Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
File:                     _mHZDno6nbbaJtAfLNuiI1G0eXg.mft (raw, json)
Hash identifier:          GbyFBjkI7EKAKubC9UmvWxcQvoTsZZc2fL1YnkEyvGE=
Subject key identifier:   77:3A:87:49:9C:13:D0:C0:94:B3:90:0B:A9:32:AC:02:17:7B:B1:92
Authority key identifier: FE:61:D9:0E:7A:3A:9D:B6:DA:26:D0:1F:2C:DB:A2:23:51:B4:79:78
Certificate issuer:       /CN=fe61d90e7a3a9db6da26d01f2cdba22351b47978
Certificate serial:       018F8636021BCB955993EA55B3AC1EF0BF62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_mHZDno6nbbaJtAfLNuiI1G0eXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
Manifest number:          04AF
Signing time:             Fri 17 May 2024 11:00:37 +0000
Manifest this update:     Fri 17 May 2024 11:00:37 +0000
Manifest next update:     Sat 18 May 2024 11:00:37 +0000
Files and hashes:         1: _mHZDno6nbbaJtAfLNuiI1G0eXg.crl (hash: wy0S4smMGcT6oUcdxeQshyQT1eW3OIKZBODWLn4tTeA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_mHZDno6nbbaJtAfLNuiI1G0eXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:02:1b:cb:95:59:93:ea:55:b3:ac:1e:f0:bf:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe61d90e7a3a9db6da26d01f2cdba22351b47978
        Validity
            Not Before: May 17 11:00:37 2024 GMT
            Not After : May 18 11:00:37 2024 GMT
        Subject: CN=773a87499c13d0c094b3900ba932ac02177bb192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:eb:67:97:95:b9:2d:86:5e:14:94:24:d2:
                    82:1c:7b:bf:f2:39:62:58:aa:dd:96:d9:63:65:16:
                    6e:08:5c:15:7c:d7:e7:b0:11:e4:2f:7a:79:bf:df:
                    8d:de:86:92:92:4f:ca:39:c5:1b:fe:4e:fd:c4:d6:
                    32:80:36:45:9b:24:d7:71:78:16:60:a3:4d:00:7b:
                    af:16:49:12:a2:f5:7e:7d:e9:e4:71:f9:8c:4d:7f:
                    ef:c9:a8:bc:d9:7d:cf:a3:c1:da:c7:08:3b:ff:da:
                    70:bd:7e:50:a1:df:b6:dd:95:93:22:4f:5a:23:f2:
                    d6:0e:97:dc:dd:08:31:e3:c2:15:0a:71:2f:63:56:
                    6b:c8:b0:71:0c:36:c7:0c:ab:6b:9b:01:7b:ff:17:
                    39:79:e8:dc:89:f0:73:b6:9c:0a:28:72:ef:67:ac:
                    7f:48:0b:fa:b8:8b:42:69:40:53:a4:eb:2d:2d:1d:
                    13:f4:a2:bc:bc:9d:78:82:4d:45:d1:f1:4c:5d:b2:
                    7d:23:d5:35:0f:c1:ae:4c:9b:c6:28:82:7e:fe:94:
                    48:85:21:fb:a0:ad:da:bf:4d:f7:6d:08:35:88:d6:
                    cc:8d:04:aa:fa:08:00:67:23:49:af:46:39:55:d5:
                    6e:1c:5c:40:a4:1d:c4:f0:15:5b:12:44:2e:bd:f7:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3A:87:49:9C:13:D0:C0:94:B3:90:0B:A9:32:AC:02:17:7B:B1:92
            X509v3 Authority Key Identifier:
                keyid:FE:61:D9:0E:7A:3A:9D:B6:DA:26:D0:1F:2C:DB:A2:23:51:B4:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mHZDno6nbbaJtAfLNuiI1G0eXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:47:7b:14:22:61:29:01:65:cd:5e:48:2e:cf:75:ff:79:d2:
         d7:ae:0e:64:21:38:8c:24:c7:e6:64:db:5a:84:0f:50:a3:c5:
         36:11:e9:49:4e:ad:2e:21:b1:60:b2:7f:11:3b:5a:ff:c7:c1:
         da:62:99:74:96:de:d6:a0:1b:80:16:3b:64:d9:e1:da:ad:65:
         a5:b4:b4:e0:d5:57:ba:f2:fd:93:c7:82:d5:27:19:df:4f:4d:
         93:35:e0:53:85:40:b3:85:5c:29:bf:9a:68:13:b0:31:78:e9:
         fc:f4:09:59:34:aa:46:ac:b1:7f:2b:2d:6c:cc:9c:28:ce:d1:
         2c:e5:c6:e5:d9:19:5d:64:e5:a8:5c:e2:29:2e:29:c8:4f:40:
         a5:08:8a:24:71:0a:f0:19:fc:79:f4:3a:0a:32:03:b2:0a:72:
         64:82:72:c1:04:45:bb:a7:fd:0f:06:55:c4:7d:13:2a:02:68:
         cd:5d:1e:82:ed:be:99:f1:c2:ca:d5:7c:98:3a:58:39:8c:f9:
         ce:ce:64:1f:57:21:ce:7b:12:ec:04:76:14:dd:77:a0:8f:1b:
         7f:b4:24:df:52:59:07:30:b7:4d:47:c9:60:15:db:bf:2a:c7:
         c1:c7:b5:ef:d1:01:ac:17:16:0e:1d:59:02:56:73:2a:f2:36:
         1d:9e:be:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:57:30 2024 by rpki-client on console-ams.rpki-client.org