Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
File:                     u0OX5un46iWRVggDysuzI5Ytn64.mft (raw, json)
Hash identifier:          UaziiUpGsWe79H1beYcCOJxwMoLcmIZG+BxuVx+3D4o=
Subject key identifier:   D5:D0:63:DB:B9:D6:38:AA:C3:C2:3F:F6:56:62:C1:53:36:C7:1E:DE
Authority key identifier: BB:43:97:E6:E9:F8:EA:25:91:56:08:03:CA:CB:B3:23:96:2D:9F:AE
Certificate issuer:       /CN=bb4397e6e9f8ea2591560803cacbb323962d9fae
Certificate serial:       0190448C78B99A5B7BA43607A6DED68C6B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0OX5un46iWRVggDysuzI5Ytn64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
Manifest number:          0C1A
Signing time:             Sun 23 Jun 2024 10:02:54 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:54 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:54 +0000
Files and hashes:         1: u0OX5un46iWRVggDysuzI5Ytn64.crl (hash: hGGufP6KqiRO4Dw+WzOH8ECEI4z80jIA/KTfZeD/bjE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0OX5un46iWRVggDysuzI5Ytn64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:78:b9:9a:5b:7b:a4:36:07:a6:de:d6:8c:6b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4397e6e9f8ea2591560803cacbb323962d9fae
        Validity
            Not Before: Jun 23 10:02:54 2024 GMT
            Not After : Jun 24 10:02:54 2024 GMT
        Subject: CN=d5d063dbb9d638aac3c23ff65662c15336c71ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:98:a3:85:c4:4e:98:d3:05:f8:8e:0f:3b:
                    e3:d0:9f:2a:07:5f:b9:1e:7f:55:02:fc:99:c8:c2:
                    70:92:6e:36:be:8b:5b:50:1b:b1:58:9d:b8:d7:45:
                    3f:2b:a8:26:16:f1:d2:19:73:e9:51:1a:f7:a0:06:
                    f2:30:70:8f:b2:27:3e:5c:14:0e:17:18:5a:6b:47:
                    a3:b8:cd:62:f9:0c:f6:af:88:48:eb:c2:f3:89:2f:
                    fb:fb:d9:1b:92:d8:d0:eb:69:0d:83:55:3a:4a:64:
                    88:eb:12:43:e9:21:3c:59:02:0b:c2:0d:ed:69:e4:
                    e4:16:e5:86:ea:b0:b1:30:68:19:29:9f:28:74:ba:
                    fa:8f:5b:d8:51:63:0d:da:34:4e:59:42:7b:a1:40:
                    86:3e:da:ab:b6:62:00:d0:dc:50:21:1d:27:ab:02:
                    f6:52:e7:d8:68:5a:ea:e3:e0:9c:82:5e:d2:de:93:
                    a4:0c:4b:17:bd:10:02:55:fc:7f:77:c6:92:63:70:
                    15:c1:9f:ce:ac:ff:1f:2a:67:9f:6d:0a:48:44:3d:
                    f2:44:86:4a:8a:59:49:ab:b5:f4:9b:12:f1:c7:a0:
                    0b:94:9d:e2:58:30:78:90:7b:99:ee:f3:89:25:fb:
                    b4:e8:c0:3c:5e:1b:86:d1:33:11:c8:a1:2c:a5:2c:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D0:63:DB:B9:D6:38:AA:C3:C2:3F:F6:56:62:C1:53:36:C7:1E:DE
            X509v3 Authority Key Identifier:
                keyid:BB:43:97:E6:E9:F8:EA:25:91:56:08:03:CA:CB:B3:23:96:2D:9F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0OX5un46iWRVggDysuzI5Ytn64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8e:fb:55:e0:79:96:f7:59:c0:44:7a:b0:4e:1c:6c:c7:c9:
         b2:f0:d3:be:f3:9c:b3:be:9c:b2:59:ea:ca:f8:c1:5f:a6:c5:
         ff:1e:7c:86:58:7d:f3:d8:c6:df:78:bd:40:55:6b:bd:c0:e9:
         bd:5b:d2:72:87:c2:e5:d3:be:ba:d7:ef:90:fb:e9:91:04:4d:
         f0:6d:36:43:f4:26:80:24:f3:5c:a3:85:53:f6:14:e7:53:f4:
         5c:92:b2:d6:7f:ff:dc:07:e1:8e:21:84:de:7d:29:c4:e3:f2:
         02:cf:e7:db:2e:a4:de:2b:6b:dd:cf:2c:a1:23:ba:84:d7:25:
         80:4f:36:f0:82:a5:c2:e0:83:3a:b7:7d:1a:6f:57:ec:d9:c7:
         c3:b2:04:d9:87:80:a5:30:2a:6b:53:33:27:e8:37:80:ba:f9:
         f9:53:ae:44:70:c3:25:fe:72:72:96:73:cc:e4:e6:d6:27:12:
         6f:a4:53:32:2f:f0:7b:66:e8:11:a5:c7:2a:6f:c0:fc:6e:2f:
         2d:eb:58:9a:b8:3e:eb:01:4c:d6:dd:52:cf:4b:45:99:5e:d1:
         76:b9:ea:85:a5:6d:75:3a:39:ca:f5:9a:b0:2f:db:8e:6d:45:
         90:ce:39:d9:87:1b:3b:f4:65:c9:81:7a:db:03:1c:46:43:8a:
         0d:3b:97:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:35:13 2024 by rpki-client on console-ams.rpki-client.org