Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
File:                     mTFQMIBh3NrF2EZc-ITGejuxkVk.mft (raw, json)
Hash identifier:          5WXzECEzHRkDLaNZKLPew0VLw8F7FyujDN4XgVY8Y4o=
Subject key identifier:   86:27:78:7A:07:7A:59:F1:F9:9B:9F:F8:9A:3A:1A:25:38:BC:17:47
Authority key identifier: 99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59
Certificate issuer:       /CN=993150308061dcdac5d8465cf884c67a3bb19159
Certificate serial:       019041F7BC68994226C1440D64E5586284F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
Manifest number:          02CD
Signing time:             Sat 22 Jun 2024 22:01:12 +0000
Manifest this update:     Sat 22 Jun 2024 22:01:12 +0000
Manifest next update:     Sun 23 Jun 2024 22:01:12 +0000
Files and hashes:         1: mTFQMIBh3NrF2EZc-ITGejuxkVk.crl (hash: ucEX6enYnH5zPssl42m/DtuhZxML/w+PBPt8X6HGXf4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:bc:68:99:42:26:c1:44:0d:64:e5:58:62:84:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993150308061dcdac5d8465cf884c67a3bb19159
        Validity
            Not Before: Jun 22 22:01:12 2024 GMT
            Not After : Jun 23 22:01:12 2024 GMT
        Subject: CN=8627787a077a59f1f99b9ff89a3a1a2538bc1747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:85:f4:48:a9:f7:b5:b1:dc:d5:42:9b:34:
                    d8:b1:93:0d:ce:2e:50:f1:8f:74:a1:2b:f0:32:50:
                    1e:4a:dd:4a:d1:e3:e9:41:ff:6e:4a:42:cd:68:da:
                    21:fb:41:c1:26:87:97:f1:e1:d4:f8:4e:04:2a:5d:
                    93:c5:f3:44:b1:18:92:6f:ac:19:3c:e8:88:11:0f:
                    c5:58:d9:fa:cd:ec:4a:75:8e:5d:2f:36:eb:2a:5b:
                    58:fc:5d:d9:9f:fa:8c:35:33:12:e6:ca:31:09:03:
                    82:b2:69:a3:5c:04:ec:41:0b:5b:af:63:55:21:fe:
                    8e:97:5f:88:13:9f:b5:55:13:58:8b:aa:d7:6c:f0:
                    e6:87:2c:86:33:06:ad:c4:b5:94:46:59:ea:a8:88:
                    c9:f4:1b:15:82:08:07:66:f4:89:b0:b0:1f:e3:a8:
                    0d:89:36:6b:54:20:54:04:8e:e4:ff:fc:83:76:6d:
                    de:88:70:6f:40:3a:02:54:15:19:da:44:fe:50:4e:
                    c4:02:7b:1d:f3:7f:e7:66:73:09:4a:56:fa:f7:a1:
                    da:3b:e4:be:9d:b0:d3:97:4f:7e:43:f9:03:83:d3:
                    82:74:57:5b:4e:9b:18:27:fd:94:7c:ca:b5:c3:e2:
                    ef:ef:a7:c1:a2:7b:d6:1e:85:cd:38:9a:43:a7:93:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:27:78:7A:07:7A:59:F1:F9:9B:9F:F8:9A:3A:1A:25:38:BC:17:47
            X509v3 Authority Key Identifier:
                keyid:99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:21:ed:2e:c9:61:f2:b1:a2:62:00:0a:07:42:82:3d:46:0f:
         a4:de:a4:d9:ab:6c:df:ea:75:09:4c:87:d1:f3:6a:1f:5a:23:
         42:d2:4e:58:7a:f0:47:0e:ab:30:44:7c:46:eb:e5:0e:e5:5b:
         39:f5:c0:8b:8a:47:f1:8b:59:5e:f2:d3:f6:53:97:31:09:2c:
         2a:f6:3d:1c:00:69:f2:7d:99:bd:3b:af:bf:cd:23:28:a1:ba:
         bc:d4:55:12:12:08:75:4f:2e:93:9d:ad:03:b3:7d:0b:b9:1a:
         9c:fd:fc:e6:41:54:fc:31:8e:5e:c0:8e:dc:fd:9f:22:f0:34:
         39:e2:2f:cb:69:b8:7b:29:b3:f5:d9:36:7a:5a:a7:8d:6a:9e:
         13:ab:53:cb:da:c8:f4:ef:17:d8:2c:fc:53:9c:f7:ed:6b:e2:
         75:d1:54:1f:1b:70:f0:ea:02:b3:30:98:0d:ac:c5:77:18:46:
         ef:b6:8c:cb:98:0f:ef:bb:db:03:f1:b2:7d:54:fc:81:e1:8f:
         9d:cb:ed:e3:e2:bd:6c:9c:4e:2f:95:51:2a:87:8d:10:19:0f:
         0d:00:1b:6f:c4:7a:93:d6:1f:f9:1b:86:11:d6:8d:60:ec:16:
         ee:03:f4:3d:fe:93:1f:79:c4:83:bb:91:08:ed:6d:51:34:fb:
         32:64:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:42:41 2024 by rpki-client on console-fra.rpki-client.org