Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File:                     rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier:          /mX9XdJYC87v9ns8M7oHcfGgRrNqzGcdj5JzH6vV9mY=
Subject key identifier:   80:C7:E2:85:E2:62:8E:07:27:65:3E:17:76:70:F2:52:19:61:12:9D
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer:       /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial:       018F87495CEA104C9B8F2872C18997D3AA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number:          0646
Signing time:             Fri 17 May 2024 16:01:23 +0000
Manifest this update:     Fri 17 May 2024 16:01:23 +0000
Manifest next update:     Sat 18 May 2024 16:01:23 +0000
Files and hashes:         1: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: dI8XZX6C70/5z2Xon/qyVFJsbEdnG4zf5lyj4NHWIUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5c:ea:10:4c:9b:8f:28:72:c1:89:97:d3:aa:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
        Validity
            Not Before: May 17 16:01:23 2024 GMT
            Not After : May 18 16:01:23 2024 GMT
        Subject: CN=80c7e285e2628e0727653e177670f2521961129d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:66:66:07:b4:11:f8:22:26:22:03:c8:a7:
                    9e:2c:49:0d:3a:98:4f:0d:fc:02:86:1f:af:c7:7a:
                    29:64:33:21:26:bc:d7:b4:c4:cb:8b:99:92:00:86:
                    80:af:28:c3:84:3c:0d:c5:63:9a:d2:07:a5:65:7b:
                    55:02:9b:78:39:9b:4a:ca:0c:5f:a5:e3:e7:e3:00:
                    88:9d:f4:bf:83:09:4b:a0:8e:b1:fe:62:3a:84:1f:
                    98:26:bd:d8:82:78:17:8e:f1:cf:80:73:14:6a:1b:
                    47:8b:e1:81:66:a2:63:b9:b5:14:f3:ad:4d:41:61:
                    8e:11:d6:2a:75:be:1d:0c:b3:26:b8:c1:c5:66:b3:
                    d5:4f:f4:88:25:49:a5:02:41:5c:52:ae:15:8a:ec:
                    db:04:e1:03:56:b8:d7:01:a3:04:2c:41:72:05:3a:
                    ff:69:f1:1c:aa:1c:3f:29:6f:0e:d8:b4:05:06:87:
                    72:59:99:d9:96:f7:96:34:cf:2f:1b:94:58:5e:d6:
                    e4:c4:d2:c6:f1:86:c2:6c:10:0b:11:f4:12:68:05:
                    d1:fe:0e:00:c6:63:5e:fd:fe:b1:c7:07:cf:d1:6a:
                    1b:3c:ea:43:74:6a:63:d1:ef:d4:09:dd:46:dd:6b:
                    65:3d:1f:17:c8:d2:45:e7:ae:0e:9c:e3:e6:d8:9e:
                    fe:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C7:E2:85:E2:62:8E:07:27:65:3E:17:76:70:F2:52:19:61:12:9D
            X509v3 Authority Key Identifier:
                keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e0:96:ce:61:bc:ed:c7:a8:65:49:23:e5:32:64:61:4d:a7:
         26:26:8a:41:66:4f:e5:5d:4e:53:6d:5e:ec:e6:29:e2:b5:ac:
         ac:f3:7b:11:10:15:2a:da:3a:db:29:7e:eb:48:17:8b:8d:f4:
         89:13:5f:57:81:04:ce:54:8e:3b:e7:96:6b:c6:25:b7:94:1a:
         bc:c6:f1:9b:94:a9:4f:6a:89:1c:72:9c:74:4b:4c:a5:58:b0:
         48:8c:d0:88:ad:a5:e5:14:5a:d8:e6:40:67:25:a9:d4:30:7d:
         11:12:74:be:7d:3b:76:5e:bb:1b:61:10:04:45:e2:3a:38:59:
         f7:62:66:06:48:41:cb:8f:9a:93:f0:39:17:d0:af:d9:41:f7:
         95:4d:00:1f:35:33:f6:c5:3f:45:2f:9a:56:c7:0d:9a:d4:b2:
         29:29:6f:55:cb:0e:fa:36:ac:1a:67:b8:b9:8a:97:f2:69:d1:
         fc:1b:99:a7:80:3f:66:ff:8f:ca:fe:2c:cc:8b:b7:07:6f:8c:
         9d:c6:12:63:01:6c:26:98:0f:56:5e:5a:49:33:e8:e8:5b:4b:
         45:5e:83:d2:55:02:e1:67:3c:39:fd:d2:06:cc:a9:62:20:c0:
         18:8f:68:a0:04:93:d1:2a:31:90:19:90:a8:8d:31:7e:19:3b:
         1e:2a:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:17:06 2024 by rpki-client on console-fra.rpki-client.org