Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.mft
File:                     CSaQfEuWlut6_HQka5wpKSBfYQM.mft (raw, json)
Hash identifier:          8ODafNzv4dLhj7kTvfgUQ7nRHqq01xKfJBsg5rATFhE=
Subject key identifier:   BB:37:95:07:12:BA:20:79:11:AB:FB:AA:0F:81:BB:9D:53:78:74:6C
Authority key identifier: 09:26:90:7C:4B:96:96:EB:7A:FC:74:24:6B:9C:29:29:20:5F:61:03
Certificate issuer:       /CN=0926907c4b9696eb7afc74246b9c2929205f6103
Certificate serial:       018F55161A4BB65D924070083E1C34FBCA20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSaQfEuWlut6_HQka5wpKSBfYQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.mft
Manifest number:          0711
Signing time:             Tue 07 May 2024 22:04:22 +0000
Manifest this update:     Tue 07 May 2024 22:04:22 +0000
Manifest next update:     Wed 08 May 2024 22:04:22 +0000
Files and hashes:         1: CSaQfEuWlut6_HQka5wpKSBfYQM.crl (hash: z34kB/O2VVHWv+m4XivbskgRDtNhfODsz0xNbyhk740=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSaQfEuWlut6_HQka5wpKSBfYQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:16:1a:4b:b6:5d:92:40:70:08:3e:1c:34:fb:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0926907c4b9696eb7afc74246b9c2929205f6103
        Validity
            Not Before: May  7 22:04:22 2024 GMT
            Not After : May  8 22:04:22 2024 GMT
        Subject: CN=bb37950712ba207911abfbaa0f81bb9d5378746c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:50:01:eb:92:d7:6d:a0:ba:0c:ca:0c:3b:
                    a3:9c:8a:e0:37:53:d5:a9:0d:fa:29:2e:9f:44:1d:
                    c1:3c:44:a8:20:c8:eb:bf:23:fa:e0:bd:37:00:3e:
                    33:9c:35:29:f4:3e:0d:21:34:47:12:9b:e1:ed:7e:
                    43:19:75:af:98:72:74:41:3d:19:98:9d:61:33:fd:
                    99:6f:95:da:bd:8f:0a:0a:2c:ca:0d:f3:87:59:8f:
                    35:b2:aa:28:9e:79:b5:fd:33:11:4a:9d:e9:71:b9:
                    05:8c:f3:e5:1e:3e:12:90:f4:d7:3c:82:ea:fe:18:
                    22:e2:71:f8:ca:75:c9:46:1c:2b:0c:6e:38:4a:f1:
                    4c:12:e2:bc:24:b7:21:42:57:ba:8f:ab:e8:7e:85:
                    2e:f8:40:de:39:c0:3d:4d:9a:31:46:d6:59:07:b7:
                    aa:1f:6b:2c:66:eb:15:73:f6:32:f9:bf:f9:5a:65:
                    f8:38:04:3e:29:f2:af:0d:fb:39:ed:02:5f:c3:8b:
                    e1:cb:41:28:be:9d:b6:42:47:89:c9:b6:f0:5d:2e:
                    69:ae:b1:c6:7e:05:98:47:e4:07:a3:84:22:19:4f:
                    96:cf:ca:10:71:a0:d8:b8:8c:67:bb:14:d0:ff:c8:
                    76:0e:89:f6:dd:c2:17:66:25:58:67:78:c5:e2:55:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:37:95:07:12:BA:20:79:11:AB:FB:AA:0F:81:BB:9D:53:78:74:6C
            X509v3 Authority Key Identifier:
                keyid:09:26:90:7C:4B:96:96:EB:7A:FC:74:24:6B:9C:29:29:20:5F:61:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSaQfEuWlut6_HQka5wpKSBfYQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ac:0c:1b:a6:44:74:37:51:26:26:9a:14:bf:ca:45:8b:a4:
         50:ff:b2:67:06:dc:bf:5f:78:28:38:23:1f:16:e2:54:bf:fa:
         62:26:3e:6f:8b:3d:68:23:19:46:6b:5b:1e:99:ba:28:97:89:
         c4:7c:61:49:00:00:74:6a:16:7a:8c:a0:58:f6:ee:2b:75:e3:
         d5:e9:6a:ca:69:54:69:09:2d:c0:6a:f9:7c:58:68:13:b7:38:
         a7:61:89:cc:a5:c5:43:f5:05:54:85:73:44:da:21:ce:6c:21:
         a0:44:63:ef:5e:f1:4f:5f:e2:fc:29:5e:fa:a7:c7:aa:ca:2f:
         b0:68:de:1e:b8:79:b4:7a:69:17:82:b1:67:3f:ff:a5:de:a5:
         a2:f6:62:d6:be:5c:d7:15:6f:9c:42:0f:ae:e2:64:bf:20:a1:
         42:fc:aa:40:92:d6:08:ce:bc:df:da:96:78:5a:fd:e0:6f:7c:
         e4:14:31:0d:66:14:91:53:8c:0b:f6:61:bf:83:81:fc:8e:ad:
         ec:e3:df:1c:b4:6f:4e:27:5f:76:50:1a:70:15:20:31:6c:0d:
         0a:aa:76:a1:7c:73:76:11:05:b2:4b:be:27:ab:8c:fb:87:30:
         35:aa:06:ae:c0:96:29:41:ff:8e:60:0f:a3:81:5e:ba:c1:05:
         96:40:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:48:25 2024 by rpki-client on console-fra.rpki-client.org