Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File:                     T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier:          w6755e5GgBjq3vJQZSBwF4a0RiaEZDA9sMEKiXie08g=
Subject key identifier:   E8:75:56:1D:FC:69:E5:70:AF:DE:F4:E9:C8:34:FB:D5:C9:0C:1C:6D
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer:       /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial:       01901EC6EFD17730A050F97593DF2E20B9E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number:          B5
Signing time:             Sun 16 Jun 2024 02:01:12 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:12 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:12 +0000
Files and hashes:         1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: GVz/CECcbE4/rFoIhKHt5mg4vmT3nbxn2J97eQfaDFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:ef:d1:77:30:a0:50:f9:75:93:df:2e:20:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
        Validity
            Not Before: Jun 16 02:01:12 2024 GMT
            Not After : Jun 17 02:01:12 2024 GMT
        Subject: CN=e875561dfc69e570afdef4e9c834fbd5c90c1c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:f8:50:8e:a3:e0:8f:9f:39:06:16:54:8a:
                    95:17:cc:ce:6a:56:25:58:a4:eb:6a:41:f3:71:be:
                    0c:6a:b0:33:6d:71:ea:27:ed:31:8a:ea:3c:96:a1:
                    b1:c6:9e:25:d0:a7:39:1d:c3:dd:a9:d4:31:ff:07:
                    40:1a:dc:0c:e5:6c:bf:8d:32:c2:93:02:3a:64:f7:
                    1f:d8:44:6f:9f:53:2a:e6:e0:6b:ad:e8:a2:b1:46:
                    9b:e6:30:8a:38:5c:70:ea:0f:2f:f3:2c:18:00:0a:
                    a1:77:a8:66:c9:80:96:71:c6:8b:47:78:c2:f7:2a:
                    07:cb:c7:9b:ec:28:f8:a5:f5:c2:e4:b4:e2:20:51:
                    b4:b5:31:0c:cb:4b:94:e7:97:c7:67:d5:a5:c9:2d:
                    1b:1a:ca:a3:0e:d4:8b:77:de:31:8b:87:28:e7:39:
                    f8:c5:bd:3a:b3:79:f4:32:8b:5c:a1:4d:5b:b6:c2:
                    7d:74:a5:df:e5:90:80:ed:71:bb:65:8b:cf:fe:a3:
                    a6:61:41:c4:a4:20:eb:b7:cf:65:bb:85:74:46:79:
                    2f:20:0d:c6:05:0b:d1:c3:85:72:2d:65:7e:3e:bf:
                    30:eb:5d:88:b1:01:46:2c:8c:0d:f8:db:ed:fc:ef:
                    91:fe:6a:64:46:d1:79:f1:0f:45:0c:78:ef:eb:ce:
                    92:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:75:56:1D:FC:69:E5:70:AF:DE:F4:E9:C8:34:FB:D5:C9:0C:1C:6D
            X509v3 Authority Key Identifier:
                keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e4:c6:3b:57:7d:14:66:74:30:d9:9d:3f:ea:ea:ca:ae:01:
         82:46:ec:dd:c4:79:ed:1c:4d:7e:e1:8c:2b:90:6d:3c:d8:10:
         0e:26:e3:c4:c5:eb:6b:70:a4:3b:96:35:4b:ad:64:f8:7c:a5:
         55:84:c4:a0:a7:09:7c:a7:40:c1:95:ab:4a:e6:3b:b5:86:4b:
         37:c8:0e:b9:9b:15:5b:c4:34:39:e6:0d:55:36:6e:d2:bb:0f:
         15:00:9e:a3:3c:28:15:a9:1d:35:b5:d3:5d:a0:ed:50:5e:1f:
         7e:8d:8a:9a:63:50:c9:59:87:60:ec:93:26:4f:6c:18:7d:64:
         8b:87:69:b5:5f:fc:a4:17:a7:d1:10:f3:4f:db:15:0e:e4:b3:
         f1:6b:12:97:1f:7b:35:d7:21:85:6b:fb:29:4a:eb:6c:58:4a:
         e4:b1:cc:0a:41:af:57:07:52:2f:2f:62:a1:e8:ad:cc:22:39:
         d5:df:f8:80:6a:bd:64:c0:0a:02:cd:50:a6:75:c6:5b:56:8c:
         0c:5c:04:09:a7:78:63:ed:ff:a6:8e:79:bd:17:d1:cd:27:ff:
         77:ec:4c:d7:83:37:48:18:3e:e8:a1:ec:4a:fe:70:f6:34:9b:
         9d:ec:c9:1b:a0:eb:4d:43:cf:62:ce:f3:d7:86:2c:2f:e7:9d:
         4f:01:ec:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:49 2024 by rpki-client on console-fra.rpki-client.org