Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
File:                     8KSyRplUYkr0JKVO8WdhwhWLJIM.mft (raw, json)
Hash identifier:          Mlq/Oq3MWBq6j7gQxi4bObO3+rV7fjP7WBNI1rp7H3s=
Subject key identifier:   86:1C:8C:F6:6F:F5:1D:D9:CA:96:A1:19:38:4C:C1:68:E9:41:96:BA
Authority key identifier: F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83
Certificate issuer:       /CN=f0a4b2469954624af424a54ef16761c2158b2483
Certificate serial:       01901EC6913AEF377812033201AFF958AD99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
Manifest number:          1123
Signing time:             Sun 16 Jun 2024 02:00:48 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:48 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:48 +0000
Files and hashes:         1: 8KSyRplUYkr0JKVO8WdhwhWLJIM.crl (hash: uT3NQffETmRwNjDMMVw/L2fuD11oT+yIULevVDxzpMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:91:3a:ef:37:78:12:03:32:01:af:f9:58:ad:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a4b2469954624af424a54ef16761c2158b2483
        Validity
            Not Before: Jun 16 02:00:48 2024 GMT
            Not After : Jun 17 02:00:48 2024 GMT
        Subject: CN=861c8cf66ff51dd9ca96a119384cc168e94196ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:ad:48:3d:a7:9b:df:a1:65:b5:db:3d:aa:
                    73:24:8b:00:a1:84:c7:4f:b1:b7:9c:88:18:6e:cf:
                    52:8b:09:97:09:1f:9c:c8:43:d7:38:8f:8e:27:9e:
                    62:d2:8b:42:cf:7f:df:60:03:eb:c6:7c:5b:63:bd:
                    53:90:87:a6:36:a1:cb:78:48:e4:31:70:82:6b:83:
                    74:19:0b:12:df:65:20:5b:6b:54:9b:90:5c:2f:fa:
                    c1:4d:df:ba:7d:86:7d:92:30:d6:12:5f:42:d5:91:
                    ba:8e:e4:5a:c6:aa:cc:25:6c:74:b8:01:c4:0b:57:
                    d0:79:60:d5:70:4e:50:0a:64:71:b5:9a:a5:c5:15:
                    a5:fe:aa:d3:4c:68:4b:21:28:df:5f:32:a6:74:ff:
                    3a:e2:1d:fa:cb:3b:78:94:d5:d5:27:37:1b:75:a9:
                    da:90:3a:ca:d5:8e:1a:e0:34:ef:a1:b2:a7:09:5c:
                    0f:ee:7e:ae:e1:d6:eb:d1:62:86:a5:54:05:7d:1c:
                    2a:04:49:e2:d7:d1:6f:e2:e1:a7:ab:ba:3b:e1:30:
                    a6:47:48:bc:3c:bb:41:6b:57:8c:7e:84:c5:ab:59:
                    c3:be:73:85:09:10:f8:61:da:0f:1f:5b:d1:51:ac:
                    0b:e1:c6:ee:16:fa:43:28:2b:ca:47:24:8a:03:d1:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1C:8C:F6:6F:F5:1D:D9:CA:96:A1:19:38:4C:C1:68:E9:41:96:BA
            X509v3 Authority Key Identifier:
                keyid:F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:73:2e:89:87:36:9f:32:01:20:0a:42:bd:aa:8b:83:f7:98:
         63:08:5d:7d:06:68:87:ee:03:3e:2d:a4:e1:c0:12:3d:c1:0b:
         b2:40:a0:a8:32:16:54:d4:d8:06:95:07:88:3d:13:2a:1c:17:
         54:55:84:a5:c2:91:ba:9a:f8:8a:3f:31:24:e6:27:2d:cc:cf:
         43:81:33:a6:93:31:60:58:97:af:95:c9:9e:ab:ca:3e:b7:d8:
         73:94:6c:79:76:7e:ba:88:b5:aa:d8:f0:ac:45:3e:5e:7f:74:
         f2:80:7d:b0:36:0e:81:c0:ba:ff:10:71:47:48:73:8b:00:d1:
         a0:d7:7f:8b:10:aa:21:1f:e0:b6:4f:37:91:21:37:c3:63:a7:
         5f:1f:9b:21:8f:a8:9a:8e:43:f0:7e:7a:c3:61:8e:9a:3f:a1:
         c8:9d:d5:d0:48:f9:5a:ac:39:b7:ab:1e:c3:f8:7e:da:85:07:
         25:fc:a8:08:4e:8a:35:6c:ef:dd:40:ab:30:ad:a3:c4:d3:89:
         d9:e1:b2:95:31:54:06:de:9f:6c:5f:9c:66:47:c0:82:6a:9c:
         8e:ce:12:4d:0c:78:7e:25:d8:ba:0d:ff:23:f6:62:2c:45:ee:
         93:fb:6a:34:5f:e9:2e:42:50:8e:d6:87:f6:ed:f9:70:ed:f7:
         7d:b2:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:52:15 2024 by rpki-client on console-fra.rpki-client.org