Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/988ddd-425d-4c7a-b07c-80cf66bfe473/1/A8QwoPCdG4Iwgk7wyZONOA5gJDg.mft
File:                     A8QwoPCdG4Iwgk7wyZONOA5gJDg.mft (raw, json)
Hash identifier:          rBAaqe64FvSr4miZHRMx2pD5hPnAsHWgzBBz+lk9wcE=
Subject key identifier:   B1:CB:A1:6C:68:07:F8:4E:D5:22:23:07:74:80:AA:55:62:8F:96:B1
Authority key identifier: 03:C4:30:A0:F0:9D:1B:82:30:82:4E:F0:C9:93:8D:38:0E:60:24:38
Certificate issuer:       /CN=03c430a0f09d1b8230824ef0c9938d380e602438
Certificate serial:       01901DEC2DFC6788502C90E9D66167CBFE6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8QwoPCdG4Iwgk7wyZONOA5gJDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/988ddd-425d-4c7a-b07c-80cf66bfe473/1/A8QwoPCdG4Iwgk7wyZONOA5gJDg.mft
Manifest number:          04D8
Signing time:             Sat 15 Jun 2024 22:02:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:15 +0000
Files and hashes:         1: A8QwoPCdG4Iwgk7wyZONOA5gJDg.crl (hash: 4uS8tFy6XvMrPvIYLrea5eJ5H96WgOFlcAHF79LtNN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/988ddd-425d-4c7a-b07c-80cf66bfe473/1/A8QwoPCdG4Iwgk7wyZONOA5gJDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/988ddd-425d-4c7a-b07c-80cf66bfe473/1/A8QwoPCdG4Iwgk7wyZONOA5gJDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8QwoPCdG4Iwgk7wyZONOA5gJDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:2d:fc:67:88:50:2c:90:e9:d6:61:67:cb:fe:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c430a0f09d1b8230824ef0c9938d380e602438
        Validity
            Not Before: Jun 15 22:02:15 2024 GMT
            Not After : Jun 16 22:02:15 2024 GMT
        Subject: CN=b1cba16c6807f84ed52223077480aa55628f96b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:d2:d1:69:13:fc:76:c2:84:d4:79:fb:f0:
                    a6:1a:d8:80:19:54:10:10:60:39:2c:ec:f3:40:3e:
                    dd:2d:8a:98:43:bc:1d:84:f6:24:18:39:a0:67:e5:
                    2f:cb:58:de:09:2d:7d:7c:4d:ba:33:16:c2:0d:a6:
                    7c:1d:8d:5b:93:c3:ea:b5:7b:15:a9:f8:0e:c1:8c:
                    75:f0:c9:26:b2:7b:72:ce:21:89:95:cc:f8:98:2c:
                    b7:b9:a6:21:1c:06:be:8a:f1:3e:f5:17:98:60:d7:
                    92:ab:a5:4c:13:89:15:05:dd:0d:fe:2c:3e:c5:b4:
                    22:88:a5:60:52:5d:8e:85:ae:62:7f:b1:f7:d3:6a:
                    a6:81:8e:30:42:5c:bc:49:41:f1:f8:e8:9f:a0:84:
                    bd:99:0e:3e:97:34:d9:34:46:98:70:72:21:7a:ad:
                    b0:59:c8:73:da:89:c5:4d:00:33:43:26:fd:10:69:
                    ed:f3:44:f6:4b:91:82:5f:b8:97:f2:ac:2d:c1:8b:
                    de:cc:08:50:b1:ce:4b:36:0b:09:39:c6:77:48:6c:
                    d9:db:3f:d1:f6:fa:3a:89:7d:8b:a6:65:0a:b0:c3:
                    95:81:ab:c6:37:c9:be:5d:e4:1f:50:fe:33:fe:c2:
                    26:33:8e:1d:ad:c0:fd:05:c8:f9:3b:6c:1d:c8:76:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CB:A1:6C:68:07:F8:4E:D5:22:23:07:74:80:AA:55:62:8F:96:B1
            X509v3 Authority Key Identifier:
                keyid:03:C4:30:A0:F0:9D:1B:82:30:82:4E:F0:C9:93:8D:38:0E:60:24:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8QwoPCdG4Iwgk7wyZONOA5gJDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/988ddd-425d-4c7a-b07c-80cf66bfe473/1/A8QwoPCdG4Iwgk7wyZONOA5gJDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/988ddd-425d-4c7a-b07c-80cf66bfe473/1/A8QwoPCdG4Iwgk7wyZONOA5gJDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a3:94:42:68:b3:53:48:9c:c3:fc:4b:b2:ad:30:13:34:17:
         4c:81:67:9f:d6:b5:38:26:52:f7:77:70:a3:e8:26:3d:1c:8b:
         e2:b9:12:60:14:ad:c7:9f:31:54:44:c0:a0:33:05:8b:c2:88:
         a5:8c:20:ff:8d:3c:de:d9:23:ca:df:a6:9e:23:99:3f:75:b4:
         4d:25:45:9e:fe:00:62:a4:01:46:76:2e:85:32:1e:e4:51:d3:
         22:cd:63:63:74:08:74:91:94:ad:bd:42:5f:e5:3d:19:07:ea:
         fe:9c:fc:de:a1:e1:8d:7a:d6:8d:12:92:cc:f9:6e:32:96:68:
         53:57:dd:e9:e1:f2:66:71:a5:bd:93:00:9b:d1:23:c1:c9:28:
         51:b3:b4:7f:0c:19:52:a5:65:09:94:1a:2f:6c:c2:bc:31:9c:
         75:0b:36:8f:4f:e9:e4:d7:3b:8b:b6:21:16:92:0b:c7:9d:7a:
         7d:fe:7b:15:0c:06:88:0c:6b:d0:d7:93:3c:e8:b6:be:b8:e2:
         9e:b5:64:55:7b:31:2f:72:76:53:ff:10:61:25:43:c4:92:f4:
         da:1e:90:07:31:81:af:d5:a6:e6:96:8f:3a:69:02:32:e6:1c:
         98:dc:9b:a7:e2:18:74:41:ce:9f:17:44:e2:1c:5d:6f:fa:38:
         35:48:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:27 2024 by rpki-client on console-ams.rpki-client.org