Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/491f6d-5a2d-44db-a05f-d729239a7321/1/elAFZYHHeA6LbClE4MZPCRTfmD4.mft
File:                     elAFZYHHeA6LbClE4MZPCRTfmD4.mft (raw, json)
Hash identifier:          /hq0TrbJjM4ZOd8a72GXSQ+iqjN5+ZzTwGfwd7DoFh8=
Subject key identifier:   C8:4D:A4:AF:80:FA:BC:12:E7:D7:7A:35:AC:5A:C7:DA:67:50:76:53
Authority key identifier: 7A:50:05:65:81:C7:78:0E:8B:6C:29:44:E0:C6:4F:09:14:DF:98:3E
Certificate issuer:       /CN=7a50056581c7780e8b6c2944e0c64f0914df983e
Certificate serial:       018F87B6610FDC36913A2CC942309D8D5C6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elAFZYHHeA6LbClE4MZPCRTfmD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/491f6d-5a2d-44db-a05f-d729239a7321/1/elAFZYHHeA6LbClE4MZPCRTfmD4.mft
Manifest number:          1071
Signing time:             Fri 17 May 2024 18:00:27 +0000
Manifest this update:     Fri 17 May 2024 18:00:27 +0000
Manifest next update:     Sat 18 May 2024 18:00:27 +0000
Files and hashes:         1: elAFZYHHeA6LbClE4MZPCRTfmD4.crl (hash: EZWesUfJxAOtky9WLXFNOO+E/lqS8WDA+N5nNLmzPEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/491f6d-5a2d-44db-a05f-d729239a7321/1/elAFZYHHeA6LbClE4MZPCRTfmD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/491f6d-5a2d-44db-a05f-d729239a7321/1/elAFZYHHeA6LbClE4MZPCRTfmD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elAFZYHHeA6LbClE4MZPCRTfmD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:61:0f:dc:36:91:3a:2c:c9:42:30:9d:8d:5c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a50056581c7780e8b6c2944e0c64f0914df983e
        Validity
            Not Before: May 17 18:00:27 2024 GMT
            Not After : May 18 18:00:27 2024 GMT
        Subject: CN=c84da4af80fabc12e7d77a35ac5ac7da67507653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:53:78:d3:8a:83:ac:e1:26:79:f2:85:81:
                    7e:32:bf:18:79:de:6d:e0:09:c6:fd:17:4e:3f:92:
                    42:c7:9b:47:05:c3:b1:2b:dd:de:bd:cb:39:1a:ce:
                    42:a3:c8:88:1b:a1:64:be:17:91:bd:b3:22:16:68:
                    27:3a:7b:a0:05:24:67:43:5d:da:b7:fa:a7:e7:ee:
                    bd:ea:6e:7b:75:a1:be:df:29:b1:c7:db:5b:ad:f7:
                    b0:0c:56:61:42:12:b4:c0:a6:46:f7:79:b9:e7:07:
                    70:45:17:f8:f1:2b:c0:e1:99:e4:90:21:cc:33:5c:
                    89:11:d2:e3:dc:6d:4a:a9:ad:94:66:ad:99:6d:61:
                    e6:2c:be:d0:12:da:ef:e3:30:2e:b7:73:0e:f3:04:
                    55:aa:83:c0:da:3a:24:80:1e:e4:a6:98:c0:de:57:
                    0e:f0:04:9f:93:d4:f7:e6:50:dd:62:76:56:c6:f2:
                    11:57:1f:28:a3:a7:ea:f1:d0:cc:03:98:65:42:74:
                    a5:99:34:66:ae:1d:84:1f:b4:94:cc:08:4c:78:c0:
                    90:17:9e:c2:03:c7:01:32:5f:02:2f:f4:23:16:bb:
                    d3:ce:bd:09:b2:b0:a9:ab:e2:31:9b:c4:55:64:ed:
                    6c:5a:c1:03:47:3c:6f:1c:ca:83:75:87:4c:c0:d6:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4D:A4:AF:80:FA:BC:12:E7:D7:7A:35:AC:5A:C7:DA:67:50:76:53
            X509v3 Authority Key Identifier:
                keyid:7A:50:05:65:81:C7:78:0E:8B:6C:29:44:E0:C6:4F:09:14:DF:98:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elAFZYHHeA6LbClE4MZPCRTfmD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/491f6d-5a2d-44db-a05f-d729239a7321/1/elAFZYHHeA6LbClE4MZPCRTfmD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/491f6d-5a2d-44db-a05f-d729239a7321/1/elAFZYHHeA6LbClE4MZPCRTfmD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8f:b8:c6:94:1d:67:d8:4f:1d:8e:ad:70:f9:27:a0:0a:8e:
         63:74:f1:04:5c:83:8c:6b:52:1b:8b:24:66:7a:2c:39:ca:41:
         42:4b:48:5f:3b:7d:77:65:c8:70:cd:e4:f9:75:db:a8:64:b7:
         87:57:7e:c0:ba:23:9e:83:0b:3a:9b:d4:f8:50:21:e1:80:9e:
         5a:bf:97:01:1f:e2:3b:a8:3d:61:89:4a:73:60:26:a3:35:11:
         ee:2e:16:ff:32:ca:35:a4:27:61:23:ed:e1:fd:11:18:68:15:
         0d:62:59:aa:68:1a:53:e0:67:88:4a:f9:ce:35:5a:92:0f:be:
         c7:ed:1b:c9:fc:77:2d:1e:81:75:a3:14:55:d4:80:c2:09:d8:
         9f:05:41:32:92:f1:48:bf:92:b8:e3:99:8c:bd:84:da:a2:5a:
         11:4f:c6:10:85:3d:ad:12:0b:ca:3b:98:40:99:be:bf:7e:8b:
         41:ab:1b:60:e1:ca:cd:cb:66:1a:5a:56:1c:b2:eb:7a:97:62:
         2e:a1:be:63:d2:82:e4:43:81:dc:5d:ee:3d:05:c0:1b:d0:02:
         65:e5:98:93:e9:d7:9d:1b:0f:8a:a5:2d:a2:af:33:5d:a3:e3:
         9f:55:e3:29:29:63:ad:52:d5:68:42:ad:29:92:2b:3b:bd:fe:
         e8:f2:11:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:01 2024 by rpki-client on console-fra.rpki-client.org