Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File:                     7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier:          NR3gBSSJtvoRpcIKSLShY+iGqnbU9xvh8YGQKF260nk=
Subject key identifier:   FF:A9:25:5D:A2:DF:5F:00:EE:8C:D7:81:03:28:1C:F6:AA:79:0D:AA
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer:       /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial:       019040ADEF23B63FDC3A1876A9D84BBDF326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 16:00:59 +0000
Manifest this update:     Sat 22 Jun 2024 16:00:59 +0000
Manifest next update:     Sun 23 Jun 2024 16:00:59 +0000
Files and hashes:         1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: qUoBLZeqPtz32MILvdUa6//PNuJtGQdVOFhHpapMPVc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ad:ef:23:b6:3f:dc:3a:18:76:a9:d8:4b:bd:f3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
        Validity
            Not Before: Jun 22 16:00:59 2024 GMT
            Not After : Jun 23 16:00:59 2024 GMT
        Subject: CN=ffa9255da2df5f00ee8cd78103281cf6aa790daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:42:dc:84:1d:9e:22:30:c3:5d:52:98:dd:
                    fa:78:33:74:56:3d:15:9b:36:4e:a7:84:81:38:ee:
                    2a:d5:28:7e:ec:8b:11:16:93:05:2e:f1:0f:e5:6c:
                    74:66:43:2c:fe:22:bd:b6:9b:47:ff:1f:62:44:00:
                    89:ed:af:3a:fa:79:c9:47:ca:38:5e:0d:f1:f5:3f:
                    88:0f:c4:37:7a:91:25:2f:a2:12:3f:5a:09:81:67:
                    9a:11:b6:13:15:fe:59:34:88:bb:7e:46:93:75:c6:
                    99:be:9b:21:f6:12:1a:7e:93:67:1b:ab:17:1d:f6:
                    9b:5f:9e:0d:06:0c:f8:36:76:d6:14:60:31:ba:05:
                    18:77:12:b1:18:a8:b9:cf:dd:9a:ec:15:84:69:ec:
                    8f:24:f8:e6:95:1e:81:81:aa:c1:0a:7f:37:ce:a3:
                    6d:db:0b:c6:b1:3e:72:38:dd:90:ea:5a:67:67:b4:
                    4c:6b:d5:08:ae:01:cf:03:35:bf:f0:eb:ed:f4:19:
                    aa:18:6d:8c:94:44:f0:cc:42:6c:fa:ce:45:4e:d2:
                    c7:d7:fc:1e:ab:73:0a:6d:39:a7:c5:4b:ce:b2:af:
                    15:e5:90:e9:42:2a:2c:3f:73:e0:be:e6:71:24:db:
                    81:f2:40:68:49:ee:3b:5e:13:fa:75:0a:b4:2e:5c:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A9:25:5D:A2:DF:5F:00:EE:8C:D7:81:03:28:1C:F6:AA:79:0D:AA
            X509v3 Authority Key Identifier:
                keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:80:1c:fa:bb:99:b4:cd:ae:df:47:e0:b4:8d:da:c7:3c:48:
         75:07:d2:36:91:c7:6d:11:07:6e:79:b5:15:2c:f4:1c:16:8d:
         14:7c:4b:47:71:8f:8c:af:67:16:4f:cf:d0:50:1f:84:87:55:
         69:8d:c5:67:1c:ac:cd:39:8f:5a:80:cb:36:fc:a2:3b:32:80:
         32:b8:d6:a0:dd:e2:8c:70:4d:e5:a0:fc:7a:84:a8:5f:76:93:
         20:1d:c6:30:30:2a:07:fe:03:92:d3:ca:02:dd:74:60:79:3f:
         12:1f:8a:16:3e:1d:a8:9a:75:b7:35:6e:8b:25:66:3c:ee:af:
         01:1d:54:07:7d:4f:b1:f9:26:63:da:2e:02:41:29:29:f4:b8:
         c5:c2:70:a2:c9:ae:91:f4:78:8d:0a:f2:d5:02:40:83:13:42:
         af:f8:ff:b4:a5:19:07:85:3e:df:45:4c:40:7c:db:17:cc:d2:
         4c:28:95:7b:3a:ca:68:cb:74:d8:ab:65:c9:0c:65:d9:0c:b1:
         21:86:cd:c9:4a:12:8a:53:76:cb:bd:fe:0a:60:d2:01:fc:b6:
         09:8d:10:79:cc:56:21:86:38:9e:fe:f5:b2:ca:2f:00:ec:24:
         87:62:8d:31:20:64:1d:0d:70:de:6f:f1:e5:e9:67:28:5f:2c:
         63:0c:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:30:32 2024 by rpki-client on console-ams.rpki-client.org