Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft
File:                     iF7nSXYIGvmeHXt0Btio9fbA97k.mft (raw, json)
Hash identifier:          s59/QPpTNliDsm+FvSy8cg3a5Ruq7W67Hl3oi/XR+L8=
Subject key identifier:   61:62:A3:2E:89:F5:E9:AD:CD:96:58:F6:63:4A:B5:CA:85:B1:2B:28
Authority key identifier: 88:5E:E7:49:76:08:1A:F9:9E:1D:7B:74:06:D8:A8:F5:F6:C0:F7:B9
Certificate issuer:       /CN=885ee74976081af99e1d7b7406d8a8f5f6c0f7b9
Certificate serial:       01901D0EFC31908D6E9E34E210E87B7D2E0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iF7nSXYIGvmeHXt0Btio9fbA97k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft
Manifest number:          0172
Signing time:             Sat 15 Jun 2024 18:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:39 +0000
Files and hashes:         1: iF7nSXYIGvmeHXt0Btio9fbA97k.crl (hash: nr7OXLfxnMLuF1Ew/DAfEQGtYqZ//sfVn2oPM0CMVzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iF7nSXYIGvmeHXt0Btio9fbA97k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:fc:31:90:8d:6e:9e:34:e2:10:e8:7b:7d:2e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885ee74976081af99e1d7b7406d8a8f5f6c0f7b9
        Validity
            Not Before: Jun 15 18:00:39 2024 GMT
            Not After : Jun 16 18:00:39 2024 GMT
        Subject: CN=6162a32e89f5e9adcd9658f6634ab5ca85b12b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:cd:91:48:6d:cf:93:e5:89:c6:83:a5:9e:
                    20:18:30:7e:6e:b5:3d:98:d3:34:00:20:d1:84:78:
                    82:32:8b:46:2e:b2:e8:21:cc:ef:2e:d6:5f:f6:6d:
                    75:41:42:8c:63:1e:9d:3f:9a:dc:5e:31:07:5a:84:
                    a1:ae:ed:26:d0:1e:e1:a5:7e:16:e7:75:93:a4:2c:
                    c1:48:78:cb:22:19:b2:25:43:88:e1:8a:0b:22:12:
                    65:6d:9f:74:a1:fa:5b:ef:9d:eb:90:19:bd:2d:19:
                    54:48:01:a7:02:33:1b:8e:39:1a:fa:dd:5a:e8:8d:
                    ca:0c:c8:65:f2:be:30:d1:c3:31:ac:7f:83:51:cc:
                    a2:d6:79:87:38:71:d2:6c:dc:b8:8e:cf:a8:e8:84:
                    56:c1:62:c1:3d:6e:1d:3a:b0:1a:b4:7a:75:4c:d4:
                    ba:71:70:d3:c5:b5:2b:16:03:8e:52:fb:8f:bd:7f:
                    2f:18:98:10:f4:20:d9:f5:ed:d7:ba:8d:07:e2:e8:
                    24:44:b3:e3:07:ab:0c:f4:84:d2:58:b0:24:cb:c0:
                    b3:46:a2:2e:a0:25:b6:5b:c8:6b:25:4b:62:e1:5c:
                    0d:67:a7:01:fb:df:e8:e3:3f:1c:f5:dd:41:77:97:
                    6c:3d:4f:a8:a1:46:2c:15:8d:e1:15:04:65:30:9d:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:62:A3:2E:89:F5:E9:AD:CD:96:58:F6:63:4A:B5:CA:85:B1:2B:28
            X509v3 Authority Key Identifier:
                keyid:88:5E:E7:49:76:08:1A:F9:9E:1D:7B:74:06:D8:A8:F5:F6:C0:F7:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF7nSXYIGvmeHXt0Btio9fbA97k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:38:03:b4:cd:36:b8:99:c3:c1:70:02:ba:1c:94:e2:55:c6:
         18:9f:f7:8c:a2:06:e3:5e:f5:1d:20:f2:fe:df:c4:25:47:bb:
         3b:14:17:05:0e:47:4b:af:cc:2f:55:dc:39:74:a8:f2:69:6f:
         67:83:a8:36:eb:36:1c:d9:81:74:d4:3d:15:83:23:cc:f3:02:
         72:fc:5f:52:0a:77:d0:32:01:2f:5f:13:4e:1f:4e:11:1b:fd:
         9c:78:94:8e:0c:31:96:18:74:21:02:ee:30:f3:4b:61:3e:7a:
         86:c5:95:00:bf:00:c5:0b:d0:90:44:32:46:69:cf:7b:19:97:
         ea:a1:d9:a0:52:8f:5b:92:fc:2b:96:da:4f:8d:3f:82:62:7e:
         db:b9:0b:a8:74:ef:c5:c5:be:8a:97:2b:2b:c8:95:b5:e0:c6:
         f8:3f:fb:c6:7f:5f:c9:80:e9:7e:0c:dc:26:ec:80:d7:49:8d:
         ac:99:76:6f:eb:04:70:96:12:bc:d7:f0:f2:49:2a:31:16:39:
         b4:18:5c:6b:b9:42:06:3f:45:7b:11:54:0c:c9:8d:82:82:6e:
         ac:c7:31:3c:ac:b7:6e:e4:b2:0f:18:44:9b:00:7a:69:c5:b3:
         a8:4a:40:8d:3a:87:d3:98:38:f2:60:fc:8d:aa:35:37:77:79:
         12:5f:41:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:18 2024 by rpki-client on console-ams.rpki-client.org