Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
File:                     Ze3JFheq3wwsx_H115bb237YWQ0.mft (raw, json)
Hash identifier:          jsUy77n10UGJG//kYDRJD7eaQsu1fcSbc/faaMxXJ2g=
Subject key identifier:   F5:C7:E6:B5:88:3C:6E:A4:82:42:45:1D:7B:F0:9C:F7:67:A3:A3:D5
Authority key identifier: 65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
Certificate issuer:       /CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Certificate serial:       019041C05F5A30EF43EE29A0B709A0C5C24E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
Manifest number:          01A1
Signing time:             Sat 22 Jun 2024 21:00:44 +0000
Manifest this update:     Sat 22 Jun 2024 21:00:44 +0000
Manifest next update:     Sun 23 Jun 2024 21:00:44 +0000
Files and hashes:         1: Ze3JFheq3wwsx_H115bb237YWQ0.crl (hash: J/6PjLTXtkbo4XVcu8WDdXsiHbbmdxVuNCjdITqreBk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:5f:5a:30:ef:43:ee:29:a0:b7:09:a0:c5:c2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
        Validity
            Not Before: Jun 22 21:00:44 2024 GMT
            Not After : Jun 23 21:00:44 2024 GMT
        Subject: CN=f5c7e6b5883c6ea48242451d7bf09cf767a3a3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:a5:1d:b7:ca:da:11:cf:00:ed:ed:31:d8:
                    0d:be:41:c4:f6:40:e3:3c:2a:b4:e1:fd:28:2f:81:
                    4e:09:50:e2:a5:92:10:cd:10:02:dd:e2:37:52:70:
                    e7:60:bc:9b:b2:49:e7:66:02:7f:e0:3a:88:90:c6:
                    ad:24:f7:f4:09:ef:e7:4b:af:b4:9e:74:8b:3d:48:
                    1a:d0:a8:ef:0f:4b:35:72:7d:b7:49:db:aa:44:4e:
                    e7:9d:89:a8:c4:9a:3d:ae:e4:ff:06:5d:87:5a:1b:
                    48:e0:95:e8:1d:cf:c4:ab:66:f3:23:97:f7:f3:9b:
                    0a:01:72:4e:72:72:2a:27:d5:56:71:f2:70:8d:43:
                    80:72:76:4f:0a:86:c4:6a:2d:66:d3:85:5e:25:21:
                    04:2d:5d:c1:8c:de:1b:34:80:b1:9f:cb:db:b2:b7:
                    d1:a5:22:e8:83:21:ec:61:38:00:af:87:f3:21:7a:
                    58:95:04:fb:d5:ab:8e:30:4a:7f:fa:fb:e4:8a:6e:
                    da:5f:e7:28:62:92:32:a7:56:df:4a:e6:a1:c4:de:
                    43:76:65:55:82:37:23:3a:f8:51:8b:29:7a:6f:b6:
                    1c:d3:f3:44:7d:f8:78:24:67:14:39:e2:f0:b0:e9:
                    1c:b6:11:c2:67:1f:3d:c5:2b:72:4c:c9:71:49:d6:
                    4c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C7:E6:B5:88:3C:6E:A4:82:42:45:1D:7B:F0:9C:F7:67:A3:A3:D5
            X509v3 Authority Key Identifier:
                keyid:65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:80:bc:cb:b0:eb:94:7a:bf:68:c8:f8:30:ff:13:a6:62:a4:
         3d:f5:e4:60:38:4e:eb:1e:5c:41:2c:ba:fb:7e:cf:fb:89:0e:
         12:82:c8:9e:b9:83:5b:06:49:72:ed:5c:98:05:7d:c4:b8:9e:
         3e:f6:e5:d7:fa:30:33:ce:8b:22:f4:1b:68:a4:10:e7:f7:5d:
         72:76:fd:cd:ae:48:ac:25:9b:cf:5b:84:98:43:b7:84:95:00:
         7a:c0:7b:3d:9c:db:7b:ec:81:b4:c8:05:05:97:ee:34:8a:d8:
         84:26:76:40:81:7e:62:98:5b:fb:fb:42:92:27:63:b4:80:dd:
         a3:21:d3:7e:47:81:9f:31:c4:ae:37:fd:75:8f:c2:17:f2:f9:
         1c:7d:04:f5:e5:ad:8d:21:43:4b:45:89:5f:05:09:4a:c9:c4:
         32:ce:6e:6a:57:d3:84:fd:b6:22:1f:27:f7:f4:0a:8c:8c:e9:
         ec:ee:26:ec:3e:d4:b4:43:71:61:b3:84:a9:56:4d:99:4d:fb:
         80:e9:00:3f:91:1d:38:5b:b1:92:0c:01:65:17:c2:08:d9:71:
         8a:ee:69:b6:f2:5d:72:5f:24:90:d0:9f:c2:a1:10:ef:75:63:
         4e:92:0f:6f:94:43:e7:b7:b8:98:23:92:fd:70:d7:76:83:db:
         99:ea:b8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:16:48 2024 by rpki-client on console-ams.rpki-client.org