Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d7a794-5e38-4e84-8156-460656fe3ab5/1/K7LQI0HBGUmoyHFT-GbA9o8bvXM.mft
File:                     K7LQI0HBGUmoyHFT-GbA9o8bvXM.mft (raw, json)
Hash identifier:          BNfnZX1ylln5zuymO8L1aeIVOWTCeub9mnfRH4Ni4HI=
Subject key identifier:   08:1B:9F:C3:09:0B:25:BD:45:84:72:CD:CE:7E:0E:67:3A:4F:DB:45
Authority key identifier: 2B:B2:D0:23:41:C1:19:49:A8:C8:71:53:F8:66:C0:F6:8F:1B:BD:73
Certificate issuer:       /CN=2bb2d02341c11949a8c87153f866c0f68f1bbd73
Certificate serial:       018F8DB87DC80E8E35C678B82980639BD423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7LQI0HBGUmoyHFT-GbA9o8bvXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d7a794-5e38-4e84-8156-460656fe3ab5/1/K7LQI0HBGUmoyHFT-GbA9o8bvXM.mft
Manifest number:          0348
Signing time:             Sat 18 May 2024 22:00:29 +0000
Manifest this update:     Sat 18 May 2024 22:00:29 +0000
Manifest next update:     Sun 19 May 2024 22:00:29 +0000
Files and hashes:         1: K7LQI0HBGUmoyHFT-GbA9o8bvXM.crl (hash: mv9upTWhWAAzQZCE2VtB5wO287p9yfP5ljug2RYlF4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d7a794-5e38-4e84-8156-460656fe3ab5/1/K7LQI0HBGUmoyHFT-GbA9o8bvXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d7a794-5e38-4e84-8156-460656fe3ab5/1/K7LQI0HBGUmoyHFT-GbA9o8bvXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K7LQI0HBGUmoyHFT-GbA9o8bvXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:7d:c8:0e:8e:35:c6:78:b8:29:80:63:9b:d4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bb2d02341c11949a8c87153f866c0f68f1bbd73
        Validity
            Not Before: May 18 22:00:29 2024 GMT
            Not After : May 19 22:00:29 2024 GMT
        Subject: CN=081b9fc3090b25bd458472cdce7e0e673a4fdb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:f9:de:d8:1e:2a:f7:96:48:2a:01:b5:5f:
                    a8:38:c6:8e:5a:88:5a:fe:26:fe:ba:f0:61:09:21:
                    0b:9c:a2:9d:a5:2e:14:7b:96:d6:04:36:2c:43:6d:
                    91:05:bf:35:c9:9e:9f:7d:10:99:02:cb:2c:d8:2c:
                    7e:ee:b7:0d:5b:b0:4e:56:09:aa:8d:1d:a5:b2:81:
                    15:54:0d:d0:9a:db:15:c6:e6:b7:9d:d2:b8:d1:bc:
                    25:81:65:65:ce:57:1b:f6:d2:80:5e:69:cc:01:d7:
                    53:73:8f:4e:04:da:42:78:7d:28:1c:8f:33:a6:22:
                    67:86:16:17:06:49:a8:06:aa:bc:65:d5:3d:0f:7b:
                    c4:95:ce:eb:0e:ee:44:f1:ff:63:df:13:3c:13:53:
                    18:1f:e4:01:a3:50:af:66:33:a7:5f:38:3c:0e:c8:
                    32:5a:78:5b:11:61:fb:4d:3c:e0:90:3b:b4:f3:db:
                    df:66:1b:8c:5f:d1:d0:94:97:2e:e7:ed:5b:d0:9c:
                    45:ac:9c:19:e2:43:e5:29:99:c1:d1:47:c6:80:61:
                    b4:33:8f:e1:d8:3e:e2:6d:77:07:e3:75:cd:d0:29:
                    a4:1f:72:8e:d8:2e:3a:3d:14:d6:50:ea:41:61:5e:
                    b8:75:06:c8:33:81:9b:ca:ad:e6:c0:42:64:c0:88:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1B:9F:C3:09:0B:25:BD:45:84:72:CD:CE:7E:0E:67:3A:4F:DB:45
            X509v3 Authority Key Identifier:
                keyid:2B:B2:D0:23:41:C1:19:49:A8:C8:71:53:F8:66:C0:F6:8F:1B:BD:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7LQI0HBGUmoyHFT-GbA9o8bvXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d7a794-5e38-4e84-8156-460656fe3ab5/1/K7LQI0HBGUmoyHFT-GbA9o8bvXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d7a794-5e38-4e84-8156-460656fe3ab5/1/K7LQI0HBGUmoyHFT-GbA9o8bvXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:79:79:ca:48:44:39:04:d9:80:a1:0a:f5:d9:78:e5:e7:5a:
         1e:74:97:40:44:1c:fc:1f:c2:b9:49:04:8e:03:df:f5:40:bb:
         4e:b8:9f:dc:e0:b8:61:ea:01:c4:26:af:3e:cd:ee:20:6d:cb:
         a7:bd:5d:1d:57:b8:67:a3:df:ca:1a:be:ea:5f:b9:b5:1a:dc:
         0d:f9:0d:6a:cf:2c:eb:d1:ea:3d:48:47:90:36:bb:3e:80:42:
         de:88:c0:de:ce:75:4c:ba:ad:6f:c8:80:04:5c:0a:0b:70:a4:
         0f:d2:27:ab:5e:c2:86:f3:3b:1f:89:ce:09:ec:0e:46:09:6c:
         2c:b6:3b:b3:63:00:90:1b:5b:a5:b2:c1:15:9b:62:19:39:02:
         d1:88:3a:aa:76:39:4d:9d:83:31:7c:ef:6f:57:29:91:7f:79:
         c4:87:4b:fa:3f:09:77:28:17:14:77:86:33:7c:0b:e0:e5:bd:
         01:86:56:58:87:a6:75:d8:d9:84:3d:3c:8c:44:4e:b2:22:f7:
         f2:ee:b1:c7:b4:40:e2:a4:a6:ce:ee:6c:e4:bf:c6:b2:5f:d7:
         b6:0b:8a:d6:18:b6:3e:a8:b7:be:9f:d9:5a:48:b3:93:8c:e3:
         97:47:01:d2:56:90:92:ad:97:2b:8b:c0:27:09:66:cb:ed:5a:
         c5:ff:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:24:00 2024 by rpki-client on console-fra.rpki-client.org