Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File:                     7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier:          urGDA51MwfXcvjRgGYDilzjx0ZIjdjbXziklq7Cf7ig=
Subject key identifier:   93:82:36:AB:0D:A2:07:31:5C:49:46:8A:0F:2B:3D:FE:97:E0:4E:E7
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer:       /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial:       01901EC67E7825A85FBB0CAEDD6B3F6210C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number:          08A6
Signing time:             Sun 16 Jun 2024 02:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:43 +0000
Files and hashes:         1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: wmcB22wheZaIwaeMeqjW5ClSCqXx6Ar5ziiJE2s8EEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:7e:78:25:a8:5f:bb:0c:ae:dd:6b:3f:62:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
        Validity
            Not Before: Jun 16 02:00:43 2024 GMT
            Not After : Jun 17 02:00:43 2024 GMT
        Subject: CN=938236ab0da207315c49468a0f2b3dfe97e04ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:4b:68:12:8d:20:1a:1f:6a:2f:b8:ad:03:
                    8f:40:f6:0d:a6:c7:32:0b:c1:a8:c6:47:b6:01:52:
                    1f:42:20:9c:76:36:6f:b3:55:bf:4b:17:49:09:c2:
                    9b:a7:d8:5f:b0:49:1d:73:e1:1d:90:35:ce:3d:c1:
                    32:23:9d:aa:0b:5c:8c:3b:95:bf:49:38:0b:ff:7b:
                    a6:2d:46:27:ca:09:d5:b5:0c:ff:32:c8:3a:32:04:
                    24:45:d7:6b:a3:e0:a3:31:93:8a:c6:ae:d4:5a:70:
                    36:61:9a:f3:bd:46:da:02:b5:1a:b9:38:3c:9e:59:
                    03:f2:35:24:37:9e:4c:74:43:4d:7e:bd:ca:c5:30:
                    d3:b6:5d:3a:ef:62:6b:d8:78:5d:79:9a:3f:9d:03:
                    4f:29:12:a7:ee:8d:89:a2:2c:55:51:7f:f7:16:9f:
                    41:6e:93:17:03:3c:41:e0:64:c2:c3:04:de:37:f8:
                    a3:ce:b8:73:22:ce:b0:be:73:38:ae:bd:2e:1d:7d:
                    7b:02:b7:67:cf:c1:af:7c:2e:25:14:b6:24:ee:db:
                    41:49:da:35:46:a2:ae:02:aa:63:82:65:14:12:82:
                    74:46:50:78:ea:76:ed:a8:bc:38:ba:aa:c0:b0:8a:
                    4a:c6:ca:c3:57:2e:da:6e:b8:14:2c:46:10:bb:7b:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:82:36:AB:0D:A2:07:31:5C:49:46:8A:0F:2B:3D:FE:97:E0:4E:E7
            X509v3 Authority Key Identifier:
                keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:81:28:2a:29:00:ad:47:d7:6a:3c:45:89:47:6c:27:1e:83:
         ed:2f:ec:a5:37:51:b8:c2:ed:ff:5d:f3:66:9b:84:3f:6b:d3:
         07:46:cb:8d:76:55:df:07:db:0e:20:be:09:84:fe:dd:1c:b8:
         d2:ba:23:7a:b3:fa:eb:05:65:7c:43:0e:0a:8e:96:7a:f6:1a:
         d1:7f:b7:eb:4f:f5:2d:2e:a7:bd:0a:e8:de:0d:94:d3:15:b1:
         d4:d5:31:89:7d:5c:1f:b8:27:82:1d:0c:ad:5c:39:2e:20:21:
         7e:65:fa:d7:4f:1e:7b:65:37:62:cc:21:66:eb:82:2f:1e:a0:
         8b:be:d7:ff:0b:1d:a1:c0:f9:3a:21:3f:a1:c3:82:09:4d:f5:
         18:4d:e4:ac:4d:ed:3b:f8:3c:77:20:fd:f5:d0:4f:7f:4b:8e:
         0d:fe:00:18:83:62:b7:a7:59:10:ef:82:c0:ca:00:f6:36:29:
         15:6b:36:e1:49:b7:cf:e1:fb:b7:be:73:af:34:c8:36:1b:14:
         fb:e7:33:94:01:67:b7:4b:01:49:05:8e:a5:ef:bb:a2:52:6c:
         a1:2f:c7:cb:9d:e9:a8:ae:5f:1b:22:a2:79:d9:42:c3:72:3b:
         11:be:a4:d2:a7:32:cf:4c:03:33:a5:0c:bc:c5:39:f5:da:18:
         a7:9d:d9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:52:28 2024 by rpki-client on console-fra.rpki-client.org