Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File:                     S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier:          8gIlKLqu2CUcZA7EH1tuJDrBGFxF9sDxT/yjeFjYHtc=
Subject key identifier:   9F:1D:95:EF:9A:93:B9:A4:83:21:7A:88:0A:52:74:01:BE:9C:5D:72
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer:       /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial:       01901FDA55ADDC94EB2C879886208356DF6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number:          02F1
Signing time:             Sun 16 Jun 2024 07:02:00 +0000
Manifest this update:     Sun 16 Jun 2024 07:02:00 +0000
Manifest next update:     Mon 17 Jun 2024 07:02:00 +0000
Files and hashes:         1: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: dK1WXO2DDKfqZ1vPzrVxs7oBVjSTTpOcSp+19qbBepY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:da:55:ad:dc:94:eb:2c:87:98:86:20:83:56:df:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
        Validity
            Not Before: Jun 16 07:02:00 2024 GMT
            Not After : Jun 17 07:02:00 2024 GMT
        Subject: CN=9f1d95ef9a93b9a483217a880a527401be9c5d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:50:a1:cd:be:75:1e:fe:74:d7:40:ee:30:
                    72:ef:f3:1c:22:74:46:c5:56:11:d9:56:ae:17:b6:
                    c9:7a:74:2d:9e:63:da:22:76:eb:08:15:ce:05:96:
                    02:11:85:51:b1:fe:76:5c:1f:dd:23:96:94:b9:6c:
                    e0:3a:9b:17:78:5f:10:42:2a:5a:49:dd:55:42:2f:
                    a0:5a:f5:67:b9:62:e9:df:ba:47:64:7a:b0:af:26:
                    c9:ce:7a:5c:08:07:ab:7b:3e:af:74:cc:72:bd:21:
                    9d:c5:28:87:16:1c:a6:2b:86:d0:9d:20:63:8a:2c:
                    f6:a2:47:b1:f5:c3:4f:01:40:10:d5:a1:a6:5e:1a:
                    e2:75:81:5e:b6:4c:ce:fb:4e:38:ad:9d:8e:0b:5c:
                    6e:87:25:35:9f:6b:38:06:84:ab:57:cd:b7:a2:fa:
                    98:94:47:63:4a:0e:6d:1f:fd:0b:49:f8:c7:c9:f0:
                    03:d4:08:09:76:fc:f6:1c:41:aa:f8:a0:98:fb:45:
                    9a:d5:34:1d:52:80:e5:fe:da:75:03:dc:fb:cd:80:
                    de:9b:f0:3e:ee:3b:78:93:ac:2d:43:91:f0:2d:d4:
                    cf:ae:ff:a5:02:c8:91:58:74:68:ba:2a:f3:dd:73:
                    3c:5e:99:88:d7:c7:0f:31:fe:d6:c4:74:b2:9b:1c:
                    ec:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:95:EF:9A:93:B9:A4:83:21:7A:88:0A:52:74:01:BE:9C:5D:72
            X509v3 Authority Key Identifier:
                keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:94:61:3a:78:87:76:ff:f8:d7:ea:65:4b:c3:31:43:4a:3a:
         57:53:90:4e:b4:79:d6:3e:4d:38:7b:c4:78:8c:de:2d:2e:b9:
         57:ec:cf:58:b3:8b:23:21:1a:5f:c1:8b:26:0f:4c:99:f6:65:
         da:f9:2e:d3:c7:d7:6d:ae:ca:96:db:71:76:73:e9:74:ec:32:
         74:4e:bf:db:f0:f0:5a:54:7e:5c:78:2b:e8:b2:79:00:50:87:
         28:8d:ce:7a:ce:2e:c6:4a:8c:3b:aa:47:81:77:f6:5c:76:4d:
         b6:5e:82:0a:0b:2e:c7:b6:a9:d3:88:c0:7b:37:05:86:14:b0:
         5c:d0:65:f9:76:95:b0:f6:1b:3b:00:9d:bf:8d:fc:2f:4d:fb:
         10:93:ec:a1:e0:73:a9:68:0e:b9:52:db:07:a5:2f:9b:da:f1:
         5c:12:0d:4b:ae:94:e2:54:f9:b4:e8:28:8e:90:4e:d0:3e:06:
         0a:af:cd:1f:72:b4:24:83:5f:c5:80:6f:b0:c1:19:ec:78:63:
         4a:96:87:00:24:64:f0:75:16:e4:43:60:3c:cc:23:87:bd:6f:
         a6:a7:c7:3d:39:f5:02:6f:91:87:27:9b:9c:a1:fb:4e:ae:22:
         50:d3:e2:54:11:98:75:05:e0:ff:83:bc:0f:2e:ab:49:93:c2:
         dc:4e:3f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:03:26 2024 by rpki-client on console-fra.rpki-client.org