Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7eb2c2-87d1-4f0a-959f-ff0f5f6a2ad1/1/41ilc3za79__HmejgucHy67e-fc.mft
File:                     41ilc3za79__HmejgucHy67e-fc.mft (raw, json)
Hash identifier:          6Dectwtx7QVIetVSC83iUjg5U5s1i1JfnwwvV+lkiz4=
Subject key identifier:   8F:53:73:CD:56:00:8A:FB:9E:AB:AA:B0:29:8A:63:96:89:79:F2:9F
Authority key identifier: E3:58:A5:73:7C:DA:EF:DF:FF:1E:67:A3:82:E7:07:CB:AE:DE:F9:F7
Certificate issuer:       /CN=e358a5737cdaefdfff1e67a382e707cbaedef9f7
Certificate serial:       018F570389DC5A4582B5BB03AF07AB697127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41ilc3za79__HmejgucHy67e-fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/7eb2c2-87d1-4f0a-959f-ff0f5f6a2ad1/1/41ilc3za79__HmejgucHy67e-fc.mft
Manifest number:          1086
Signing time:             Wed 08 May 2024 07:03:20 +0000
Manifest this update:     Wed 08 May 2024 07:03:20 +0000
Manifest next update:     Thu 09 May 2024 07:03:20 +0000
Files and hashes:         1: 41ilc3za79__HmejgucHy67e-fc.crl (hash: 5bVgb47J51r1+iCvVYMMJAOTiwAaIZ1pVo246y1K1kc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/7eb2c2-87d1-4f0a-959f-ff0f5f6a2ad1/1/41ilc3za79__HmejgucHy67e-fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/7eb2c2-87d1-4f0a-959f-ff0f5f6a2ad1/1/41ilc3za79__HmejgucHy67e-fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41ilc3za79__HmejgucHy67e-fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:03:89:dc:5a:45:82:b5:bb:03:af:07:ab:69:71:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e358a5737cdaefdfff1e67a382e707cbaedef9f7
        Validity
            Not Before: May  8 07:03:20 2024 GMT
            Not After : May  9 07:03:20 2024 GMT
        Subject: CN=8f5373cd56008afb9eabaab0298a63968979f29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:6b:3d:34:fb:db:6e:9b:8e:b5:a5:5e:f7:
                    bc:89:f5:9b:8d:0a:c5:9c:b1:fa:06:7f:c7:c3:00:
                    df:41:45:9e:da:7f:67:80:1e:f5:e9:7c:48:11:b0:
                    19:64:f4:0d:8b:82:3a:b9:84:ea:b5:8d:83:03:55:
                    17:5c:1e:4b:b4:c8:37:ea:0c:f9:72:f7:04:ef:0f:
                    9a:20:4d:66:44:f1:84:79:da:00:ef:2f:fd:2b:b0:
                    2b:74:ae:6e:ba:c7:e6:3e:27:1d:7c:91:63:a3:95:
                    26:e2:96:f7:1a:e9:dc:1e:56:77:bb:c2:25:d9:6c:
                    d1:b9:b9:d4:1e:b2:4d:8e:09:07:fc:ea:31:eb:34:
                    0d:9a:9c:1f:c4:b2:d4:0f:e5:18:88:c0:04:0c:a4:
                    35:06:5b:38:41:c6:d4:55:8f:35:29:97:f7:15:e0:
                    bb:92:8d:a5:9f:b6:0a:cd:33:68:d9:a8:fe:8a:78:
                    3c:01:96:43:e4:95:6a:d7:bf:f5:20:69:ff:14:26:
                    b5:48:f6:75:4b:11:50:35:ae:0e:e2:3e:40:e7:d3:
                    b9:bb:0e:8b:11:0f:6e:c4:15:fc:a5:b2:c5:3b:9f:
                    82:df:fc:ec:fe:74:a6:5e:95:17:9b:66:7b:eb:15:
                    25:e9:7a:28:e1:88:f1:a0:43:19:4f:f0:44:f2:d1:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:53:73:CD:56:00:8A:FB:9E:AB:AA:B0:29:8A:63:96:89:79:F2:9F
            X509v3 Authority Key Identifier:
                keyid:E3:58:A5:73:7C:DA:EF:DF:FF:1E:67:A3:82:E7:07:CB:AE:DE:F9:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41ilc3za79__HmejgucHy67e-fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7eb2c2-87d1-4f0a-959f-ff0f5f6a2ad1/1/41ilc3za79__HmejgucHy67e-fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7eb2c2-87d1-4f0a-959f-ff0f5f6a2ad1/1/41ilc3za79__HmejgucHy67e-fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:5f:41:ea:f0:f4:53:5e:9d:04:e2:32:7b:5f:cb:bc:96:
         5d:89:68:50:b1:16:dd:7f:78:5f:e7:09:1e:91:c0:a1:c7:69:
         ab:8f:7c:4f:7b:6e:b4:75:aa:ab:a6:21:4d:fa:80:c7:0c:32:
         d0:ec:30:e9:f2:4f:a0:06:53:18:8f:5a:36:96:8d:03:fa:8d:
         61:f6:fe:7f:ba:78:46:35:b0:26:42:f0:a3:5b:6c:7e:fc:5f:
         95:9b:8e:ba:37:68:ef:64:a0:3f:25:9a:10:be:80:66:82:ad:
         b0:25:b4:cf:1f:2e:21:07:e6:da:96:9d:46:f0:7e:b3:54:33:
         db:68:cc:dc:72:40:1d:cb:8f:c0:4e:e2:d0:a8:84:b5:92:fb:
         b8:a1:23:3f:ef:ff:a6:8e:86:83:bd:c5:db:aa:62:c0:23:0e:
         99:3f:9b:ed:1c:f5:4b:03:44:7e:17:ae:04:5b:66:6b:bb:7b:
         5a:01:02:47:74:b8:1c:95:97:44:70:44:26:09:df:bd:96:2a:
         e9:de:34:64:40:bb:64:05:1c:8a:61:29:db:be:90:6a:7a:de:
         da:5b:8c:d6:1c:38:6e:5e:4b:0f:59:12:0f:aa:3e:a2:22:ad:
         d1:8e:f1:0b:4e:2a:ce:6d:36:8f:38:58:10:b7:97:44:81:95:
         5a:08:be:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:52:53 2024 by rpki-client on console-ams.rpki-client.org