Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
File:                     obeZgyScHV-GGfE1xtbn43379WI.mft (raw, json)
Hash identifier:          QcAf96nKaLln8/SpMqdk2zzRy1fG/V+WvohBdUxLb6Y=
Subject key identifier:   51:CB:12:77:34:F9:68:47:68:90:E7:50:F5:F0:06:E2:8E:12:19:8A
Authority key identifier: A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
Certificate issuer:       /CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Certificate serial:       018F8749A25A85AF72E73E2739F75114F64D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
Manifest number:          097C
Signing time:             Fri 17 May 2024 16:01:40 +0000
Manifest this update:     Fri 17 May 2024 16:01:40 +0000
Manifest next update:     Sat 18 May 2024 16:01:40 +0000
Files and hashes:         1: obeZgyScHV-GGfE1xtbn43379WI.crl (hash: t2NYCUf/cMThtICHPxr57rwFZO0ucJZlwMgAAwnzP5E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a2:5a:85:af:72:e7:3e:27:39:f7:51:14:f6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
        Validity
            Not Before: May 17 16:01:40 2024 GMT
            Not After : May 18 16:01:40 2024 GMT
        Subject: CN=51cb127734f968476890e750f5f006e28e12198a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:e0:4a:a8:9c:21:bf:cc:e5:c5:57:6c:eb:
                    b4:c0:0b:d1:f2:12:bf:e2:e1:d2:52:6a:4a:cd:89:
                    b2:c8:a9:81:c2:25:46:96:92:d8:59:2f:c4:80:03:
                    fe:65:68:2c:94:7d:52:35:d5:d4:3f:16:11:74:80:
                    d3:91:75:a2:de:07:5c:6b:23:22:6a:e1:22:43:b8:
                    68:b2:9b:55:20:a3:1f:9e:74:68:20:b2:df:f3:a9:
                    16:1a:c5:ff:83:d2:a0:5a:8b:9a:6d:28:f5:24:3e:
                    96:ab:aa:92:2f:98:ca:80:62:51:07:6c:46:9a:d5:
                    39:ad:93:91:05:7e:97:ad:56:03:e1:27:d5:e7:a1:
                    1c:bd:ca:a7:48:4d:52:d1:d0:b0:1b:1c:b0:b2:8f:
                    9f:96:20:77:e1:ef:1d:ee:76:91:9d:71:8c:e6:c0:
                    b8:1b:aa:22:a2:69:21:13:60:fd:cf:06:bd:e9:41:
                    10:96:c7:27:24:a8:61:db:c9:2e:62:92:ea:5d:12:
                    55:31:37:14:e2:6a:9b:ae:35:bb:7b:af:2f:16:28:
                    16:d9:7e:0a:22:1f:bc:15:62:dc:a7:b0:4e:2b:1d:
                    0f:cd:fb:5a:65:6e:5a:39:a4:9d:a1:5e:45:c6:88:
                    47:51:58:a8:c6:5a:cb:b5:db:35:e1:70:49:95:7b:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CB:12:77:34:F9:68:47:68:90:E7:50:F5:F0:06:E2:8E:12:19:8A
            X509v3 Authority Key Identifier:
                keyid:A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e4:bc:59:7b:3e:c5:3d:65:38:8b:b2:b2:e4:82:9b:c3:fa:
         6c:90:7d:f7:56:4e:f5:7a:5a:72:af:8d:38:be:f9:3a:c2:69:
         e1:71:b0:11:90:22:8c:e8:be:29:46:59:65:9d:0c:aa:0d:ca:
         08:e7:ad:fd:7a:9d:c5:87:73:bf:61:20:ad:66:be:23:0f:e1:
         58:ad:b6:00:8d:37:97:05:d2:e2:0e:da:90:d7:06:68:93:64:
         7c:3b:18:1c:4a:44:48:ab:1e:d6:08:a0:52:b1:dc:c5:e6:21:
         37:19:eb:20:d8:28:30:0a:d0:6e:ad:9b:06:07:1f:1d:0b:22:
         34:e0:51:4c:80:16:70:96:96:dc:0c:42:87:50:52:9b:d4:22:
         aa:14:2c:0c:66:21:74:38:b1:6c:d4:14:1d:6f:9e:d5:f3:de:
         fc:68:d6:17:f6:c4:09:1e:ad:7f:2a:51:f0:39:89:f5:95:4d:
         f2:9c:6d:21:d5:79:22:4a:25:e8:7a:8b:32:9c:02:9d:29:4c:
         f9:9b:91:32:1c:4f:a1:10:70:c9:09:ea:37:8a:66:8d:fd:13:
         b8:73:41:fc:5d:1f:1d:1c:64:b4:27:13:95:38:05:73:97:61:
         15:34:30:0f:5c:6d:ee:01:64:88:5a:38:ac:ae:c3:e0:e1:80:
         2d:1d:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:35 2024 by rpki-client on console-fra.rpki-client.org