Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
File:                     500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json)
Hash identifier:          woca045D4hgza+poDusJjrmNItcCZrUQNnHAeB//Mmc=
Subject key identifier:   87:F9:22:47:39:D8:09:D7:6C:23:E7:28:D4:86:F6:D6:25:A0:DF:3C
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Certificate issuer:       /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial:       01901DEB9FC77AD30C2026D7D8C2281ECB32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
Manifest number:          0B70
Signing time:             Sat 15 Jun 2024 22:01:39 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:39 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:39 +0000
Files and hashes:         1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: qPvS0IYKpgCuSWVvQ4M221OdLzOkHN0hVWlQSnxECbw=)
                          2: CMZjGcXgzb5XfN7a3tikJxjVQQc.roa (hash: T008GEva0pu8+91tVEhSOGj6h0vPJ7ksXJwX0XNOWkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:9f:c7:7a:d3:0c:20:26:d7:d8:c2:28:1e:cb:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
        Validity
            Not Before: Jun 15 22:01:39 2024 GMT
            Not After : Jun 16 22:01:39 2024 GMT
        Subject: CN=87f9224739d809d76c23e728d486f6d625a0df3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b6:79:d7:71:7f:43:1c:71:18:f0:0c:60:94:
                    02:1f:6c:18:e6:68:de:72:e6:69:33:1c:d1:00:10:
                    c4:74:ea:15:26:1c:b5:06:cd:b6:a4:bd:69:fd:64:
                    68:09:9b:18:a5:b2:49:d2:ab:47:8c:4c:1b:b7:56:
                    c5:b7:aa:0e:50:23:5f:63:a9:29:c7:05:2b:e1:7d:
                    7e:0a:6a:04:79:47:b2:5c:2d:a2:d6:50:ef:46:91:
                    bf:c5:5c:68:ff:44:71:f1:a6:17:0a:93:28:3f:14:
                    53:2d:a3:fe:07:5c:4e:2c:2f:fe:58:3d:51:e1:a2:
                    12:78:50:4a:84:2f:29:21:0b:8c:37:e4:23:6b:cf:
                    fd:b2:fc:fd:32:c0:9e:e2:7b:31:6d:b8:66:a6:45:
                    73:01:15:32:83:b1:8b:e2:25:36:8b:da:7f:41:4a:
                    b1:14:a3:7a:12:9c:c7:e9:d6:fc:f6:f4:1a:75:6e:
                    c8:72:b6:e4:c5:db:27:eb:8f:2f:4f:3f:df:d2:4d:
                    59:6e:f2:8c:07:5b:77:3f:c0:40:e1:3d:6a:73:48:
                    1c:b8:12:b5:d8:8b:12:d3:1c:d6:18:1e:fe:bc:7f:
                    a2:4d:61:79:88:86:52:2c:c0:9b:92:00:c7:2e:c4:
                    d3:57:9f:6f:9c:47:bd:0b:f3:f5:ba:e3:39:e1:23:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F9:22:47:39:D8:09:D7:6C:23:E7:28:D4:86:F6:D6:25:A0:DF:3C
            X509v3 Authority Key Identifier:
                keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4b:cf:2e:d9:0b:f7:c3:0a:0c:1b:90:9c:82:35:fd:d1:5f:
         5c:b2:33:88:16:eb:d2:b7:3e:0f:a9:a9:3b:81:00:f4:1f:46:
         e9:dd:18:b0:a3:25:b9:31:47:5f:d0:b0:70:b5:ab:85:71:1f:
         02:3f:8b:73:64:ac:f1:9f:91:b5:3f:d5:b6:88:2d:7a:d0:cb:
         7e:d3:36:7f:e5:60:ea:b0:8f:45:2c:c1:c2:19:a1:dc:24:b3:
         ce:49:c5:f1:8c:42:3e:2d:06:46:e6:38:72:0c:94:0f:29:3d:
         66:85:9e:69:55:ad:1e:bf:ee:32:3d:38:59:93:1f:6c:5f:77:
         da:e2:d2:32:b6:fb:06:a9:3b:b9:be:a9:b6:2a:3e:21:89:65:
         ce:80:89:98:b1:c9:c1:86:1e:60:1c:1d:2d:c5:d6:4f:ad:b9:
         0e:06:f4:ba:35:3d:5b:6e:40:bb:9b:bc:7f:d8:81:0b:e1:09:
         f6:af:32:70:9f:05:1e:b4:97:df:54:20:66:0f:62:62:a6:96:
         3e:90:9a:7b:41:3e:d6:c9:9d:85:1f:cc:53:9c:c9:2d:a7:ec:
         79:f5:4c:86:2b:19:14:ea:66:dd:c2:fb:f1:d7:58:61:7a:0a:
         62:e4:af:92:0f:a6:32:a2:4f:3e:21:64:80:ac:d5:00:7c:d7:
         da:fe:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:58 2024 by rpki-client on console-fra.rpki-client.org