Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
File:                     mTFQMIBh3NrF2EZc-ITGejuxkVk.mft (raw, json)
Hash identifier:          Vd3f3xge4mDYMUmFWTiDEOEvWXU3x/xwlKjhaKHxNrw=
Subject key identifier:   0F:7D:0C:FF:1D:7F:A3:8F:24:17:C6:56:AC:10:6B:88:7D:0E:49:B5
Authority key identifier: 99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59
Certificate issuer:       /CN=993150308061dcdac5d8465cf884c67a3bb19159
Certificate serial:       01901D46BBDFCF4ACB13D42B6021D0AC3D04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
Manifest number:          02BA
Signing time:             Sat 15 Jun 2024 19:01:33 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:33 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:33 +0000
Files and hashes:         1: mTFQMIBh3NrF2EZc-ITGejuxkVk.crl (hash: daGWYG85pL9ffEq79N4k+w+r7nWlzaJHYKRw/y6IYsM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:bb:df:cf:4a:cb:13:d4:2b:60:21:d0:ac:3d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993150308061dcdac5d8465cf884c67a3bb19159
        Validity
            Not Before: Jun 15 19:01:33 2024 GMT
            Not After : Jun 16 19:01:33 2024 GMT
        Subject: CN=0f7d0cff1d7fa38f2417c656ac106b887d0e49b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:22:02:bb:ad:b5:45:08:4e:a0:a4:56:27:2f:
                    97:d0:b5:75:7f:5e:5b:e7:99:a0:01:91:f7:82:c8:
                    85:73:57:a5:5b:cf:67:32:43:dd:fc:e4:30:18:1a:
                    6b:27:92:35:d9:ad:00:eb:16:f3:6a:18:ec:c5:52:
                    9a:ad:74:b2:da:87:77:4f:81:1e:4d:c6:97:70:29:
                    0f:0c:70:07:bc:7f:56:78:a7:91:bf:46:03:d0:fd:
                    e3:58:52:88:64:b4:ed:07:16:39:cd:65:c4:47:47:
                    a9:e2:2e:2f:cc:67:71:46:ba:40:61:61:21:dc:58:
                    b7:a8:f7:1d:94:b8:5f:d4:07:8a:80:b3:10:e6:ca:
                    f8:08:d7:b1:2b:c1:86:59:b7:f9:ad:ce:20:1d:46:
                    7c:2e:3b:72:82:d5:4f:d2:a9:0a:64:24:e5:b4:5e:
                    dd:eb:ea:ff:e2:72:56:2e:29:28:65:57:b6:3a:1f:
                    da:cb:dc:22:c2:41:de:3f:a0:d1:c2:c3:03:03:3e:
                    d7:65:6d:e1:86:56:82:39:16:c5:12:2a:35:96:91:
                    eb:26:e0:24:b3:36:ba:7d:df:14:f9:f0:94:eb:87:
                    fa:b1:96:d0:24:67:67:58:97:44:4f:a0:ec:92:d7:
                    73:3e:42:b3:ea:4c:ca:83:39:27:ac:87:d1:1d:9e:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7D:0C:FF:1D:7F:A3:8F:24:17:C6:56:AC:10:6B:88:7D:0E:49:B5
            X509v3 Authority Key Identifier:
                keyid:99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1d:b0:9b:e0:e5:88:24:09:c6:f4:51:90:e7:ba:9e:d8:72:
         a7:a4:53:bd:d2:ed:ef:4a:2e:44:e8:5c:67:0b:c8:da:64:be:
         47:ca:c2:fc:77:f1:c3:15:9b:84:b0:87:ca:e7:79:c8:9f:88:
         5b:40:53:3d:1d:d0:5b:3e:dd:49:df:42:df:a8:5a:09:e9:9b:
         aa:1e:73:9a:87:a2:37:c5:a3:16:80:a1:34:de:16:ee:3c:83:
         de:1c:e5:5f:a6:44:e6:26:f6:af:bf:f3:d9:81:72:ce:fd:73:
         0e:60:8e:45:67:af:9f:ad:45:ed:52:28:cb:77:c8:0b:1f:d7:
         4c:9c:ee:42:f2:0d:28:05:d4:ab:a2:46:1c:ff:d7:68:99:f8:
         46:aa:b8:dd:ce:b2:70:e7:a5:3a:8e:2f:6d:e2:72:1a:67:75:
         d6:ee:01:7f:9a:2b:c9:0a:29:c0:3f:fc:38:32:54:1a:ac:ba:
         6e:fb:46:28:53:bf:c8:ae:bb:f5:e6:7c:60:39:d4:28:29:6b:
         dd:2a:cb:70:b4:58:6c:4d:27:7a:b2:be:63:6c:ef:73:e1:79:
         50:77:79:e3:2a:70:3c:5f:65:d3:95:01:ef:fc:5c:21:85:9b:
         51:1d:36:23:21:fe:09:85:a4:76:37:0c:83:08:3d:8c:4e:8d:
         f3:06:a5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:46:51 2024 by rpki-client on console-fra.rpki-client.org