Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File:                     5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier:          bKqadqb43FuSkILk74TXs2/R+MVXKwy86UKjZuCg9DQ=
Subject key identifier:   83:98:8A:2D:31:DD:54:67:39:F8:24:C6:DB:D2:82:65:06:39:BC:75
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer:       /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial:       01904869A3129B75CC91525FC8AC1C23185B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number:          093C
Signing time:             Mon 24 Jun 2024 04:03:20 +0000
Manifest this update:     Mon 24 Jun 2024 04:03:20 +0000
Manifest next update:     Tue 25 Jun 2024 04:03:20 +0000
Files and hashes:         1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: NfjU7P2yGd1v6LEClExkDBZFS5gJOMNLgbmnCREXeHg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:a3:12:9b:75:cc:91:52:5f:c8:ac:1c:23:18:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
        Validity
            Not Before: Jun 24 04:03:20 2024 GMT
            Not After : Jun 25 04:03:20 2024 GMT
        Subject: CN=83988a2d31dd546739f824c6dbd282650639bc75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:30:e7:c4:3b:9d:0f:4c:a0:22:23:d3:ea:
                    f7:97:c1:3b:51:70:37:f3:14:34:0d:c7:b6:66:da:
                    4a:3e:2a:d0:90:57:9a:d7:d9:27:8d:cc:67:6b:d4:
                    55:bf:e6:c9:fb:f3:1f:3e:cc:66:8c:7e:d6:d4:da:
                    b1:74:77:dd:10:fe:66:e7:00:fc:86:dd:a4:b5:d3:
                    7c:f5:c2:5f:63:67:e7:18:34:cd:e2:a8:d4:ba:15:
                    0e:75:0a:4f:bb:c7:6a:80:2c:15:ad:bb:50:b1:e9:
                    18:28:15:3f:99:e2:4e:b7:2e:6e:7a:e3:9c:c3:c2:
                    2b:70:87:00:e8:fc:b8:cc:53:b3:19:cb:94:37:a0:
                    35:65:53:78:1c:a8:01:eb:bf:48:1e:a7:4c:45:ec:
                    22:06:a7:d3:2b:67:ca:db:35:16:95:f4:d1:a8:2c:
                    d1:2a:3f:a8:57:ca:37:bf:05:c4:cc:b8:b8:74:5a:
                    65:45:ce:1a:ac:de:be:ad:a9:12:df:70:83:45:a5:
                    2f:e4:13:23:57:b9:68:95:b8:f8:11:fc:99:d3:99:
                    94:ba:8a:09:52:4b:97:ab:fe:bc:5a:92:85:ca:e0:
                    01:81:6b:f5:ab:be:54:c8:17:cf:58:92:13:5a:cb:
                    1f:40:9a:e8:d7:e6:fd:d0:4a:0d:24:01:ac:ed:24:
                    df:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:98:8A:2D:31:DD:54:67:39:F8:24:C6:DB:D2:82:65:06:39:BC:75
            X509v3 Authority Key Identifier:
                keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:61:36:ca:66:e5:05:fe:e7:bd:9d:1c:8a:ae:0b:7b:a9:
         e7:34:65:8c:25:9b:65:e3:b0:a3:46:f5:6b:7f:e0:52:f6:ff:
         23:e0:ca:0c:33:eb:2e:e4:57:6f:85:82:c9:4d:4b:d7:0b:2d:
         75:b6:7d:b8:80:c0:89:36:4e:29:f6:f9:b5:f1:7b:0f:16:78:
         7b:3a:06:14:3c:54:b5:9f:4a:bc:01:7e:a9:94:ce:42:61:7a:
         ce:ee:0d:82:2a:c1:79:26:e2:07:d2:ae:57:b2:ac:37:bc:48:
         5c:21:7e:88:e4:25:10:04:22:b2:76:8a:c8:c0:26:a7:32:58:
         d7:5e:9b:2e:9c:bc:61:f8:ac:18:f7:97:71:c5:75:ac:03:2c:
         78:e3:da:42:ef:77:6b:b9:bb:dd:09:22:c4:b1:25:b5:05:2e:
         1b:06:c6:0c:73:f2:14:8a:95:32:17:64:22:ca:09:63:a6:31:
         9a:04:61:34:36:80:0e:e8:c6:ec:70:f9:7e:59:27:d9:2e:16:
         9e:f1:49:30:64:b8:b2:23:c8:18:27:d2:6d:57:b1:cf:d6:fb:
         ee:00:71:aa:79:23:7f:79:fc:8b:44:1d:f6:eb:ac:db:06:04:
         93:fa:37:19:0d:73:7b:b6:6c:00:f2:9f:fd:c4:11:7a:92:5c:
         ca:54:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:11:01 2024 by rpki-client on console-ams.rpki-client.org