Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
File:                     CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft (raw, json)
Hash identifier:          nEjfgQwxo07KC0h4CFIpbv2Qd11CVpT7ZNLN3DFF7K4=
Subject key identifier:   16:D5:D5:42:E2:C1:93:6D:64:B0:88:78:E0:6B:4C:5A:BE:5A:0D:1D
Authority key identifier: 08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
Certificate issuer:       /CN=0817255df3130bdb77fc37187d06005fee066724
Certificate serial:       018F3AAF0A1C314B1764B18216468A7833C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
Manifest number:          0ADE
Signing time:             Thu 02 May 2024 19:01:40 +0000
Manifest this update:     Thu 02 May 2024 19:01:40 +0000
Manifest next update:     Fri 03 May 2024 19:01:40 +0000
Files and hashes:         1: CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl (hash: ad3MPdyU6yzD47/PItAdx6LNXDkA1BCo/ZUkpBuuufo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:af:0a:1c:31:4b:17:64:b1:82:16:46:8a:78:33:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0817255df3130bdb77fc37187d06005fee066724
        Validity
            Not Before: May  2 19:01:40 2024 GMT
            Not After : May  3 19:01:40 2024 GMT
        Subject: CN=16d5d542e2c1936d64b08878e06b4c5abe5a0d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:e9:40:26:c8:25:d3:73:00:07:94:83:44:
                    f2:65:59:dd:76:87:ac:be:2a:88:82:cb:8f:b9:ae:
                    39:75:e4:46:be:52:ba:0a:47:35:24:a0:f2:4f:f1:
                    ce:5d:71:4a:7d:f9:4c:4b:86:88:73:d7:1c:14:d9:
                    48:4e:24:b1:60:39:cb:2c:0f:12:43:dd:1d:f7:93:
                    09:8b:5d:f1:ef:a6:bb:e8:3c:7c:ac:f8:96:4f:6c:
                    71:8d:9e:7b:30:43:77:0d:63:47:4c:90:73:29:d1:
                    c9:b7:4f:89:c0:a7:d4:5e:e6:26:4d:d6:cd:05:de:
                    99:62:48:69:23:4c:cc:df:c5:82:2c:c2:ed:56:55:
                    81:dd:e5:4a:04:7e:a0:70:fd:71:8f:82:45:bd:2c:
                    03:c3:e7:c9:ba:32:6c:9d:c1:67:62:fc:e2:26:61:
                    7b:13:a5:d1:21:bb:73:ad:36:43:c4:6f:a8:9b:6d:
                    50:8a:6f:3e:bd:3c:0d:64:ac:37:36:8d:a4:b0:c7:
                    69:7b:e9:f2:50:c3:c5:60:bd:e1:29:d7:7f:fa:46:
                    fe:90:90:2d:cc:cb:35:d3:0c:c4:66:fa:4d:6b:11:
                    d7:32:2e:50:9d:59:da:4b:80:9b:92:91:ab:13:c9:
                    c1:11:73:76:17:0e:4f:09:f8:94:3f:2d:a3:00:4e:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D5:D5:42:E2:C1:93:6D:64:B0:88:78:E0:6B:4C:5A:BE:5A:0D:1D
            X509v3 Authority Key Identifier:
                keyid:08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:34:09:dd:04:2c:00:0a:05:bb:08:52:23:25:d2:fd:0a:
         45:73:59:11:10:e7:39:ad:cd:5d:bc:46:57:ce:8d:0a:30:c8:
         b7:c0:34:3c:ec:31:73:78:e6:81:2e:17:14:37:c3:04:05:e1:
         d0:bf:62:51:c3:3c:80:d1:36:4a:a8:fc:c6:03:5f:65:cb:39:
         71:bf:98:84:61:8c:20:07:41:10:ef:b0:d7:e0:62:b5:4f:d0:
         f1:12:6a:6b:bd:1f:da:d7:62:9d:52:88:be:d6:32:94:f6:a8:
         47:cf:6b:86:11:af:af:d4:d3:31:8b:37:c8:44:24:20:a1:33:
         13:0f:98:a2:52:eb:cc:19:56:47:0a:86:73:df:fa:04:21:5e:
         2e:4e:19:09:28:ca:dc:6f:73:9f:81:28:83:b4:75:16:86:e2:
         04:00:b2:8b:2d:5d:16:61:7f:bb:16:71:97:aa:6a:a9:98:b6:
         1a:b3:ed:b3:47:94:99:bf:3f:57:e5:82:7d:35:35:66:6c:6f:
         ea:59:15:f9:c5:79:6d:db:49:d6:e8:59:f3:cd:d3:ba:37:5b:
         b5:40:e7:da:16:82:fc:32:62:cd:9a:a3:e8:58:d3:12:17:79:
         1e:65:0e:28:a6:d0:12:90:7f:2d:4b:14:79:08:80:90:e8:0f:
         d3:c9:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:31:18 2024 by rpki-client on console-fra.rpki-client.org