Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File:                     jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier:          /rt3p+Fi/s7lB7nBG+x2Tdl1MYvhW8NypLoggDowxCI=
Subject key identifier:   70:9B:F4:EC:1C:9F:DB:10:CF:36:20:31:BE:3C:38:38:05:9E:40:89
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer:       /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial:       01901C6A86F2D630A513A132C24CD0763102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number:          0C77
Signing time:             Sat 15 Jun 2024 15:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:01 +0000
Files and hashes:         1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: 8jwOO/zabeQhRbx9CUX4OIpbBB8sag+MT60BuL8hcaI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:86:f2:d6:30:a5:13:a1:32:c2:4c:d0:76:31:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
        Validity
            Not Before: Jun 15 15:01:01 2024 GMT
            Not After : Jun 16 15:01:01 2024 GMT
        Subject: CN=709bf4ec1c9fdb10cf362031be3c3838059e4089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:f0:5f:7b:5c:e0:17:68:fc:02:27:64:41:
                    87:c8:2f:89:0e:fa:f4:c8:1f:65:29:61:f8:57:fb:
                    f0:22:91:31:4a:35:5a:94:83:f2:16:bd:2b:fd:2f:
                    6e:d0:cf:7d:ef:52:3b:6e:b4:21:8b:d6:4c:fa:b9:
                    fe:a0:c8:f7:ac:5f:0a:b7:ff:e0:b2:f8:0c:08:cc:
                    5c:eb:26:a5:c7:de:06:56:d3:12:38:21:29:cf:c5:
                    d3:0c:ec:ee:ca:51:39:23:20:87:94:96:6d:0e:77:
                    cb:46:c0:53:3a:d3:61:ea:ce:04:8c:d0:10:a3:20:
                    93:f3:c1:a8:7d:2e:7c:d3:57:08:72:07:53:e0:3a:
                    a1:28:a0:4a:fe:96:91:4e:2f:6f:1b:5c:5e:91:d5:
                    cd:24:5e:90:b6:df:53:eb:16:03:4a:8e:85:79:52:
                    b9:22:38:e6:c2:a8:3d:fd:2a:75:2b:a0:a2:61:f2:
                    0f:7e:07:2f:e3:57:ac:60:fa:ff:13:88:8f:24:f0:
                    42:08:5e:8a:34:be:c4:0e:2c:5d:01:17:61:2c:38:
                    f3:ec:67:ad:64:a0:58:9d:87:1b:c3:ba:bc:47:03:
                    c3:5f:6e:1d:e1:2c:d8:2b:1c:ec:0f:2d:93:d6:f4:
                    fa:ab:42:92:12:4e:56:c3:cc:d8:c7:1b:28:63:8f:
                    aa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9B:F4:EC:1C:9F:DB:10:CF:36:20:31:BE:3C:38:38:05:9E:40:89
            X509v3 Authority Key Identifier:
                keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:5b:c4:6d:88:ba:00:f3:e0:63:9e:5e:11:6f:aa:4e:16:32:
         f1:c7:fa:d2:e3:cc:fe:4e:88:31:03:10:99:76:0f:e6:1d:75:
         47:a0:63:08:a6:48:be:d3:10:ec:13:4f:c5:39:60:de:ee:51:
         fe:a1:22:33:9e:4e:06:0e:ff:2f:1e:90:73:cd:10:d5:64:d3:
         09:35:cd:f7:95:5b:46:9e:de:db:15:88:96:29:3b:d2:8b:53:
         a2:20:63:9a:10:cc:0b:9f:a1:68:1f:c7:08:56:1f:86:3d:cd:
         f1:5c:1d:a5:44:70:88:5c:63:06:62:64:4e:53:e7:18:07:6f:
         c8:ba:d8:b0:5c:3a:6f:2b:37:64:ea:b9:3d:5b:bc:88:58:8a:
         c5:ad:6c:f9:6d:5e:ad:bf:72:a0:1d:62:3f:1f:08:aa:4a:2f:
         33:ac:f0:88:21:7f:aa:06:03:2c:d6:cd:83:f8:36:8a:7c:e3:
         62:af:d1:92:61:61:1c:32:21:b3:4c:27:b2:61:0d:d1:b7:6f:
         d4:29:83:aa:f9:09:4b:ab:b7:2d:9f:33:64:08:0a:a8:27:35:
         8b:10:0b:66:02:76:9e:be:33:e8:19:37:3f:9b:b2:7b:6d:72:
         38:60:4e:c1:7e:1b:62:b0:8d:12:96:6a:1d:47:7e:4d:29:c6:
         29:2c:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:21:36 2024 by rpki-client on console-ams.rpki-client.org