Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0d56f5-d891-4283-9aca-93bd2a3d5293/1/awb3JA1ymLkisOCzI5dYl2ov0I8.mft
File:                     awb3JA1ymLkisOCzI5dYl2ov0I8.mft (raw, json)
Hash identifier:          0Y5G2wkw/CXYWyG8N0mJksD0q7AOmle2xyhNwbWTaLk=
Subject key identifier:   61:C9:0E:BA:0B:66:B1:65:CB:E8:09:85:70:21:D3:AF:D3:5F:0D:9D
Authority key identifier: 6B:06:F7:24:0D:72:98:B9:22:B0:E0:B3:23:97:58:97:6A:2F:D0:8F
Certificate issuer:       /CN=6b06f7240d7298b922b0e0b3239758976a2fd08f
Certificate serial:       018F87B66E7EC70FE113AB1ECE883A284ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/awb3JA1ymLkisOCzI5dYl2ov0I8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/0d56f5-d891-4283-9aca-93bd2a3d5293/1/awb3JA1ymLkisOCzI5dYl2ov0I8.mft
Manifest number:          BC
Signing time:             Fri 17 May 2024 18:00:31 +0000
Manifest this update:     Fri 17 May 2024 18:00:31 +0000
Manifest next update:     Sat 18 May 2024 18:00:31 +0000
Files and hashes:         1: awb3JA1ymLkisOCzI5dYl2ov0I8.crl (hash: hb+RFEadN1aJ/4wI24EWoa2O5yBJy9BsvyOhzX5jEGo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/0d56f5-d891-4283-9aca-93bd2a3d5293/1/awb3JA1ymLkisOCzI5dYl2ov0I8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/0d56f5-d891-4283-9aca-93bd2a3d5293/1/awb3JA1ymLkisOCzI5dYl2ov0I8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/awb3JA1ymLkisOCzI5dYl2ov0I8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6e:7e:c7:0f:e1:13:ab:1e:ce:88:3a:28:4e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b06f7240d7298b922b0e0b3239758976a2fd08f
        Validity
            Not Before: May 17 18:00:31 2024 GMT
            Not After : May 18 18:00:31 2024 GMT
        Subject: CN=61c90eba0b66b165cbe809857021d3afd35f0d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:a0:a3:e6:a1:7a:2a:f9:98:09:12:e1:53:
                    20:34:db:87:07:4e:49:dc:4b:d3:7a:d0:fd:92:f3:
                    03:95:f3:e7:a7:f3:c4:a2:62:14:4f:62:f4:ab:bf:
                    f6:a3:dc:e4:77:01:1f:d1:26:c3:38:a0:51:4f:d4:
                    ff:28:da:c2:5a:9b:ee:4c:22:7b:07:af:88:9b:9f:
                    bb:0b:dd:73:17:b4:b8:01:d2:52:dd:eb:93:48:21:
                    89:35:d5:a5:8f:5f:e9:27:56:2d:88:43:d7:04:24:
                    21:c9:88:7c:3e:8d:4f:fa:35:70:22:78:63:8f:64:
                    57:a6:9a:6b:a5:aa:8d:3e:26:37:12:81:6d:15:9e:
                    85:8f:49:7d:0a:cb:8b:ab:0e:8c:02:63:a0:c5:bd:
                    2c:87:35:06:c1:c6:8e:64:1a:f3:fe:fe:09:82:91:
                    3e:48:af:a3:39:90:98:87:14:f7:27:de:8d:11:80:
                    75:90:4f:a4:84:9c:3c:2b:f0:ec:b6:ee:f8:23:22:
                    11:58:3d:fc:cb:92:1d:12:20:59:a6:72:98:5a:60:
                    06:c6:9b:56:95:7c:7a:25:58:d0:20:12:eb:69:a3:
                    16:43:a8:01:86:5c:a2:e1:10:c2:d1:10:d7:15:4f:
                    e0:52:da:a1:90:80:53:2c:a3:81:33:b6:f0:9d:04:
                    4c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C9:0E:BA:0B:66:B1:65:CB:E8:09:85:70:21:D3:AF:D3:5F:0D:9D
            X509v3 Authority Key Identifier:
                keyid:6B:06:F7:24:0D:72:98:B9:22:B0:E0:B3:23:97:58:97:6A:2F:D0:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awb3JA1ymLkisOCzI5dYl2ov0I8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0d56f5-d891-4283-9aca-93bd2a3d5293/1/awb3JA1ymLkisOCzI5dYl2ov0I8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0d56f5-d891-4283-9aca-93bd2a3d5293/1/awb3JA1ymLkisOCzI5dYl2ov0I8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2f:d2:d9:94:dd:fa:92:23:3f:19:df:ff:37:81:ca:87:d6:
         23:5a:28:0d:18:72:d0:44:38:59:7b:00:9e:b0:2d:f2:d9:c2:
         7f:c7:87:bf:94:58:e1:87:af:6c:ff:22:d5:fd:cb:56:90:9f:
         3f:c1:77:41:2a:84:ff:6c:6f:10:44:68:36:13:12:a8:07:fd:
         ea:b0:ea:c6:bd:68:f7:d7:46:ba:14:56:87:0b:db:72:31:ee:
         c6:75:f0:7c:7f:b8:8d:81:9a:6c:a1:d8:a0:f4:1b:83:a6:9c:
         6d:ce:96:c2:04:7a:be:e4:29:ce:e3:12:e7:36:ad:be:e2:e6:
         e0:99:0a:07:a9:a5:b5:00:89:a5:bf:4f:04:c6:25:69:d7:ed:
         2a:f0:00:15:dd:e4:6f:0a:55:ac:9c:81:9e:ed:f5:9c:d7:c0:
         52:31:74:1d:fe:3d:dc:3e:32:a1:8d:40:d4:31:89:55:ec:27:
         6f:53:82:29:34:9c:86:fe:6c:3e:a5:f4:5f:cc:8f:09:97:22:
         52:a8:80:4f:45:a4:4a:74:0e:4a:91:17:38:4f:eb:ec:4d:7f:
         4c:3c:96:4d:52:10:74:80:c3:3f:42:b7:ad:af:35:75:ab:5d:
         93:11:9b:7b:5e:e3:9f:6d:25:8c:e8:c7:95:ba:70:91:ca:7b:
         61:9e:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:13 2024 by rpki-client on console-fra.rpki-client.org