Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
File:                     sxwNSGRgtxY3A-X_TYre2XiIx00.mft (raw, json)
Hash identifier:          Gafb6qTlaq/Fx0VNCxqOUAd/PpXB7R1YCbP5xuYOTKM=
Subject key identifier:   10:5E:C9:DB:0E:D4:CF:56:FC:D8:F5:D3:26:4C:0C:CB:E9:41:D7:78
Authority key identifier: B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
Certificate issuer:       /CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Certificate serial:       01901F3501BE10B502ABC1F8F1E1F262AD79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
Manifest number:          037B
Signing time:             Sun 16 Jun 2024 04:01:25 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:25 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:25 +0000
Files and hashes:         1: sxwNSGRgtxY3A-X_TYre2XiIx00.crl (hash: YDyi45dWfZzYqdEtQxdkYCQNcOmWRBdXzR8VAe/LAg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:35:01:be:10:b5:02:ab:c1:f8:f1:e1:f2:62:ad:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31c0d486460b7163703e5ff4d8aded97888c74d
        Validity
            Not Before: Jun 16 04:01:25 2024 GMT
            Not After : Jun 17 04:01:25 2024 GMT
        Subject: CN=105ec9db0ed4cf56fcd8f5d3264c0ccbe941d778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:8a:33:b3:b8:b9:3c:7c:31:6a:f0:77:e7:
                    c0:28:18:db:bc:08:eb:0c:c8:16:3f:7a:ce:88:5f:
                    28:75:42:46:5c:1e:6a:90:5e:f3:cd:a5:1b:e7:3a:
                    8e:1f:f5:98:e8:d8:21:33:72:85:2c:d7:1e:02:ad:
                    d4:74:7f:2f:6e:ac:9d:c4:25:95:fe:f7:16:40:36:
                    95:59:6b:87:e7:00:26:53:67:01:8f:cc:4d:df:28:
                    02:57:e6:60:b2:bd:92:72:42:61:fd:c9:33:55:c3:
                    20:7b:fc:a2:d0:91:14:60:fd:d8:c7:94:9a:ee:7d:
                    a4:dd:ff:f7:e4:34:e6:8e:ab:d1:58:4e:8e:09:84:
                    5d:f6:22:86:97:4d:6a:a1:b0:b6:d8:04:83:9b:9d:
                    7b:9b:43:2e:db:55:6f:ad:05:ec:e7:20:d7:a2:6d:
                    d6:ac:48:7a:17:1e:a4:ad:c2:6b:18:05:16:55:0b:
                    44:10:8e:01:f9:16:a6:4d:f7:5a:d5:9d:01:09:76:
                    ae:0d:1c:99:a0:06:ae:43:31:38:04:bd:b3:80:16:
                    26:2f:f0:ed:d7:a6:da:aa:6c:7f:d0:c6:2b:06:3c:
                    4b:94:f0:ab:ee:ed:7d:55:3d:46:f5:22:71:d5:ce:
                    eb:54:e2:b8:0d:c0:48:e9:76:6f:79:61:9a:1c:60:
                    28:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5E:C9:DB:0E:D4:CF:56:FC:D8:F5:D3:26:4C:0C:CB:E9:41:D7:78
            X509v3 Authority Key Identifier:
                keyid:B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f1:3c:9e:17:7d:f9:6e:cb:9c:b0:a4:e8:37:36:0a:48:e8:
         4a:96:a9:bd:ae:e7:14:f3:07:b1:22:2a:7b:7a:7c:4c:f8:99:
         7b:f4:d2:97:65:e1:95:19:4d:d9:5a:f1:0d:49:49:28:10:35:
         be:30:e4:65:ba:ce:d5:85:fe:e5:c6:e5:1d:82:5e:b7:91:64:
         6d:0b:2e:6f:47:0f:50:1e:35:78:48:b7:29:bf:47:e4:fc:a1:
         0f:48:52:68:54:9b:d8:16:03:3d:ce:41:94:7c:9a:03:70:96:
         61:13:e1:74:e7:28:b4:14:8e:e5:9b:2d:b4:37:87:00:cc:43:
         e7:09:5b:e7:a4:40:ec:de:9c:eb:4f:f0:79:9b:26:96:3f:75:
         ff:25:2d:07:74:39:9d:1b:74:31:f6:70:96:ce:d2:f7:92:61:
         7f:e1:aa:e5:81:da:95:8f:db:5d:a4:fe:51:33:d5:4f:58:03:
         03:30:6c:cb:bd:94:a6:f6:cf:bb:49:23:8b:e8:2a:b6:1f:82:
         dd:56:b4:8c:54:3c:6c:56:22:81:df:cc:71:cb:d7:d6:c6:79:
         9d:c5:ba:d0:c7:cf:7d:ef:f6:20:d8:14:57:e4:21:fc:18:88:
         3d:fd:80:67:9f:12:73:05:3b:46:69:9b:55:c1:da:43:ba:f9:
         4e:d7:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:11 2024 by rpki-client on console-fra.rpki-client.org