 2024 20:00:28 +0000
Manifest this update:     Fri 17 May 2024 20:00:28 +0000
Manifest next update:     Sat 18 May 2024 20:00:28 +0000
Files and hashes:         1: Kwt3GccN2ln5M6bGcDwxtoUIm0o.crl (hash: ylLa6AZjFArc8wO2EAuXafnIcQBN0Kzt+R10Tf66AXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:43:8b:70:f2:6b:91:ab:67:8f:f3:28:76:6e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0b7719c70dda59f933a6c6703c31b685089b4a
        Validity
            Not Before: May 17 20:00:28 2024 GMT
            Not After : May 18 20:00:28 2024 GMT
        Subject: CN=e4676bd91642e750104f9f85776c257c53f66360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a3:93:39:59:f1:c3:9f:0b:59:4e:99:5c:d8:
                    df:82:56:cd:2e:39:83:3b:08:3c:65:ff:de:68:c4:
                    19:d4:3d:03:8e:0b:92:1b:77:9e:f0:e5:5d:85:44:
                    d7:33:29:6a:72:38:e3:76:96:f7:59:dc:47:db:3f:
                    1a:16:aa:97:de:8b:5e:5b:91:4a:05:6d:c1:dd:70:
                    e3:6d:13:f2:ca:96:43:d6:36:9c:32:30:e5:f8:a7:
                    2c:b5:15:19:24:02:82:aa:7e:29:6d:ee:63:28:3a:
                    29:ac:1e:99:54:46:95:09:c7:87:e0:59:b7:66:d1:
                    7c:47:62:f9:c1:31:e8:8e:68:27:09:c8:46:63:31:
                    10:2a:4d:2c:93:46:da:65:24:57:48:d6:e8:7c:41:
                    08:cd:27:f0:a2:2a:17:f2:ee:46:91:52:83:b5:83:
                    6f:52:d4:7a:6e:6e:1b:88:e5:f9:ca:a6:df:b3:c1:
                    74:2f:d4:ee:9b:46:78:3a:31:46:65:95:fb:f5:a7:
                    d3:23:bf:77:2e:6b:fd:88:34:fd:65:93:d8:51:8b:
                    7a:a3:dc:b1:2c:09:4f:63:a4:df:37:2d:0c:d2:7a:
                    75:e9:5f:99:1d:20:a2:55:71:3f:72:dd:46:e2:84:
                    c1:65:e7:55:8f:82:4f:ee:b8:be:06:d7:f0:4e:4d:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:67:6B:D9:16:42:E7:50:10:4F:9F:85:77:6C:25:7C:53:F6:63:60
            X509v3 Authority Key Identifier:
                keyid:2B:0B:77:19:C7:0D:DA:59:F9:33:A6:C6:70:3C:31:B6:85:08:9B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:6e:0b:b5:ea:fe:5e:52:e2:4b:db:b9:f3:90:0e:52:13:
         1c:f9:d0:c1:29:33:56:6a:6f:03:00:06:39:4f:43:07:f2:6a:
         b7:79:6e:48:48:40:81:63:01:d7:69:86:ce:81:9d:f4:c7:ef:
         e4:c4:73:0c:78:b6:ef:1a:ec:e2:40:87:b0:00:23:69:7a:6c:
         da:d3:93:ec:b1:1e:d3:50:bb:6e:14:80:5e:8d:ea:4d:2e:c2:
         9e:83:01:69:da:9f:2f:4c:43:cc:44:9e:e8:91:08:79:96:9f:
         72:ca:2d:cd:19:bf:fd:87:4a:fd:06:7d:da:d7:96:66:29:ba:
         1d:26:b4:dc:8f:a9:9e:b7:e7:be:96:96:14:a9:02:74:00:a5:
         bf:de:b3:1f:61:41:37:df:03:d9:ec:78:52:7e:e3:64:8b:b5:
         94:d9:fb:d5:ff:8f:19:bb:d5:f4:6c:20:57:e5:de:5d:00:cb:
         62:73:2f:f3:f6:69:8c:9c:9e:81:27:91:1f:4f:f5:6b:87:3d:
         9a:fc:91:28:4e:64:2e:30:be:6a:2c:0d:a3:55:34:3e:10:25:
         3f:92:e2:76:14:c2:64:77:3e:44:89:27:e8:51:52:7a:9e:3b:
         5a:a8:ae:cb:7e:9b:6c:dd:35:c5:c9:59:61:0e:33:c9:b4:62:
         7b:82:49:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:32:31 2024 by rpki-client on console-fra.rpki-client.org