Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File:                     4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier:          QIGEENTMcM9Zqdk4CWvRBIkKXsNrFQt7vTidRuMmTLM=
Subject key identifier:   FD:89:7F:74:01:70:D9:22:F6:1F:DD:61:B6:6E:38:07:2D:F7:86:FF
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer:       /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial:       019041C05704D2232CBA4DB54E656AB77C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number:          9F
Signing time:             Sat 22 Jun 2024 21:00:42 +0000
Manifest this update:     Sat 22 Jun 2024 21:00:42 +0000
Manifest next update:     Sun 23 Jun 2024 21:00:42 +0000
Files and hashes:         1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: NQiOXvpptaUChBBLXISjnt5ASE58yUQnOb+PXlrAYZU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:57:04:d2:23:2c:ba:4d:b5:4e:65:6a:b7:7c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
        Validity
            Not Before: Jun 22 21:00:42 2024 GMT
            Not After : Jun 23 21:00:42 2024 GMT
        Subject: CN=fd897f740170d922f61fdd61b66e38072df786ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:4a:62:84:a0:06:8b:05:88:c1:d4:90:40:
                    87:f3:fb:90:b6:ea:54:a4:8c:1e:16:5e:8b:ed:bd:
                    f4:fc:0a:71:3f:da:86:fa:e3:53:0d:24:19:11:ea:
                    a2:92:fa:9f:ad:97:c8:bb:3b:82:f8:d3:29:57:fe:
                    ac:6d:86:c7:19:a7:97:e1:73:97:a7:5d:f6:15:ce:
                    61:35:f2:27:5c:27:e2:4f:2b:66:0f:ac:62:86:31:
                    73:9e:84:46:75:63:37:c3:02:bc:7a:2e:b5:29:ce:
                    f7:43:6e:8c:c5:ff:02:51:e1:d9:a1:5e:27:1b:37:
                    10:27:a8:de:2a:b9:fe:e0:2e:fe:0f:69:92:50:6f:
                    c9:cd:a9:f5:8c:71:82:1d:02:2b:6d:b6:85:c3:5d:
                    19:d5:db:cf:3a:8a:ff:48:7a:4a:74:b1:65:c0:cf:
                    13:4b:5a:95:80:4e:81:d5:28:0e:6a:97:0c:9b:80:
                    d4:b4:7c:1c:bf:bc:dc:3d:54:ad:0e:7d:6d:3b:49:
                    a1:b1:4e:2d:bf:1c:b2:95:e9:3b:23:6e:d7:d0:ee:
                    ee:c4:5e:9f:d5:9a:9a:72:2e:15:a8:63:c3:5d:7c:
                    a4:77:39:14:75:39:4f:b6:ce:56:71:db:21:30:00:
                    b7:7a:e3:c6:a9:e3:c2:4e:48:99:7d:f2:d6:a6:90:
                    64:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:89:7F:74:01:70:D9:22:F6:1F:DD:61:B6:6E:38:07:2D:F7:86:FF
            X509v3 Authority Key Identifier:
                keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8c:17:c1:54:10:db:d1:47:d8:d6:cb:8b:20:d1:e2:d4:5e:
         03:39:72:99:69:c5:a1:de:af:9c:e7:3c:1c:e3:16:d7:0a:d4:
         f2:5b:62:bf:ac:1d:5d:ba:a4:71:20:d9:54:01:79:7b:b9:e7:
         09:cf:17:bd:dd:83:94:74:7d:02:b6:e4:f2:51:3a:2a:08:d1:
         5d:01:0e:63:f7:90:cd:f8:d7:7a:61:3f:97:6f:db:e1:c7:86:
         5d:7d:be:19:2c:3e:f1:89:d1:40:7d:ad:97:59:61:56:73:9f:
         9b:f8:c8:2f:89:d2:bb:92:f3:ee:24:e7:fa:10:22:f0:22:b3:
         e5:4b:c6:a0:00:28:45:c2:f6:c1:75:c4:6b:2a:06:36:17:e4:
         3f:97:54:10:69:09:40:7a:9a:51:1d:6d:6e:98:4d:1e:73:20:
         a6:e3:65:bf:ae:67:e9:85:8d:48:97:40:18:e0:a5:04:14:8f:
         83:8b:89:d8:16:3e:b7:ec:d9:a9:e1:27:5e:d7:9c:1a:b7:c9:
         73:f2:ab:a9:8d:2c:3f:ff:59:db:11:d2:7e:14:ed:e3:9f:f0:
         22:b4:ed:d8:88:c2:cc:25:b2:9d:15:9b:fd:57:4f:82:e3:9c:
         6b:2b:78:bb:4e:59:a4:2d:d1:dc:c9:e6:8c:71:18:ba:95:12:
         9c:eb:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:55 2024 by rpki-client on console-fra.rpki-client.org