Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/f0c7ca-f736-42e0-bb66-0c3c3eea75c1/1/XPUf3FVIGDqKeT56CofZdw5ra4k.mft
File:                     XPUf3FVIGDqKeT56CofZdw5ra4k.mft (raw, json)
Hash identifier:          JDFHwowieJbzqEvanW/kQDe8JnzTPn19JZuxnaJ7h4w=
Subject key identifier:   27:A0:1B:08:6D:90:47:E8:FB:16:B5:F9:B9:93:99:F9:0A:0F:D1:4E
Authority key identifier: 5C:F5:1F:DC:55:48:18:3A:8A:79:3E:7A:0A:87:D9:77:0E:6B:6B:89
Certificate issuer:       /CN=5cf51fdc5548183a8a793e7a0a87d9770e6b6b89
Certificate serial:       019044F847CEE67AE747D306AEBE15677DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPUf3FVIGDqKeT56CofZdw5ra4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/f0c7ca-f736-42e0-bb66-0c3c3eea75c1/1/XPUf3FVIGDqKeT56CofZdw5ra4k.mft
Manifest number:          080A
Signing time:             Sun 23 Jun 2024 12:00:40 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:40 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:40 +0000
Files and hashes:         1: XPUf3FVIGDqKeT56CofZdw5ra4k.crl (hash: U2ESA/bjUENlsIJtJGm/U6RiH7RjIvwU7YDu21IG9IU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/f0c7ca-f736-42e0-bb66-0c3c3eea75c1/1/XPUf3FVIGDqKeT56CofZdw5ra4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/f0c7ca-f736-42e0-bb66-0c3c3eea75c1/1/XPUf3FVIGDqKeT56CofZdw5ra4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPUf3FVIGDqKeT56CofZdw5ra4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:47:ce:e6:7a:e7:47:d3:06:ae:be:15:67:7d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf51fdc5548183a8a793e7a0a87d9770e6b6b89
        Validity
            Not Before: Jun 23 12:00:40 2024 GMT
            Not After : Jun 24 12:00:40 2024 GMT
        Subject: CN=27a01b086d9047e8fb16b5f9b99399f90a0fd14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:09:66:d6:48:4d:b9:cc:ad:ab:ab:7b:00:
                    63:a9:6e:1d:0b:a4:ca:15:b2:17:54:6e:b3:4e:ea:
                    fc:47:e0:fa:90:b9:95:38:f1:ab:08:c9:2e:12:74:
                    55:f1:98:65:f9:f8:9e:b1:1e:5f:8d:65:cf:ef:90:
                    34:ef:ea:0f:47:5a:a9:80:eb:f9:cc:e3:98:27:c2:
                    ba:ff:81:26:6d:45:c3:21:2e:45:e6:85:1e:85:38:
                    66:e2:eb:e3:45:33:e5:64:03:75:22:f4:cf:ec:8f:
                    78:7d:23:94:46:26:94:3b:ba:3e:39:ec:37:b6:48:
                    93:47:87:d4:aa:04:fb:c9:d3:a7:dd:d1:89:9e:56:
                    f0:54:c4:a4:cf:d2:23:df:b6:db:95:3a:30:7a:af:
                    59:75:01:0c:71:f8:3a:0c:09:d9:29:d1:2a:0b:c4:
                    0f:34:d6:3c:91:1b:16:0a:a7:4b:f1:84:a3:cf:87:
                    70:f9:5b:c5:dd:7b:b2:37:f3:0b:84:6e:0c:8e:21:
                    f6:0c:4f:bc:da:4f:b3:5f:66:4c:dc:1e:ca:4d:af:
                    34:ee:cf:82:cf:10:6e:80:cf:f3:a1:bd:37:28:d6:
                    26:2f:0a:a9:86:86:ea:e0:c7:8b:71:38:4f:7f:10:
                    09:49:8f:e6:34:74:73:f2:15:b8:6b:1e:46:18:a0:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A0:1B:08:6D:90:47:E8:FB:16:B5:F9:B9:93:99:F9:0A:0F:D1:4E
            X509v3 Authority Key Identifier:
                keyid:5C:F5:1F:DC:55:48:18:3A:8A:79:3E:7A:0A:87:D9:77:0E:6B:6B:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPUf3FVIGDqKeT56CofZdw5ra4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/f0c7ca-f736-42e0-bb66-0c3c3eea75c1/1/XPUf3FVIGDqKeT56CofZdw5ra4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/f0c7ca-f736-42e0-bb66-0c3c3eea75c1/1/XPUf3FVIGDqKeT56CofZdw5ra4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0f:d4:92:50:db:34:6d:3c:ba:c8:a8:ac:95:62:9b:56:28:
         03:cc:20:0d:4e:4d:b5:d8:96:6d:f3:7e:26:2a:1e:4f:7f:78:
         2c:ce:53:39:bd:1b:1e:ca:9a:33:8e:f0:c0:95:85:bb:44:61:
         4d:22:89:06:b1:4a:89:b1:8e:2d:90:25:70:d3:87:b7:b8:7e:
         c2:35:c1:1e:08:e0:20:09:07:be:97:21:a7:ec:db:50:cc:ac:
         ed:22:b1:dc:55:44:0e:e9:34:f6:a1:1b:4b:e8:c8:a2:96:34:
         2b:0b:fa:d1:b1:c6:b5:02:e2:bf:ec:ff:11:4c:81:3c:55:2c:
         94:d0:9f:1d:bf:9a:53:de:a2:6d:6c:6f:1e:c0:bb:d7:c4:30:
         f3:37:79:65:ca:fa:a0:8a:e3:38:44:d8:07:ea:48:79:60:1e:
         bf:43:a6:5b:21:c2:f1:bc:8a:70:a3:42:ba:52:21:c5:a2:41:
         0c:89:4a:fa:98:52:ab:55:c1:01:2a:52:ee:73:94:05:1f:86:
         13:14:7b:07:d3:32:14:cd:36:96:1c:c8:10:37:b4:96:6e:10:
         0e:0e:7f:c5:04:6e:65:a0:5b:4a:46:b9:37:65:23:f5:86:bd:
         f1:b3:db:3b:1a:60:22:bb:2e:fa:06:9f:3c:8d:4b:83:f4:eb:
         de:a1:ff:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:33:15 2024 by rpki-client on console-ams.rpki-client.org