Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
File:                     FhaeT1b0AaROVKG9hr8svYa4hnM.mft (raw, json)
Hash identifier:          Z2EZC/R+qfnBbaKrtCs3nhORHBZeTpS3jBSrio5puk8=
Subject key identifier:   42:DF:45:52:A5:D6:C8:7B:B4:79:06:72:84:75:BB:E2:63:93:6F:A5
Authority key identifier: 16:16:9E:4F:56:F4:01:A4:4E:54:A1:BD:86:BF:2C:BD:86:B8:86:73
Certificate issuer:       /CN=16169e4f56f401a44e54a1bd86bf2cbd86b88673
Certificate serial:       018F41C6027089BB87FD502CA1B4250037F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
Manifest number:          0DA1
Signing time:             Sat 04 May 2024 04:04:06 +0000
Manifest this update:     Sat 04 May 2024 04:04:06 +0000
Manifest next update:     Sun 05 May 2024 04:04:06 +0000
Files and hashes:         1: FhaeT1b0AaROVKG9hr8svYa4hnM.crl (hash: k6GdsgbHpXxOcCKzrsOM42xOKMqjVWW0rC89ulqPpaE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c6:02:70:89:bb:87:fd:50:2c:a1:b4:25:00:37:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16169e4f56f401a44e54a1bd86bf2cbd86b88673
        Validity
            Not Before: May  4 04:04:06 2024 GMT
            Not After : May  5 04:04:06 2024 GMT
        Subject: CN=42df4552a5d6c87bb47906728475bbe263936fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:12:b0:2a:b4:19:83:e7:f1:ab:0f:2a:fb:
                    49:4a:a8:45:80:4e:5a:40:f2:29:27:d3:22:f7:f7:
                    7e:52:43:1f:f1:55:bc:0d:74:4a:0d:a8:c5:9f:a1:
                    2c:1e:c6:51:7d:9e:dd:61:00:e8:56:7c:67:bc:47:
                    51:cd:6b:e4:6a:87:6f:1e:35:c6:74:59:82:e1:6e:
                    ff:d2:dd:b1:96:f9:8b:3d:24:b3:b9:1e:bd:39:55:
                    60:ec:68:ec:6a:12:9a:30:77:1f:22:15:08:78:74:
                    65:ac:70:4d:c8:fe:b9:d5:ee:b6:47:68:68:0d:ae:
                    03:e7:a1:e5:88:f9:51:22:7f:24:3a:11:59:15:fa:
                    57:71:fb:3c:ee:ed:a2:93:bd:b6:68:f5:c1:a5:45:
                    8b:a1:ad:a2:65:f2:34:86:34:fc:b0:ab:b0:28:99:
                    4e:64:d7:b6:54:98:7a:b5:49:5c:88:24:56:e1:48:
                    90:c7:cb:9f:be:73:db:97:13:26:9f:90:6b:ff:22:
                    4f:a0:93:50:78:03:0c:d2:b1:69:9c:3f:0f:32:dc:
                    28:a0:3f:6c:a3:31:d6:fa:c3:df:76:fc:d9:52:cc:
                    e4:c7:5c:3a:5a:01:60:60:8c:c2:9c:fb:6d:1f:a6:
                    4c:15:2d:79:41:d0:26:cb:7a:00:39:f8:48:b3:0d:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DF:45:52:A5:D6:C8:7B:B4:79:06:72:84:75:BB:E2:63:93:6F:A5
            X509v3 Authority Key Identifier:
                keyid:16:16:9E:4F:56:F4:01:A4:4E:54:A1:BD:86:BF:2C:BD:86:B8:86:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:db:25:3f:af:0e:24:84:55:53:b1:f5:c2:ce:d3:bd:ed:26:
         f1:fd:0d:67:01:a7:90:24:2a:fc:22:11:4b:0f:10:93:fb:3a:
         b5:07:9e:61:32:76:7c:3a:c0:6b:66:34:64:42:47:60:02:58:
         a6:4f:7e:61:46:0e:2b:c0:b0:d0:05:d1:6b:c5:9a:f5:5a:64:
         b0:4e:e5:34:62:13:4a:73:52:ca:36:3a:a9:8d:76:f9:81:20:
         3d:3b:a0:00:93:21:ac:dc:b0:05:d1:25:8c:26:f8:63:a0:53:
         81:91:53:d5:1e:49:ea:fc:98:68:db:75:05:cc:10:f0:6e:a9:
         7d:6a:b8:1d:c5:7a:11:bc:05:79:4f:36:47:de:ea:da:6a:e8:
         26:0a:44:c7:99:cb:9f:5c:84:50:f0:93:59:00:3b:2d:f2:f1:
         3c:86:a2:90:59:c0:22:0c:20:86:47:58:25:c1:10:46:fa:7b:
         67:56:d0:af:98:61:32:b0:f1:e7:8c:88:7f:46:92:ed:83:cd:
         6d:5c:21:0a:c6:e6:bf:67:bf:9e:b8:79:29:ae:6e:91:17:02:
         2c:78:a8:bf:ac:ff:c2:e3:8a:d8:a2:db:6d:35:22:84:4d:a0:
         8c:c1:4a:df:77:7f:2e:5f:a4:9a:67:9d:38:a6:74:df:41:33:
         07:38:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 05:02:25 2024 by rpki-client on console-fra.rpki-client.org