Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File:                     jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier:          NFrdqkUEpjizDGo8BxQj8ZaBP3yH0aT43wn7AG06hv8=
Subject key identifier:   8A:9C:51:9A:2B:74:8B:0A:25:28:F7:2F:8C:CF:6A:CE:07:7E:59:5F
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer:       /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial:       01903397AC19EAF0125D6535A51B46BE5BC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number:          0C83
Signing time:             Thu 20 Jun 2024 03:01:36 +0000
Manifest this update:     Thu 20 Jun 2024 03:01:36 +0000
Manifest next update:     Fri 21 Jun 2024 03:01:36 +0000
Files and hashes:         1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: 9lrtHHz+D2jtT3s7qaRsacH8gcg97wJ1LqiHMjBSJG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:97:ac:19:ea:f0:12:5d:65:35:a5:1b:46:be:5b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
        Validity
            Not Before: Jun 20 03:01:36 2024 GMT
            Not After : Jun 21 03:01:36 2024 GMT
        Subject: CN=8a9c519a2b748b0a2528f72f8ccf6ace077e595f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:25:07:3f:3f:f8:e2:bb:87:2b:61:3d:48:2b:
                    55:47:24:a7:58:f8:dd:73:99:d1:74:bb:fc:73:76:
                    e5:3f:59:ef:e5:2e:90:2d:9d:22:9b:02:9e:1e:d9:
                    8a:d5:ca:5d:4f:11:94:26:6b:69:08:aa:a3:50:bc:
                    30:b5:4a:81:d1:b1:a4:92:a7:b7:f3:dc:4c:07:1a:
                    96:bb:2b:1e:be:43:5d:f1:60:7e:38:5c:43:4b:88:
                    90:1d:ef:c3:a0:a2:a4:88:81:2a:a2:88:05:4a:72:
                    f7:70:41:79:be:de:00:de:20:23:b2:b9:76:46:35:
                    82:d1:9e:f9:e8:16:d5:c5:f9:96:e6:db:68:17:f9:
                    ef:43:62:d9:49:ec:58:94:90:65:38:84:26:74:bd:
                    79:bc:49:db:ee:49:8d:74:fa:8e:0e:2e:c5:71:dd:
                    28:8c:61:e1:28:77:8d:ed:5e:73:a9:33:27:af:5d:
                    08:85:92:94:19:a4:38:6c:80:9f:f8:fa:54:04:8b:
                    f3:31:20:83:19:03:2e:a0:4e:f0:1a:01:31:0b:5d:
                    4f:cc:a9:30:ad:5c:19:8c:56:97:44:97:2d:84:02:
                    d8:a8:5a:e6:9a:19:82:21:18:a0:a3:a7:d8:5b:82:
                    7f:3c:87:b4:64:4b:37:e6:52:8a:6f:53:82:4d:a1:
                    fb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9C:51:9A:2B:74:8B:0A:25:28:F7:2F:8C:CF:6A:CE:07:7E:59:5F
            X509v3 Authority Key Identifier:
                keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e2:5a:a7:d5:1a:c6:85:69:48:5e:2a:f5:72:24:f4:5d:11:
         65:63:6a:4f:47:bd:21:ea:55:b6:41:ca:cb:5e:60:b9:c8:60:
         d0:68:9b:50:5a:db:66:1f:3a:1d:af:64:27:c6:5d:aa:f8:05:
         5b:71:47:69:06:c3:08:db:42:6c:0c:b5:a2:2d:fe:c0:85:d6:
         09:20:61:a7:3f:60:d7:97:a6:0b:d3:d3:ae:cb:c5:f6:25:20:
         ef:c0:63:9f:92:c5:be:be:04:60:4e:b0:da:53:3e:78:b9:97:
         55:e7:ac:f3:f9:8c:52:6b:46:ab:e1:f6:34:95:84:f6:f6:b6:
         47:49:07:16:05:cf:4c:3b:45:2e:7d:cf:07:5e:0a:6c:22:4d:
         63:4a:5a:0a:49:55:04:67:08:fe:5d:c5:2f:25:16:ff:47:95:
         51:a5:e2:5a:20:ba:0d:18:25:9c:f8:0e:f5:62:fe:ab:3b:f5:
         88:5c:a3:e0:b7:70:3b:29:3a:a5:e5:5f:04:45:f2:f7:00:38:
         10:23:5f:40:28:a2:7d:37:9e:b0:bc:54:b2:c5:2e:a3:95:97:
         8a:42:4b:20:00:27:0c:20:e4:28:90:92:13:a3:16:06:3d:a1:
         47:4a:a1:e4:e4:0a:78:05:9d:41:a1:c6:c1:88:96:9d:ab:3b:
         f9:cc:ae:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:13:26 2024 by rpki-client on console-fra.rpki-client.org