Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
File:                     sxwNSGRgtxY3A-X_TYre2XiIx00.mft (raw, json)
Hash identifier:          MOU+c3EtArS6QTN1WIZ6DSGA15f1bpy/cbTIHUGnXjU=
Subject key identifier:   2F:35:C7:22:16:AC:8C:EE:73:24:99:EB:64:6A:A2:E1:7C:56:74:11
Authority key identifier: B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
Certificate issuer:       /CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Certificate serial:       019045D49C6178681AE1F9D5A217BBB377C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
Manifest number:          038F
Signing time:             Sun 23 Jun 2024 16:01:19 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:19 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:19 +0000
Files and hashes:         1: sxwNSGRgtxY3A-X_TYre2XiIx00.crl (hash: MLLbjppTQ1sxcpC4v5Yl/lAS46mbr2kxRNfRUnC8IHk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:9c:61:78:68:1a:e1:f9:d5:a2:17:bb:b3:77:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31c0d486460b7163703e5ff4d8aded97888c74d
        Validity
            Not Before: Jun 23 16:01:19 2024 GMT
            Not After : Jun 24 16:01:19 2024 GMT
        Subject: CN=2f35c72216ac8cee732499eb646aa2e17c567411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:7a:07:d7:cd:c3:bb:67:2b:ea:8f:b7:da:
                    24:ca:46:37:5f:1e:4e:52:75:56:bd:cd:62:3f:f8:
                    59:b1:56:1b:54:60:7a:cd:66:b3:a7:43:d7:fa:83:
                    46:fd:90:6d:e4:38:b1:89:66:d1:b2:d4:57:f4:70:
                    ac:06:8f:5e:a5:94:c7:ef:8e:61:d0:52:e0:01:d9:
                    81:46:ce:7a:ef:ed:bd:10:ff:a9:0b:d2:8f:18:45:
                    ff:2b:da:16:f3:a3:db:f1:82:ad:56:0f:b4:b5:44:
                    de:70:07:c9:e4:5b:46:d0:39:6c:28:e7:d5:bc:38:
                    d3:f1:d5:2f:f0:cc:bb:20:58:f7:b0:4b:78:09:77:
                    7b:4b:29:ed:78:ec:75:0b:c0:2b:c2:53:2a:55:fd:
                    80:1e:df:12:6f:94:73:a4:ec:c2:8c:09:0e:03:3f:
                    a3:1c:09:9a:39:3a:54:4e:a6:89:13:ae:98:65:90:
                    6d:01:b3:b9:86:0f:05:32:de:03:3b:83:79:39:f6:
                    51:f5:23:d6:3c:de:c3:bd:2e:a9:42:fc:6c:4d:68:
                    d8:b2:ea:19:fd:17:44:85:8b:ee:d3:a5:46:0d:df:
                    f5:9f:dc:15:83:66:66:f0:4f:a7:44:97:39:51:ec:
                    4b:f8:8a:47:c1:35:b6:a0:a4:49:79:ff:72:24:89:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:35:C7:22:16:AC:8C:EE:73:24:99:EB:64:6A:A2:E1:7C:56:74:11
            X509v3 Authority Key Identifier:
                keyid:B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4a:69:1f:71:8c:50:f2:a8:85:2b:6a:1b:21:cb:8f:db:c6:
         25:7b:13:74:89:f5:6e:e1:fd:28:43:8d:85:22:8c:15:c5:47:
         6e:d5:08:fe:99:bc:85:af:d0:67:e8:f5:ee:c2:40:6b:50:52:
         69:19:4b:38:10:47:1a:92:5c:d6:5d:53:b3:f6:53:24:ec:3b:
         d1:22:a9:27:e4:33:d0:33:aa:07:1f:18:18:bf:7c:fb:c0:57:
         1a:84:f8:ca:93:ba:06:69:cb:2a:43:ea:5a:e4:ec:e1:50:2b:
         ee:47:86:e1:de:f7:b4:1c:bd:3b:40:7b:4e:4e:b3:1c:4e:eb:
         77:d3:bd:86:ef:c2:46:e7:64:b8:8d:ff:e1:7f:c4:cf:0f:f1:
         5d:4b:5c:e2:c8:97:64:64:da:97:f8:6e:30:c1:15:8f:7f:f4:
         3c:99:24:21:cf:9b:36:02:3d:e8:0b:e4:de:ee:e3:cc:fc:09:
         05:fc:a1:6c:8a:07:bc:33:cc:4b:64:a6:b5:b6:2d:26:d2:8b:
         ba:2a:bc:e1:c2:68:4e:ab:19:8c:55:d8:ac:9a:ed:e5:e1:58:
         67:47:20:52:77:d3:7c:26:61:ac:57:87:c1:ab:cc:56:73:33:
         42:6e:34:72:db:c4:e7:2c:af:bd:6f:5c:cd:27:43:b2:ca:4b:
         4d:e3:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:10:38 2024 by rpki-client on console-fra.rpki-client.org