Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
File:                     0XSpf-m-DvYs3ln0GppfCZGCkUc.mft (raw, json)
Hash identifier:          F4FhRLfUN74wqvEZFSUR4b8oLY29wwHXbRmBxNCUZjI=
Subject key identifier:   E5:47:30:10:36:3C:FE:41:16:7B:08:ED:B5:19:5A:DD:18:5B:10:64
Authority key identifier: D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
Certificate issuer:       /CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Certificate serial:       01901D46273C9DD1D63246102CABBC48FEF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
Manifest number:          0DB1
Signing time:             Sat 15 Jun 2024 19:00:55 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:55 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:55 +0000
Files and hashes:         1: 0XSpf-m-DvYs3ln0GppfCZGCkUc.crl (hash: sb9b+ixoqeYXUVwfa0kwmB1NxyiSbsYp2sscfK0VBUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:27:3c:9d:d1:d6:32:46:10:2c:ab:bc:48:fe:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
        Validity
            Not Before: Jun 15 19:00:55 2024 GMT
            Not After : Jun 16 19:00:55 2024 GMT
        Subject: CN=e5473010363cfe41167b08edb5195add185b1064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c0:73:20:34:98:af:fb:44:19:7b:07:9d:18:
                    0b:39:56:a2:69:32:e5:8b:a3:73:d9:1e:ed:f0:f2:
                    39:bc:8e:5d:00:a8:b1:f7:aa:a6:8b:7a:2d:8b:ac:
                    f1:c0:4c:43:4b:fc:58:7b:72:71:89:62:e4:e6:55:
                    06:96:aa:96:92:c9:2a:55:5c:6e:3b:8f:f4:fd:63:
                    9b:1e:21:b0:4e:e6:07:99:05:c8:62:c1:84:2e:06:
                    9b:77:55:57:49:a1:31:46:48:79:6e:11:df:22:e3:
                    07:9c:97:e0:d2:95:cb:c4:4a:18:4f:40:6c:b7:86:
                    89:c5:0e:be:4a:ea:0e:21:40:8c:ca:82:e6:9c:fd:
                    b3:42:de:41:e8:06:4b:8a:da:c5:83:04:96:ed:23:
                    03:16:d3:c9:50:b2:f6:3b:f1:e5:26:82:34:17:6a:
                    08:c1:45:06:26:ab:b2:90:c3:38:58:ac:86:92:d7:
                    b9:b6:95:64:cc:e1:fb:93:be:dc:dd:f4:b7:e5:8b:
                    59:0c:10:de:47:0c:ef:77:69:0e:60:99:ae:b0:78:
                    a2:27:5c:26:1e:b0:0a:13:3d:d5:0f:f9:99:63:a2:
                    be:67:b2:c8:74:a5:59:56:13:c8:60:b8:7c:3b:d0:
                    0a:b6:9c:34:56:23:3e:88:a8:ca:c9:95:ec:5b:96:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:47:30:10:36:3C:FE:41:16:7B:08:ED:B5:19:5A:DD:18:5B:10:64
            X509v3 Authority Key Identifier:
                keyid:D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:bb:48:35:a8:5c:28:60:f0:1b:8a:41:bd:48:6f:cc:2d:b4:
         88:df:14:df:93:85:99:21:3c:eb:15:52:48:ae:9d:f6:f5:ef:
         40:20:7b:a9:7d:53:f4:0f:1e:59:13:14:77:a3:c9:ae:05:2c:
         a6:37:d2:4b:91:55:91:70:6b:b3:75:b5:ea:30:69:37:d0:46:
         cc:bd:fa:2c:a4:1d:ec:cb:dc:09:58:0a:c5:58:ef:5e:e4:e7:
         32:64:52:66:f2:a5:ce:88:3e:40:0c:2a:63:12:2b:9a:f4:77:
         55:3a:44:4e:a7:0c:a7:31:e5:80:84:5e:8f:54:eb:66:a0:50:
         db:7f:e0:2a:14:da:a9:23:32:5b:ca:af:f3:9f:82:64:ed:31:
         b9:4e:c2:08:2e:92:76:af:47:68:e8:70:cc:89:f9:c0:b5:5b:
         52:4f:5f:6f:35:b1:26:ff:67:1f:a2:0c:36:d1:49:3f:bb:c9:
         bb:34:f2:64:54:84:56:be:fc:36:0b:77:e9:29:14:a2:1e:81:
         b7:e9:5c:60:70:9f:6d:bc:cb:26:49:68:0c:f4:30:89:e7:17:
         f5:60:af:40:b5:e4:ca:c4:b8:69:47:64:5f:84:5d:31:06:0d:
         ad:c0:94:e0:13:c8:c9:05:45:0b:02:0d:50:8c:0f:ae:1f:22:
         24:fe:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:47:05 2024 by rpki-client on console-fra.rpki-client.org