Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File:                     3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier:          7es02FuZ+DiUWPpdvZUY0B56y6cWe2LhsNy3x309m2o=
Subject key identifier:   E2:E6:9D:35:04:AB:CE:FA:AE:84:73:44:A6:8E:F4:61:D5:62:3E:B4
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer:       /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial:       018F51A4C4500952D8F3FBDBF2FFC8AF6982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number:          05D2
Signing time:             Tue 07 May 2024 06:01:43 +0000
Manifest this update:     Tue 07 May 2024 06:01:43 +0000
Manifest next update:     Wed 08 May 2024 06:01:43 +0000
Files and hashes:         1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: +1yiWPfVrmsBEqRFDeTbhD4AGgcb72n58tdjqZdLNr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:a4:c4:50:09:52:d8:f3:fb:db:f2:ff:c8:af:69:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
        Validity
            Not Before: May  7 06:01:43 2024 GMT
            Not After : May  8 06:01:43 2024 GMT
        Subject: CN=e2e69d3504abcefaae847344a68ef461d5623eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:49:92:aa:40:48:15:61:f3:cb:e3:1d:c7:c3:
                    2c:da:d2:51:c0:e1:91:59:ad:b2:95:7f:f4:3f:9c:
                    fc:66:fb:e0:88:92:51:eb:79:00:f6:93:b6:03:da:
                    5d:fb:af:ec:a9:b3:6d:7c:ad:1a:ff:db:06:dc:b9:
                    98:ac:f6:fb:aa:89:fe:e3:43:a1:0f:b6:8c:12:c4:
                    e4:5f:b3:aa:06:6e:db:f5:d6:63:ce:eb:4e:8a:3a:
                    ca:ae:cf:8e:2e:ef:9d:0c:cf:f3:c0:c1:bc:87:40:
                    77:79:5f:9e:7e:7a:f8:c5:14:25:cb:3c:3d:f5:d2:
                    ae:12:be:1d:af:ee:46:42:73:3e:ef:60:34:05:46:
                    56:7b:b9:b4:ad:38:56:29:78:3d:da:b4:7c:22:06:
                    d8:47:cc:bc:96:4d:f9:c3:73:bf:77:fc:27:3f:c6:
                    28:5d:eb:49:16:87:46:b9:28:71:d0:b3:3f:e5:97:
                    6c:dd:91:00:6e:9f:c1:83:c7:63:5c:bb:76:5a:c3:
                    96:6c:6d:91:dd:c6:b7:0d:5f:c8:bb:9f:78:15:1c:
                    c6:4f:94:ce:43:7c:a4:da:d7:7e:51:ab:42:d4:69:
                    03:fe:b1:59:68:85:1f:cc:d7:4a:a2:46:b8:79:f3:
                    98:0d:d1:81:8c:e3:04:eb:a4:27:93:b1:41:2f:32:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E6:9D:35:04:AB:CE:FA:AE:84:73:44:A6:8E:F4:61:D5:62:3E:B4
            X509v3 Authority Key Identifier:
                keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:63:88:3e:ee:b0:77:e0:2e:12:84:90:0c:0d:4d:4c:4c:28:
         d2:9a:3b:93:03:6b:f6:9d:e3:10:6c:46:62:60:9f:c8:77:14:
         b8:ca:06:06:24:ec:c6:30:2a:30:01:35:6a:82:95:fa:58:79:
         46:36:a3:b8:a0:76:70:79:e8:66:5b:3b:16:ea:b7:d2:a9:15:
         76:13:33:f2:47:f6:41:36:b1:53:71:e4:c8:5d:fd:08:a2:f8:
         67:ab:6c:b0:7c:d0:0c:41:fa:d2:84:40:04:0a:3d:be:f3:85:
         c0:31:90:38:4c:5e:bd:bf:66:e3:b9:61:02:a0:02:af:b4:56:
         c7:a0:a7:2e:c2:d1:53:7a:4d:56:a3:e6:3b:fa:df:be:c3:f5:
         3c:12:c5:27:29:e2:fc:ff:7d:b3:ed:41:5a:7c:89:91:81:54:
         de:5a:c2:91:e8:c1:21:36:86:a6:b3:f0:2d:8e:4f:16:26:43:
         80:3e:d1:e5:f0:ea:0b:8d:a2:66:ce:4b:0e:fa:db:dc:cc:6e:
         1d:c5:70:2c:82:2b:fe:e7:34:96:e0:02:56:4d:b9:a5:13:88:
         7f:97:d5:9c:54:fa:8f:fc:27:56:46:00:71:3f:77:06:5a:83:
         dc:82:5b:d9:a0:cb:59:54:3f:8b:f3:7c:42:1d:45:5d:40:57:
         a0:65:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:43:38 2024 by rpki-client on console-fra.rpki-client.org