Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File:                     ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier:          9qil+/Ppo7NAxBIWZ+oQr8amNGJhJCN7mvQ/MzDaXmw=
Subject key identifier:   36:C0:7C:F6:18:03:88:D3:54:87:7A:45:43:F9:E1:01:57:0C:ED:D0
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer:       /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial:       01901D0F6084BFB1B8F8F4DB5641E01F4BAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number:          0558
Signing time:             Sat 15 Jun 2024 18:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:05 +0000
Files and hashes:         1: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: VAmLwqGRHLO/cvg1LVvPD9EyGxv52k62uXbAReyWap4=)
                          2: kYa3Wbvy2PiYTHJwRUQP3lE-Xcw.roa (hash: MaZsE7u4ZEM9dZ0yt0CAydRSgs3KbwTEwUZcxA4MpHg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:60:84:bf:b1:b8:f8:f4:db:56:41:e0:1f:4b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
        Validity
            Not Before: Jun 15 18:01:05 2024 GMT
            Not After : Jun 16 18:01:05 2024 GMT
        Subject: CN=36c07cf6180388d354877a4543f9e101570cedd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:87:82:b6:aa:a0:e4:3e:c0:1b:7e:ef:f9:44:
                    a8:73:98:c8:bc:22:f8:3d:43:93:0d:67:94:55:81:
                    95:e1:cb:9f:1e:e8:fe:3f:bf:b6:1b:f4:0b:33:91:
                    73:2e:fb:52:59:0b:79:da:2a:e4:fe:4c:b0:8b:9f:
                    29:0d:29:62:a3:1b:5a:68:54:77:39:32:18:bd:c2:
                    cb:27:3a:b5:1f:2c:b2:62:83:86:e0:e9:b4:ef:fb:
                    db:9c:05:63:56:75:fd:17:85:aa:30:59:00:1b:f7:
                    a8:ca:02:fd:8c:6e:72:9b:7c:b1:28:0b:62:82:5c:
                    32:45:be:26:85:b6:58:95:ab:18:f3:99:48:02:ce:
                    ce:02:28:de:98:1b:38:27:ee:65:57:b2:f9:48:2e:
                    19:e2:a9:9c:24:7f:67:8b:5b:04:3b:4c:76:c5:5b:
                    89:d1:db:41:e8:fd:11:91:15:13:c4:b4:61:f4:e1:
                    de:07:93:74:2f:4b:e1:f5:1f:41:92:b8:f8:87:d5:
                    0d:30:ee:d7:2f:fc:e4:3d:3b:17:79:60:3f:d0:2b:
                    cf:7d:df:bd:fa:f0:f7:3b:6f:79:19:01:3e:cb:88:
                    db:e4:15:c2:e0:46:c3:db:85:6c:cb:66:38:29:f4:
                    fe:27:ec:83:17:3b:89:de:d6:ee:4b:18:b0:89:61:
                    b0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C0:7C:F6:18:03:88:D3:54:87:7A:45:43:F9:E1:01:57:0C:ED:D0
            X509v3 Authority Key Identifier:
                keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e3:ac:1d:93:17:b3:89:d1:6f:00:34:c9:8e:82:2d:4c:95:
         2e:dd:37:ee:b5:28:87:db:b2:67:fb:4a:62:91:cb:a8:0a:8f:
         1e:93:4e:0e:07:f0:65:9b:de:e9:8d:b6:aa:37:f1:fa:c2:fa:
         84:ea:d1:a2:49:98:d1:a9:f2:e0:cb:77:a1:62:18:6d:14:ff:
         ce:2a:2d:83:c3:30:26:69:18:d4:55:a6:6f:f6:f1:3e:5d:eb:
         2b:95:ca:5d:e2:96:ba:9f:23:45:33:0a:1f:fe:01:25:e1:79:
         06:4a:78:21:1b:09:e9:5b:76:65:16:06:9d:b6:1a:c3:ab:94:
         e9:2a:98:10:89:f4:61:9d:12:9e:55:3f:0b:82:18:2f:70:e1:
         e5:53:20:77:e9:97:b2:13:47:7d:67:49:2e:4b:42:17:b0:85:
         11:17:61:13:80:a9:fb:7c:00:cf:1e:29:4b:73:67:1b:2a:07:
         d7:eb:bf:22:cf:4d:41:7f:b4:ae:72:fd:ed:f2:1a:af:4f:01:
         3e:ed:2a:45:ce:93:b5:8d:43:06:29:ea:dd:8a:9d:84:e9:4e:
         02:d8:9f:fa:35:8d:37:ec:d2:7f:66:10:28:1a:57:ac:1b:05:
         34:c4:5d:e3:19:82:2c:5c:26:93:86:21:fe:4c:e9:d3:03:d1:
         bf:0d:20:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:47 2024 by rpki-client on console-ams.rpki-client.org