Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
File:                     rHI58-_bN5H1vlVSmbXYFpfz0BI.mft (raw, json)
Hash identifier:          4YcJpSD1G6BsCeJ9uDcL1KW+DfZcvb5eY535HW0bnVg=
Subject key identifier:   33:1E:EA:CF:34:0E:61:41:F8:35:75:D0:C2:48:34:74:23:7F:67:0F
Authority key identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
Certificate issuer:       /CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Certificate serial:       01901E58F67A50630887A14DF224C3339961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
Manifest number:          0D82
Signing time:             Sun 16 Jun 2024 00:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:05 +0000
Files and hashes:         1: rHI58-_bN5H1vlVSmbXYFpfz0BI.crl (hash: YoGYGc4za0ZFwb4ieegs1+ZHOEXkClgGqe3JnOpVH6c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f6:7a:50:63:08:87:a1:4d:f2:24:c3:33:99:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7239f3efdb3791f5be555299b5d81697f3d012
        Validity
            Not Before: Jun 16 00:01:05 2024 GMT
            Not After : Jun 17 00:01:05 2024 GMT
        Subject: CN=331eeacf340e6141f83575d0c2483474237f670f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:18:f4:d1:b8:8c:d1:6a:ce:ab:9d:da:bb:
                    d5:96:6d:b8:49:36:a5:73:db:c0:b4:c4:9f:2c:0b:
                    18:f2:41:77:ee:d4:1a:84:d1:95:73:74:11:13:a9:
                    38:85:ea:2a:9e:ec:38:68:a5:32:8b:cf:c1:fb:0f:
                    eb:4d:2e:b9:30:b5:8a:18:ca:28:84:bc:fa:c4:ae:
                    81:c1:b3:de:3b:0f:4b:9c:49:8c:ce:70:c5:cc:ae:
                    81:af:0f:b8:15:de:62:37:48:85:e7:69:12:22:08:
                    e6:ac:c1:86:fb:48:7a:00:a6:84:27:a7:db:a7:82:
                    50:43:4b:42:59:db:3a:b6:ae:66:ea:09:60:61:d7:
                    4b:c5:f9:79:29:cc:96:29:f8:58:b1:92:ca:e1:12:
                    07:49:e0:89:2d:60:ff:26:21:d3:bd:e1:ed:6f:56:
                    9a:62:cf:d4:45:56:dd:37:58:13:94:88:45:85:c5:
                    dd:21:ca:0d:28:a8:a3:c9:bc:89:b8:a6:b5:95:7d:
                    ed:26:8e:dc:be:d9:ef:46:d5:2f:f0:bc:cc:b4:3f:
                    b7:46:3d:47:c3:fc:4b:1e:31:b7:f2:55:42:0c:64:
                    26:92:99:3b:c3:81:cc:26:74:98:bf:f0:b4:4e:3d:
                    17:b0:ad:79:a4:f5:4d:6d:82:f8:8c:47:06:a4:01:
                    29:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1E:EA:CF:34:0E:61:41:F8:35:75:D0:C2:48:34:74:23:7F:67:0F
            X509v3 Authority Key Identifier:
                keyid:AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:06:22:0d:99:36:00:44:bd:b1:4a:b3:9c:03:d1:df:aa:
         d3:cf:7c:be:26:27:c2:2e:69:87:10:cb:8d:70:91:fa:1b:c4:
         43:af:92:de:8b:6b:33:40:8f:a4:63:2e:a5:f5:ea:77:f9:ae:
         1d:ca:05:11:67:6f:dd:fa:40:5b:d6:74:f6:fc:74:d6:4c:c4:
         8f:ce:e8:0c:16:ea:bc:3d:b4:c2:0f:ef:1e:ca:e1:38:67:02:
         f1:dd:88:cb:87:a1:23:8a:49:a1:5a:b1:c6:32:31:a1:4e:59:
         3e:b5:68:7e:03:a5:52:b8:73:1d:70:ab:f2:3e:d6:88:82:b6:
         49:5e:95:ba:9c:28:22:40:b2:a2:72:13:68:d1:53:2e:83:cb:
         d7:2f:7a:2d:5c:49:05:f8:7a:27:d8:ba:ba:86:eb:6a:8b:1a:
         97:ec:91:8c:e3:8d:b6:3f:09:87:d6:98:f1:34:54:39:a6:cb:
         18:28:ef:f1:65:59:cf:8c:0d:9f:f6:56:ae:3d:4a:8e:46:77:
         64:3c:6e:5a:de:2e:b5:e1:44:1f:df:b8:32:91:fc:b9:5e:61:
         75:7a:4f:56:2b:6c:a0:85:2f:64:d1:04:30:56:fb:4c:8a:8d:
         bb:08:89:eb:b2:01:e1:81:bf:91:7b:12:12:e2:18:8b:12:a6:
         38:76:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:58:31 2024 by rpki-client on console-ams.rpki-client.org