Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File:                     Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier:          A9Z1K1xOCIWCjLy8SQzOj0b2v1pIML0wGBk7iZKVWeg=
Subject key identifier:   D9:BA:00:84:BE:17:78:70:C2:78:A1:C9:75:55:44:2B:79:1E:88:36
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer:       /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial:       01901C6AD64EFEF719090424E66D7F912C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number:          079F
Signing time:             Sat 15 Jun 2024 15:01:22 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:22 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:22 +0000
Files and hashes:         1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: 7rzRzQODr/R8ys+/7ORpEim94wSy44VA0H4l7rMPRbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:d6:4e:fe:f7:19:09:04:24:e6:6d:7f:91:2c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
        Validity
            Not Before: Jun 15 15:01:22 2024 GMT
            Not After : Jun 16 15:01:22 2024 GMT
        Subject: CN=d9ba0084be177870c278a1c97555442b791e8836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:8c:ed:68:9b:e3:34:7c:01:fe:49:6a:be:
                    cf:d5:75:35:b2:d7:8c:9c:d2:f9:11:77:b8:d8:52:
                    cc:1d:4f:74:2e:2a:56:ae:7f:14:9f:2b:b5:f4:dd:
                    94:48:40:3b:af:9e:4b:73:64:06:33:2e:6b:49:27:
                    32:f7:f9:64:b1:4f:ca:43:24:be:7d:d1:dc:23:8a:
                    02:2d:de:43:32:eb:70:2a:52:a2:6d:13:fc:0e:f6:
                    3a:90:85:cc:5c:41:c9:cc:99:85:b7:15:eb:d5:40:
                    2c:45:3f:34:0c:db:40:12:1b:aa:eb:8c:1d:b3:32:
                    65:c9:09:55:76:c2:05:5d:77:63:06:0b:d1:f0:49:
                    b2:4f:9e:fe:6e:56:07:41:ae:74:b9:4e:1c:ac:af:
                    64:fc:34:a9:2d:5d:91:c2:37:73:0d:b5:e5:ee:39:
                    e8:ee:5e:81:a6:d9:df:ec:b6:a8:c1:49:b4:d3:d0:
                    80:9d:e5:af:af:d5:d5:bc:25:c0:8b:8c:f1:4d:9b:
                    3d:a9:5e:c5:c8:22:67:18:35:12:e6:b2:33:a6:4d:
                    9d:d3:cb:f0:68:d1:10:e6:a7:02:84:fc:ab:2a:ac:
                    18:65:34:b2:22:49:f4:c4:97:be:35:4a:e8:35:de:
                    a7:82:7d:c2:93:b9:88:12:3c:d0:57:2a:95:49:e5:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BA:00:84:BE:17:78:70:C2:78:A1:C9:75:55:44:2B:79:1E:88:36
            X509v3 Authority Key Identifier:
                keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:e0:ac:5f:9c:87:c0:5f:d0:53:26:7e:6e:9e:1b:75:35:
         11:25:df:7d:61:e7:d1:2e:83:30:9f:f4:9c:ee:01:3a:e7:c4:
         29:0d:6c:15:90:ca:d4:8f:0d:f7:9c:ef:01:ab:0a:4d:5e:89:
         50:ab:74:d1:ab:91:79:4b:64:84:7b:ca:1f:e6:03:d1:1a:c3:
         9a:4e:5f:28:05:f9:28:74:fa:09:cd:27:25:ce:cd:e0:8e:00:
         c4:54:10:11:b3:de:6b:66:98:f0:7e:8a:f1:17:46:ed:7e:68:
         86:8f:f3:71:2d:d3:8a:dc:44:a8:a8:9a:b5:51:51:03:b2:fa:
         58:fe:7a:a0:2c:86:4d:c4:22:67:c6:d8:33:04:76:dc:44:39:
         39:88:09:00:4d:bf:3b:69:77:b2:42:7f:3d:27:2a:ae:de:2c:
         82:b5:0b:30:f9:8f:09:df:85:34:74:b0:34:fe:4d:02:c9:24:
         68:9d:2f:81:9e:55:0b:84:20:ed:7a:48:bc:f7:5f:f1:8a:1a:
         ca:7f:91:4a:a6:f0:de:00:f1:6c:fd:b0:2b:fe:6e:bd:79:46:
         ae:76:f2:be:d4:76:0a:ce:1c:4d:eb:28:dd:31:6a:78:e3:b9:
         fa:82:19:f0:67:b2:5b:16:62:f9:12:10:9f:89:10:99:6f:bc:
         f7:65:9b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:53:51 2024 by rpki-client on console-ams.rpki-client.org