Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File:                     2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier:          pBu91M6QAUnZzZ9PjZZV+GFisacoOKiRIJ9x4Yu5PiY=
Subject key identifier:   B2:5D:E1:0A:84:CB:19:6B:64:B3:D6:1C:B4:4F:AC:13:EE:06:50:E9
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer:       /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial:       018F3BFAF36808DE74C90560F075E69B07A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number:          114E
Signing time:             Fri 03 May 2024 01:04:13 +0000
Manifest this update:     Fri 03 May 2024 01:04:13 +0000
Manifest next update:     Sat 04 May 2024 01:04:13 +0000
Files and hashes:         1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: jrCrei7HOOhKGASoxsK95hTBbGEK18gev4zA2hu/LmA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:f3:68:08:de:74:c9:05:60:f0:75:e6:9b:07:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
        Validity
            Not Before: May  3 01:04:13 2024 GMT
            Not After : May  4 01:04:13 2024 GMT
        Subject: CN=b25de10a84cb196b64b3d61cb44fac13ee0650e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:57:38:90:bd:3a:01:7d:a3:84:48:22:9b:
                    93:50:58:a8:f1:7f:a9:5d:32:a7:8e:57:73:3c:0c:
                    0f:43:32:1f:b7:6b:2f:c4:77:84:e5:3d:9f:41:19:
                    2b:79:48:31:f5:33:e9:5e:12:6e:66:19:ad:5f:fe:
                    38:8d:04:c6:d9:0e:01:9a:a4:5f:99:82:c1:9b:40:
                    86:a9:aa:e2:0a:f6:63:c6:3e:85:a1:21:d5:c4:e4:
                    02:11:d4:b4:63:ee:da:45:8a:5a:6c:bf:1f:82:0c:
                    7a:a0:b5:de:f0:dc:88:59:b7:57:aa:b5:85:cd:e4:
                    fa:ec:65:5e:87:3a:69:2f:f8:ec:65:70:5b:9a:f0:
                    c9:a0:48:77:31:e2:85:13:27:0d:3e:1c:97:f0:9e:
                    aa:42:50:31:6f:bb:de:82:3f:dc:52:70:6f:61:18:
                    fb:3c:8d:65:63:e0:9b:60:7b:09:b4:7e:23:83:9e:
                    28:28:06:fb:2d:b6:4f:cf:d8:b1:21:14:1d:dc:59:
                    09:2c:8f:53:5a:d8:c4:01:0b:f1:1b:5a:17:99:1d:
                    c0:1c:9b:00:61:01:a8:ea:55:1c:a0:bd:ba:b1:83:
                    14:c8:74:35:5c:d2:91:b6:b7:39:50:f1:83:45:8b:
                    56:f7:2e:ae:05:11:1c:64:80:e1:db:3b:c1:39:50:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5D:E1:0A:84:CB:19:6B:64:B3:D6:1C:B4:4F:AC:13:EE:06:50:E9
            X509v3 Authority Key Identifier:
                keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:23:2e:d5:a2:0d:c6:d2:1e:36:cb:76:a0:46:82:da:5f:6f:
         9b:4e:bc:aa:cd:44:c8:a3:28:30:b6:3e:73:8a:fe:e8:ba:30:
         c9:d9:e9:b4:ca:c4:6f:38:e6:ae:a6:61:f7:6c:6a:90:44:8b:
         20:6d:70:9e:c4:60:fa:80:70:95:3d:e3:41:c3:b2:30:17:14:
         9e:ab:f2:ff:46:f0:f5:7c:8c:29:8b:8f:95:d6:2c:ba:f1:24:
         1d:86:e8:f1:f6:9f:81:b7:d9:27:1b:52:83:bf:3c:4c:c2:45:
         3c:b6:53:f3:69:54:27:3e:a9:5f:20:79:ac:b5:05:3e:6c:66:
         84:d8:3b:aa:07:37:a7:e9:fc:e4:58:05:86:78:72:47:d5:f2:
         d2:e4:e0:22:a7:6e:42:96:45:cf:22:8c:16:ab:ae:58:c0:44:
         48:6d:b9:49:16:72:ef:2f:0d:82:30:09:69:aa:09:f5:a4:2c:
         d0:ed:09:83:54:9b:bf:da:09:07:30:ed:08:fe:c2:05:19:ab:
         70:e6:84:c6:d2:30:e6:5b:99:0e:63:88:40:db:c2:8e:af:27:
         ac:72:d6:84:62:a9:25:b0:18:7c:6f:3c:ab:b3:fb:db:78:67:
         6c:cf:b7:99:32:d9:2c:73:ca:34:c5:59:d0:54:00:92:99:e0:
         ec:b4:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:44:40 2024 by rpki-client on console-fra.rpki-client.org