Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.mft
File:                     XeHEMjIqoQWMPm_lf2N0qSlgacE.mft (raw, json)
Hash identifier:          cSBFPD+9M8GjOROLOfSnHyeZ0/F3Fp/N54sKZMtZG4k=
Subject key identifier:   5A:9F:E6:85:8C:78:DF:63:27:31:A6:33:38:47:32:F3:60:5F:A1:78
Authority key identifier: 5D:E1:C4:32:32:2A:A1:05:8C:3E:6F:E5:7F:63:74:A9:29:60:69:C1
Certificate issuer:       /CN=5de1c432322aa1058c3e6fe57f6374a9296069c1
Certificate serial:       01901D4630C1177D32C7824291F19D66D172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XeHEMjIqoQWMPm_lf2N0qSlgacE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.mft
Manifest number:          06A8
Signing time:             Sat 15 Jun 2024 19:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:57 +0000
Files and hashes:         1: XeHEMjIqoQWMPm_lf2N0qSlgacE.crl (hash: 9mnKiba1D570lBihcHWmUjc43OhGgK0muQvbsW0jTqs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XeHEMjIqoQWMPm_lf2N0qSlgacE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:30:c1:17:7d:32:c7:82:42:91:f1:9d:66:d1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5de1c432322aa1058c3e6fe57f6374a9296069c1
        Validity
            Not Before: Jun 15 19:00:57 2024 GMT
            Not After : Jun 16 19:00:57 2024 GMT
        Subject: CN=5a9fe6858c78df632731a633384732f3605fa178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:f8:53:f5:d8:09:2c:c9:e9:9b:19:36:cc:
                    2b:4a:08:e7:bd:c6:9d:21:c7:f9:94:8f:c0:5d:bd:
                    fe:c9:93:6f:c7:b0:57:6e:ac:08:1c:f8:a9:d0:b6:
                    84:09:5c:1d:c4:98:f2:fe:b3:72:23:29:bc:87:a6:
                    b1:e9:b2:c6:4b:06:76:75:13:82:c1:5d:06:6f:81:
                    b6:5f:aa:76:46:ad:79:3c:02:42:b7:9e:d0:7c:84:
                    2d:c3:94:7c:53:b4:b2:79:eb:75:a4:96:ed:19:11:
                    0e:d6:e9:94:6d:55:29:c6:a2:b6:df:eb:3b:3f:e1:
                    81:58:71:c1:a9:b0:3b:8f:9a:de:b3:2a:71:10:70:
                    4a:d6:05:f2:af:cf:4f:e4:16:92:78:8c:5a:d3:63:
                    5c:fb:ff:37:67:9b:ca:75:7b:8f:a8:90:9f:f8:d2:
                    50:f2:42:92:47:64:ab:67:3c:3d:7e:75:83:68:81:
                    ef:fd:0f:2b:08:c5:48:81:db:39:60:a1:9e:fb:15:
                    99:41:ac:46:64:93:69:8e:bb:a8:79:43:98:f4:c6:
                    ff:c9:45:e9:3b:63:25:95:8f:d3:a1:95:4f:7d:4e:
                    81:40:a6:39:ad:b9:3c:32:bf:b7:6f:a8:77:f4:58:
                    e2:c3:0c:db:fc:b8:58:71:52:81:58:a9:f6:17:32:
                    35:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9F:E6:85:8C:78:DF:63:27:31:A6:33:38:47:32:F3:60:5F:A1:78
            X509v3 Authority Key Identifier:
                keyid:5D:E1:C4:32:32:2A:A1:05:8C:3E:6F:E5:7F:63:74:A9:29:60:69:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeHEMjIqoQWMPm_lf2N0qSlgacE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:3f:1f:dd:63:48:3b:f8:d2:6b:ff:48:22:b1:5c:a2:91:
         9a:b5:eb:e7:96:45:a8:33:cd:53:e8:91:e2:0a:79:51:a7:a6:
         34:c4:11:cf:df:5d:fe:3c:7e:e0:36:60:5e:d8:54:75:0f:f1:
         04:90:bd:05:54:14:99:bb:25:24:b3:da:95:6f:fd:b0:d0:c9:
         80:1d:e9:c4:a1:0a:3a:3d:e0:3a:d6:d6:9b:4e:b3:81:ba:18:
         31:70:9b:c5:29:e5:21:35:1c:9d:32:7d:0d:d4:1f:50:e2:a6:
         42:d6:03:fb:5d:69:62:e1:48:cd:f3:5a:43:63:d4:f1:52:3a:
         43:a2:49:37:3b:e6:75:69:6c:9b:d8:a5:ed:0d:f1:0a:28:18:
         37:ed:4d:c3:fc:4a:ce:da:de:4b:a9:11:43:02:8a:35:1c:7e:
         d3:da:be:38:6e:f1:1e:e3:b1:b2:b2:f1:95:b4:86:84:1b:39:
         a0:68:45:46:84:5b:a3:ba:ac:f7:f5:79:91:e0:8e:e5:6e:7e:
         b6:42:57:2d:7e:d6:b1:28:50:f3:57:d7:ad:14:a3:dc:91:4f:
         e0:d3:83:9d:a4:6e:0d:9b:2b:ff:c8:be:f7:7b:b0:cc:d1:fc:
         18:f8:0a:a5:95:21:ff:30:25:c5:f8:4a:21:21:29:9f:06:a6:
         be:4a:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:59:31 2024 by rpki-client on console-ams.rpki-client.org