Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
File:                     rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json)
Hash identifier:          q+3I3yySScwI/qfOj4YVkmJh3X60ln0Muoy5Lw6M5OQ=
Subject key identifier:   DB:60:9C:A6:13:35:5D:24:5B:73:29:F8:94:91:58:6E:E1:21:73:EC
Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Certificate issuer:       /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Certificate serial:       018F87B6E4FF3E67CB07AD41898F2FB08064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
Manifest number:          0AF4
Signing time:             Fri 17 May 2024 18:01:01 +0000
Manifest this update:     Fri 17 May 2024 18:01:01 +0000
Manifest next update:     Sat 18 May 2024 18:01:01 +0000
Files and hashes:         1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: OUVXCw9RMuzdWweqYLBaPuqrkwVHIpYPPrmccP6AqXQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:e4:ff:3e:67:cb:07:ad:41:89:8f:2f:b0:80:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
        Validity
            Not Before: May 17 18:01:01 2024 GMT
            Not After : May 18 18:01:01 2024 GMT
        Subject: CN=db609ca613355d245b7329f89491586ee12173ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:80:f8:cf:19:e8:0f:43:bd:a9:92:a4:0d:88:
                    4d:d4:07:4b:29:8c:4d:21:76:85:75:96:76:dc:62:
                    58:27:f8:ec:a0:15:d9:df:a5:eb:45:90:a0:49:dd:
                    8a:03:9e:e2:ff:8a:0c:e9:f4:0e:0e:51:ea:a5:d7:
                    ba:a7:fd:68:2c:fa:5c:a4:4d:2e:b7:4b:1d:e0:37:
                    fd:03:0e:dc:0a:27:c9:8d:91:6c:de:a6:8a:e1:0d:
                    62:a3:ec:e3:07:3a:37:4b:39:e7:a0:70:79:c0:6b:
                    71:b0:d2:68:6c:7e:8d:65:7f:d2:05:5f:45:44:ad:
                    38:84:b6:57:b5:8f:c9:5f:a3:bd:44:d5:5d:80:1c:
                    b9:0a:ce:90:2f:85:54:20:74:9c:9d:6a:8e:94:76:
                    14:d6:e9:25:08:be:83:c5:03:56:a8:b5:5c:9b:ee:
                    58:bd:16:f3:2d:08:3e:51:aa:43:38:76:6e:4b:34:
                    e9:e3:71:ae:51:85:e3:c8:53:6d:65:d9:06:2e:31:
                    52:37:fa:79:38:a3:78:62:ff:cb:3c:52:67:16:1f:
                    4c:b0:9a:3b:a4:db:99:3c:e2:4b:0b:f9:ac:33:d5:
                    7c:0d:7c:b4:ac:4c:28:3a:b3:8f:b6:f0:f2:94:10:
                    19:4d:f7:19:2e:2b:24:f7:d7:4a:2c:64:74:b4:f7:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:60:9C:A6:13:35:5D:24:5B:73:29:F8:94:91:58:6E:E1:21:73:EC
            X509v3 Authority Key Identifier:
                keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:98:a2:37:f3:42:08:c2:e3:1d:65:14:68:ac:fc:2a:61:
         5a:a7:18:cd:92:53:15:08:b5:24:06:f0:e9:af:f8:65:8d:24:
         ff:70:43:98:c0:d4:58:cc:97:03:66:f0:d6:3b:fd:ea:59:ad:
         f3:a3:88:55:b9:c9:44:05:d5:9e:5b:47:4b:9f:fe:75:55:e3:
         bb:7e:13:e0:5f:1e:3e:ac:c6:43:f9:44:13:79:4a:0f:13:ae:
         65:12:f0:a8:17:6c:1a:5b:3b:71:ed:14:d7:4c:fa:58:89:37:
         aa:fc:75:12:9f:93:81:bd:24:f1:32:fb:26:e2:8b:d6:56:0e:
         45:07:81:e5:cf:c7:a3:c9:64:73:78:73:46:6c:53:62:ae:6d:
         a8:e4:37:ef:99:bd:e0:ef:50:67:eb:48:80:de:ae:19:90:ef:
         b9:51:0c:6a:ec:3d:bb:28:ce:51:bd:8a:1d:71:a9:9a:76:6e:
         b3:a2:ee:34:f6:56:1a:de:39:fe:5a:24:8a:40:da:4a:f0:f6:
         21:63:52:c0:5d:ca:c6:e7:63:1b:c7:08:0c:fa:ee:a9:53:70:
         78:9f:00:69:56:23:21:8a:22:d7:5b:5a:67:46:74:e6:12:f6:
         0c:26:8b:62:76:6a:a2:62:b0:99:48:b6:89:38:fe:b8:05:5e:
         99:77:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:39:09 2024 by rpki-client on console-fra.rpki-client.org