Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File:                     7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier:          5CP3BQY24+izhmnY4cIyXpdNIpvuFeiwVOHroPCxZ+k=
Subject key identifier:   3F:46:7B:C3:53:2E:B2:28:8F:98:77:9F:65:AB:2B:3A:92:8B:52:7E
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer:       /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial:       01901DEAF0734CD92F9AF5CFA9C15D02AD79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:54 +0000
Files and hashes:         1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: JaocUMyzqsxNiASwFH4Ir4nzQAdi90tVj5nTvVB/eCI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:f0:73:4c:d9:2f:9a:f5:cf:a9:c1:5d:02:ad:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
        Validity
            Not Before: Jun 15 22:00:54 2024 GMT
            Not After : Jun 16 22:00:54 2024 GMT
        Subject: CN=3f467bc3532eb2288f98779f65ab2b3a928b527e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:3b:b8:be:5a:60:b5:12:6d:3e:46:4e:f4:
                    dd:56:98:cd:19:6c:81:6b:8e:7f:27:db:85:1e:f0:
                    60:85:11:67:80:bd:6f:bb:3c:8f:5e:03:8e:50:eb:
                    96:a5:ee:c6:a0:fc:f5:28:51:6a:7e:ae:f5:88:ff:
                    af:06:c9:ec:a3:95:c5:ae:ac:c7:6d:79:00:b8:b0:
                    44:36:73:9d:50:9b:ca:04:ca:e4:bb:b7:f1:71:5a:
                    4e:7e:9b:47:37:f1:9e:8f:08:23:82:f7:44:7f:d2:
                    e6:ad:94:5e:86:7e:7f:fa:b9:66:b0:3c:c5:c3:f2:
                    43:89:92:9f:ba:66:ce:c3:ac:d6:90:a1:74:75:66:
                    48:24:56:d7:25:60:04:8c:fc:3a:82:e8:0d:68:5b:
                    5f:e9:bc:09:62:13:7d:b6:52:ac:ca:20:69:35:67:
                    74:02:f3:2b:1c:fc:dc:6c:3d:a3:d1:03:9e:cf:16:
                    01:0b:05:0d:cb:fe:23:9d:9a:8e:4a:ca:78:ed:45:
                    0a:91:37:c8:ba:4d:1d:d4:b1:dc:f5:be:c1:42:6a:
                    38:16:0c:72:42:cf:d0:55:cc:97:d7:c5:8c:d9:8f:
                    3f:4e:75:e1:c6:c7:cd:97:77:a4:70:b6:34:99:74:
                    3d:48:92:1f:68:d0:2a:60:87:df:d9:ca:3b:2e:3e:
                    00:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:7B:C3:53:2E:B2:28:8F:98:77:9F:65:AB:2B:3A:92:8B:52:7E
            X509v3 Authority Key Identifier:
                keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:83:65:40:3e:47:9c:19:c2:0c:e0:d0:61:99:ae:a9:4c:a5:
         a8:1d:e1:a5:70:9d:e7:77:be:5d:24:59:cd:28:6e:ec:bb:e9:
         4a:78:90:02:d7:eb:7a:8c:19:36:5a:b0:6a:1e:16:3d:4f:60:
         fd:99:e4:5b:4e:8f:98:eb:82:2c:2b:71:d7:0f:79:37:de:b3:
         1e:62:d0:99:d5:56:ef:1e:20:a0:c1:d0:1d:9a:83:6c:37:8b:
         3a:07:2c:7a:03:03:51:01:ea:47:a2:2d:71:8a:5c:24:cf:54:
         c0:b1:49:f5:93:f5:0f:ea:62:79:71:da:0b:06:35:76:29:f3:
         9d:96:d0:2c:ee:0f:81:9c:c1:c3:ba:82:d9:7d:24:fc:43:c3:
         5d:cc:3e:c8:09:cb:df:9f:c5:39:71:19:66:34:5d:8f:09:22:
         c3:5a:51:c2:f2:5e:f0:b5:94:6e:84:0c:83:1a:53:be:1e:a2:
         0c:40:b8:90:1d:2c:53:d3:4f:f8:35:b5:7d:42:0a:de:c5:b7:
         18:b5:12:58:6f:a3:ec:c3:ea:78:82:31:7b:43:0b:cd:f2:1e:
         94:6e:36:ff:48:93:de:1c:d2:1f:a6:16:7d:ce:fc:cc:32:82:
         6b:31:bc:ff:3a:54:f7:63:3e:a9:71:a3:35:6c:31:04:0f:0b:
         bb:16:fa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:23 2024 by rpki-client on console-fra.rpki-client.org