Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File:                     CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier:          QR4MD5/SL+i+WK44CkEuHZ+d2Ve08wLLhar7Dv78tQQ=
Subject key identifier:   86:08:41:18:23:B5:E1:8F:53:0B:16:B0:83:A2:74:F3:22:9F:C8:DF
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer:       /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial:       019040AE9C818D22043E379257E348D8E6D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number:          02C0
Signing time:             Sat 22 Jun 2024 16:01:43 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:43 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:43 +0000
Files and hashes:         1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: MbbYnOTMbYCY7GWjHoGglk1M3048FPmZAnoscFP2/JQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:9c:81:8d:22:04:3e:37:92:57:e3:48:d8:e6:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
        Validity
            Not Before: Jun 22 16:01:43 2024 GMT
            Not After : Jun 23 16:01:43 2024 GMT
        Subject: CN=8608411823b5e18f530b16b083a274f3229fc8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:a9:89:81:03:25:67:fe:74:95:db:29:62:
                    6a:9a:0e:80:9d:a2:91:98:8c:03:8b:5f:f2:d6:fd:
                    12:fc:94:99:eb:32:17:b0:44:03:87:70:0b:6c:7e:
                    a5:e6:08:44:d6:54:13:5a:af:92:d0:bc:42:72:1e:
                    0c:da:72:f4:31:a5:39:83:c6:20:5e:61:da:eb:b7:
                    08:e8:90:f7:9e:d8:c1:7e:07:3a:96:6f:cb:eb:5e:
                    58:17:ea:67:ff:e6:e4:e4:88:78:ce:66:ec:67:f2:
                    78:b7:ba:96:41:67:e1:54:86:b4:2f:bb:39:fc:e2:
                    8f:2a:fc:db:c4:c4:da:47:27:dd:9e:10:e3:6f:14:
                    59:a2:0f:0e:70:09:1f:d6:43:44:48:2e:a9:10:1e:
                    67:6b:73:38:5a:45:df:49:eb:2f:ea:9d:4e:f0:2a:
                    0c:d4:39:bb:c0:56:e2:89:0f:f0:15:95:44:6e:5d:
                    78:00:45:ba:9f:67:54:8e:cb:90:97:b4:02:35:2f:
                    f0:5a:ae:47:19:02:a6:7b:62:52:cd:4d:53:a2:eb:
                    a3:bf:99:15:f5:f8:04:3b:1e:64:74:a7:15:1d:06:
                    a2:30:92:39:d8:dc:2f:49:7c:39:25:04:84:b1:d4:
                    f7:6a:c6:81:62:92:37:23:54:f0:e1:97:bb:4f:d6:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:08:41:18:23:B5:E1:8F:53:0B:16:B0:83:A2:74:F3:22:9F:C8:DF
            X509v3 Authority Key Identifier:
                keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a8:84:0f:00:3c:62:5d:32:35:58:b1:b5:80:2b:77:43:5b:
         b9:c7:21:4e:f8:7f:f2:ee:ec:92:45:b7:96:df:bf:30:08:24:
         db:d1:9e:d8:25:2d:e0:81:cf:00:54:c8:8b:a5:da:0e:a6:ee:
         91:95:69:c6:37:14:c1:66:ed:73:4a:3b:0e:c2:54:eb:3d:b5:
         2c:c7:3c:bf:1f:74:56:be:af:b9:45:0d:00:51:d9:8a:53:bf:
         7e:a9:c7:0c:e3:a5:e1:47:58:2c:f6:86:d4:57:48:7f:f8:04:
         4b:eb:17:91:f7:2e:62:a9:cb:5b:ac:b7:ec:73:03:2c:09:24:
         fb:25:47:fb:b2:99:1e:43:82:de:f0:21:8f:e4:ff:3f:6e:72:
         4e:f9:2e:09:19:e0:8e:4c:c7:99:f2:cc:b9:f2:39:b1:95:9b:
         89:bb:a3:90:82:95:58:71:84:d9:17:2d:ee:b4:0d:d0:ec:5a:
         5e:30:5c:4a:3c:15:e1:7a:83:c5:68:b4:50:39:88:7d:74:9a:
         3a:c5:76:90:d6:6f:50:21:dc:ba:41:2c:62:a1:ed:eb:c8:6a:
         3e:36:a7:0c:2e:f4:59:4d:9e:09:b2:83:f1:91:25:22:44:5b:
         f9:7f:22:ab:e9:c1:ea:d9:9b:87:b7:a3:3c:0f:11:5c:42:f0:
         db:47:45:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:30:31 2024 by rpki-client on console-ams.rpki-client.org