Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File:                     go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier:          7zNYY1e+YY6W5GudaReoDo2dujRCfS3NUWPaKjBCYwY=
Subject key identifier:   73:95:3D:C9:68:FF:F9:45:F7:29:FC:B3:66:98:6E:6F:4F:9C:55:E1
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer:       /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial:       018F8749CB4362432AB3425CC300CDAC56A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number:          0164
Signing time:             Fri 17 May 2024 16:01:51 +0000
Manifest this update:     Fri 17 May 2024 16:01:51 +0000
Manifest next update:     Sat 18 May 2024 16:01:51 +0000
Files and hashes:         1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: ciOh3Lrd6MMfDiX0TK1c56f7qKbq+gYCnVMfD5MO6kE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:cb:43:62:43:2a:b3:42:5c:c3:00:cd:ac:56:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
        Validity
            Not Before: May 17 16:01:51 2024 GMT
            Not After : May 18 16:01:51 2024 GMT
        Subject: CN=73953dc968fff945f729fcb366986e6f4f9c55e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:1e:12:fd:05:5b:df:8a:ea:47:56:f3:18:
                    aa:bc:3b:38:09:5a:18:4a:e8:e1:cd:95:67:01:ab:
                    13:1b:70:a7:d7:95:1a:9b:6a:5c:44:d1:38:0a:06:
                    1b:b1:8e:29:d4:22:39:6f:32:7e:03:99:6f:f4:4c:
                    33:86:c4:a2:0c:86:0b:93:98:b1:a5:b7:1a:bd:e9:
                    fd:92:ae:a0:8e:ed:d1:c3:24:92:7d:d6:43:b3:f6:
                    6d:e6:4f:d3:b4:fc:30:d5:bb:a0:c7:47:2d:19:a3:
                    16:ee:ca:c5:32:14:67:1a:b2:17:d5:51:8e:97:9e:
                    13:c9:73:19:8c:6b:d2:9e:e5:b4:b1:1f:44:0f:7a:
                    a0:01:8d:8c:a8:2c:fc:4d:78:39:75:b4:e5:3e:fb:
                    b0:0f:e4:e3:93:ee:1a:86:29:0d:14:64:eb:08:53:
                    12:c6:ff:1b:7f:ca:5c:9b:b6:19:b9:72:0a:d9:66:
                    b3:01:71:6c:35:b1:83:f3:93:15:14:17:15:c3:aa:
                    0e:97:9f:2e:7e:12:69:17:42:6b:0c:1f:da:ff:9e:
                    4f:cd:8c:35:a9:00:b0:5e:50:49:b1:7e:58:b0:be:
                    30:13:cc:0c:de:df:e1:ae:f8:73:c5:ec:9b:41:b4:
                    eb:cd:ae:27:b1:ad:90:11:26:ab:16:f7:20:77:34:
                    ba:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:95:3D:C9:68:FF:F9:45:F7:29:FC:B3:66:98:6E:6F:4F:9C:55:E1
            X509v3 Authority Key Identifier:
                keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7f:03:d9:d6:9c:54:ca:4d:4d:61:62:71:bf:d8:89:a9:dc:
         9d:af:66:62:e1:31:2b:c0:e7:ee:43:f4:90:49:97:02:24:fc:
         82:2f:b4:dc:64:d3:68:b5:12:39:31:93:98:92:04:be:98:e9:
         3f:8d:0f:36:ab:8d:01:73:cc:cf:16:83:8c:7f:cc:73:92:0b:
         b8:bf:b1:e8:1c:a9:f9:98:d2:5b:4d:a0:54:67:63:eb:f0:d9:
         2d:0d:fc:30:27:9a:bf:74:13:b8:89:e7:de:0d:85:fa:bc:e7:
         ab:cb:69:58:e4:21:e3:8a:38:3a:15:6a:35:35:35:ab:58:d3:
         e1:42:96:ef:13:da:52:df:6f:65:84:fa:ca:55:43:3a:f6:30:
         d8:a9:58:40:c3:06:fd:bf:c4:11:87:42:08:fe:54:2e:66:06:
         ed:38:e9:d3:54:08:bc:32:fc:76:d2:d1:89:39:65:80:de:04:
         81:2d:72:90:9c:65:fd:03:80:a7:72:63:98:93:23:48:8b:c6:
         a5:e2:64:05:5b:1f:9f:5e:b3:05:2e:2b:b3:b3:1d:4d:a8:52:
         d3:2f:0f:91:d2:ea:66:b7:c8:97:c9:04:4e:20:9b:21:7f:ec:
         0e:28:b5:73:97:5d:c0:46:76:7d:23:06:06:7e:13:b2:81:6b:
         92:61:76:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:57:25 2024 by rpki-client on console-ams.rpki-client.org