Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File:                     QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier:          aa08CnnJ38ojE8DxVzBntL4MqQRBc9r/xE4o3aio7K4=
Subject key identifier:   8E:77:31:BA:CE:0B:E2:9F:05:7A:B0:A5:A7:6C:F3:1E:45:94:9E:BE
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer:       /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial:       01901E8FE3FD7C0562BBAF438EBDC18F25D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number:          0237
Signing time:             Sun 16 Jun 2024 01:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:04 +0000
Files and hashes:         1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: /zvWsYc1T1l9MGYVf9+Ef0CI4MJeYFnODjdmQyoPBxs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:e3:fd:7c:05:62:bb:af:43:8e:bd:c1:8f:25:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
        Validity
            Not Before: Jun 16 01:01:04 2024 GMT
            Not After : Jun 17 01:01:04 2024 GMT
        Subject: CN=8e7731bace0be29f057ab0a5a76cf31e45949ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3b:11:b3:4a:8f:3b:38:64:66:7f:3e:9e:c0:
                    ec:ad:ff:22:38:5e:e1:de:ae:3a:f9:53:09:13:7d:
                    82:9d:fa:57:cf:73:16:bd:7e:2c:6d:5b:4b:ef:55:
                    64:b4:4d:18:08:32:2d:52:da:89:b5:78:17:80:30:
                    f8:ed:63:5b:e9:b0:20:17:18:2e:f4:7f:5e:c8:ea:
                    a2:55:a2:0c:42:0e:16:fe:f8:fb:5f:15:1a:47:1a:
                    c5:dd:b8:f7:db:b6:36:26:10:fc:8a:8c:a7:d7:88:
                    b8:a4:19:c0:fb:40:aa:55:5c:2d:a5:15:41:08:1f:
                    af:10:7e:6d:c0:fb:57:95:db:51:48:50:34:c8:4a:
                    6a:70:e6:17:e9:f7:47:f4:f6:2f:1f:d7:bf:38:13:
                    f6:41:fa:0a:7d:a9:15:a7:72:2f:50:f5:97:8c:f7:
                    89:d5:b6:da:d3:27:7b:fa:4a:6c:45:9e:25:0d:24:
                    88:e2:d1:11:b0:30:57:fb:24:41:e0:ed:a8:e3:63:
                    e4:f6:f3:c2:dd:df:c4:76:75:95:18:a3:37:cc:9d:
                    9c:5d:bb:5c:4c:1b:bd:b7:f5:fc:7e:08:be:a4:bf:
                    af:02:18:68:67:c3:34:f0:38:c6:f2:e6:80:0e:53:
                    7e:bd:ca:ac:37:8b:6c:0d:08:17:54:2e:f3:90:dc:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:77:31:BA:CE:0B:E2:9F:05:7A:B0:A5:A7:6C:F3:1E:45:94:9E:BE
            X509v3 Authority Key Identifier:
                keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:19:64:fc:34:92:68:9c:51:27:40:34:89:84:98:1a:74:
         98:36:19:d6:9d:70:84:2c:5e:48:25:35:b2:66:11:a4:de:42:
         37:31:35:a9:81:ab:3f:4b:5b:ce:3a:bb:d0:ed:79:f3:9c:4f:
         cd:cb:35:aa:4b:ca:bb:8e:b8:1c:6e:77:b9:dc:5a:f7:7f:16:
         72:f6:09:04:a8:d9:b0:da:c0:1d:21:51:4e:11:8b:93:bd:67:
         8d:9d:97:22:98:09:bf:7e:e6:07:85:85:5f:c6:80:02:3a:d8:
         81:0a:91:8f:a1:4f:c9:75:21:67:5e:64:b0:b0:90:12:3f:ed:
         5b:0f:37:97:b4:3b:07:3e:93:81:0d:e2:9b:3c:c7:74:c1:60:
         e2:cd:0b:bc:a6:a9:15:1c:0e:6f:d7:69:05:d0:13:e0:e4:a6:
         4c:2f:df:93:e7:fd:70:23:62:8f:de:3e:4d:35:30:de:07:70:
         6d:a3:e0:0b:5b:b3:81:be:7f:fd:5c:76:16:a8:16:15:2f:0e:
         fe:bf:dc:a8:6e:d9:75:f3:f9:9d:02:b6:01:e9:36:7a:8e:91:
         f8:0f:63:2d:45:5f:d1:ca:38:a5:62:aa:3e:fd:54:29:7b:b8:
         23:a7:53:de:00:72:51:1f:1c:05:a6:3e:f1:a6:84:9a:66:22:
         c9:8a:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:01:27 2024 by rpki-client on console-fra.rpki-client.org