Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File:                     76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier:          vMpZji3UoJg0+d+vCrMUMEhUFgL5ao58RInaXXZYGtc=
Subject key identifier:   55:A5:14:5A:99:42:1B:72:A6:C1:91:6E:DD:49:0D:97:4F:A7:84:F7
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer:       /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial:       018F3BF95F5458408B33BBF25D485BCF712A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number:          07A3
Signing time:             Fri 03 May 2024 01:02:29 +0000
Manifest this update:     Fri 03 May 2024 01:02:29 +0000
Manifest next update:     Sat 04 May 2024 01:02:29 +0000
Files and hashes:         1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: B08E3fg5Ppgg5PGjcnHDvhMScAL3pT8eTXyT7u4hr6U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:5f:54:58:40:8b:33:bb:f2:5d:48:5b:cf:71:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
        Validity
            Not Before: May  3 01:02:29 2024 GMT
            Not After : May  4 01:02:29 2024 GMT
        Subject: CN=55a5145a99421b72a6c1916edd490d974fa784f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:ba:00:08:ee:18:6f:75:d0:c4:3a:02:b0:
                    86:10:c9:57:82:f3:6b:dc:bc:75:65:5c:76:af:29:
                    1b:3c:f9:40:ee:99:3b:7f:7d:d8:30:e8:fc:54:c3:
                    de:a0:9c:b6:c4:e6:fc:c5:5a:0e:96:24:ef:27:e5:
                    5c:a8:b6:be:da:2a:9d:e9:b2:e3:e5:89:8e:07:92:
                    d7:be:dc:0d:b7:c6:ed:0e:d9:8e:e3:b7:fb:b4:63:
                    d2:90:5f:3d:9d:ea:9e:8b:b2:e1:b0:da:e8:65:6d:
                    84:19:c7:7d:78:93:03:05:3c:93:37:a1:aa:24:4a:
                    83:cf:a0:9a:9d:dd:1a:f7:7d:94:1a:0e:79:f0:69:
                    36:67:d6:6c:30:6a:36:61:a4:bf:b0:bf:44:1e:55:
                    96:75:12:0b:c0:8b:78:75:b8:0f:8e:35:12:58:e5:
                    f3:2e:67:8e:2f:fd:f4:e3:88:07:c9:51:af:d6:72:
                    5c:11:1c:cf:01:d0:d6:fd:d3:0f:e2:c9:e6:0b:5e:
                    b5:08:90:8f:cc:cf:00:a7:0c:5f:f1:82:a7:4e:18:
                    35:f4:b3:92:bf:10:7a:4a:f8:10:ff:18:7c:be:b9:
                    f9:50:f0:79:d9:8e:74:af:03:22:b9:f6:98:f1:90:
                    9a:96:ca:0c:51:0d:d4:7e:56:80:77:95:39:a1:06:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A5:14:5A:99:42:1B:72:A6:C1:91:6E:DD:49:0D:97:4F:A7:84:F7
            X509v3 Authority Key Identifier:
                keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:9f:15:d0:35:f0:cd:29:b0:45:c2:6e:23:8c:2d:d1:fd:a2:
         65:28:1a:0b:c4:16:2d:40:a6:c5:24:05:09:d4:39:39:7f:96:
         ec:95:54:dd:ef:a7:a2:55:dd:a4:c3:be:5f:86:98:2e:cc:79:
         92:47:ba:b6:a8:b4:ae:5a:84:79:a7:ee:9d:d4:54:4b:17:b3:
         70:63:73:0b:5b:95:c5:49:95:0c:d9:c9:8d:e7:d7:9c:2e:b5:
         b8:8b:e1:42:54:af:24:b2:71:d4:30:b7:f5:49:38:91:2c:aa:
         51:01:97:72:c9:94:f4:32:8e:11:30:5c:5a:6d:7f:47:a4:a4:
         1f:e2:42:33:d8:29:df:f0:48:9c:11:4f:8e:8b:6e:d7:b9:03:
         da:81:1f:eb:27:dd:40:ae:5f:4b:e3:55:4d:1e:a0:05:87:b7:
         ef:87:3c:94:26:92:0f:2b:49:fc:36:7e:64:02:bc:59:87:c5:
         60:64:26:8a:ac:db:93:8a:b9:33:26:b6:a0:31:cc:7a:e1:15:
         c0:24:dc:8d:28:e2:27:94:21:16:c7:be:ea:17:a6:f5:61:0b:
         3d:05:a4:7b:a4:1d:50:9f:a0:cc:da:e6:7d:a9:ea:d4:4b:91:
         a4:15:0d:75:e7:2f:d1:12:7f:f2:bc:14:54:90:f6:de:96:ab:
         7e:0f:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:51:10 2024 by rpki-client on console-ams.rpki-client.org