Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File:                     z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier:          kFXsSGlNL5HcCjyRVn8MslTs3ffQGkwKRMWf3lYmsDM=
Subject key identifier:   D4:7F:DA:2F:D2:9D:7A:FA:79:68:F5:12:8C:B4:CB:B8:EF:C9:FC:BA
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer:       /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial:       018F8937D82CB3102D2267BB65A7EF154E49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number:          04DF
Signing time:             Sat 18 May 2024 01:01:29 +0000
Manifest this update:     Sat 18 May 2024 01:01:29 +0000
Manifest next update:     Sun 19 May 2024 01:01:29 +0000
Files and hashes:         1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: IVNQEPb4udSx0/42cPDx8qKd6aQQ3pqEB0nyS/ar/4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:d8:2c:b3:10:2d:22:67:bb:65:a7:ef:15:4e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
        Validity
            Not Before: May 18 01:01:29 2024 GMT
            Not After : May 19 01:01:29 2024 GMT
        Subject: CN=d47fda2fd29d7afa7968f5128cb4cbb8efc9fcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:cd:48:c7:72:55:9d:50:92:ed:f7:7e:b3:
                    83:57:7e:b4:1a:aa:30:6b:c0:36:2f:c7:67:ef:dd:
                    c5:19:1d:b4:08:fe:0c:6b:a6:3c:3a:dd:a3:04:e8:
                    c8:8a:33:2d:f6:13:b6:fb:91:e5:3a:2a:84:f3:35:
                    a0:ab:3d:66:f9:e4:16:06:02:28:82:79:2f:2e:06:
                    01:21:06:67:14:86:7e:14:9e:58:fa:52:13:89:10:
                    5c:e9:44:87:5e:cb:cb:14:38:60:c4:d2:ee:f7:46:
                    a4:50:e9:07:70:79:44:94:20:7d:18:6a:95:f4:bd:
                    c4:77:cc:6a:36:ca:0a:20:5c:a9:aa:1a:8b:c4:7e:
                    60:dc:53:b9:5d:56:d9:27:eb:26:af:9f:50:b9:6d:
                    79:ff:a2:07:0c:96:65:09:e6:20:73:0e:6c:08:0f:
                    6a:5d:f1:71:a1:d0:cd:3b:6d:ec:8e:22:a0:91:17:
                    8b:b0:a6:ca:c1:2d:fe:04:8d:db:2c:a1:d1:4d:5c:
                    3f:b3:ff:4d:16:a9:a6:ac:68:43:e9:94:40:90:4f:
                    6a:8d:ec:4f:05:19:9d:0e:c2:e2:82:66:da:01:b0:
                    e0:a8:b6:1d:fb:02:ec:13:ce:54:9f:5c:29:39:da:
                    2e:97:6a:13:4c:75:1b:47:29:65:92:18:9c:f5:22:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7F:DA:2F:D2:9D:7A:FA:79:68:F5:12:8C:B4:CB:B8:EF:C9:FC:BA
            X509v3 Authority Key Identifier:
                keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c8:d4:3b:6f:77:89:30:8b:bb:a3:9b:90:8f:56:0c:82:53:
         d6:72:8b:cf:a6:bd:16:0b:d8:86:38:f5:25:2d:ba:20:8e:c0:
         72:6e:7e:7d:19:64:3e:e1:40:ee:62:08:b1:b7:da:66:b6:f2:
         96:f1:85:a1:b0:f2:34:82:5c:11:97:35:a8:00:fe:4c:e4:41:
         d2:5c:b0:79:aa:ec:df:18:ae:85:13:45:9d:b0:e1:c1:1b:ae:
         d9:7d:6b:c3:8d:68:0f:97:c1:30:96:d4:23:69:fe:0f:03:88:
         02:24:6c:bf:81:0d:f3:0c:8f:3e:91:cf:95:8d:98:8b:a7:3f:
         67:d7:63:0d:d3:c0:26:66:43:61:ac:0b:b6:2a:26:3e:6e:c5:
         46:b4:b7:18:92:57:df:42:d1:89:2f:73:92:cc:d4:35:55:23:
         d6:ef:c1:2f:c7:d2:9c:a6:1d:6a:d6:8a:97:13:1e:31:df:5c:
         51:d2:de:f1:2d:02:27:a1:3b:f4:f5:12:7a:c2:e8:d1:1c:b1:
         33:32:33:2b:d9:a5:a4:ad:6f:9f:64:e9:be:50:53:12:76:47:
         2b:7b:db:27:0b:b9:56:d9:f5:37:58:2d:d9:dd:98:fc:e7:40:
         5e:20:ea:74:7d:4b:8b:2e:71:16:99:25:95:be:6a:50:e5:a1:
         3a:9b:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:49:15 2024 by rpki-client on console-fra.rpki-client.org