Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File:                     8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier:          jiBEh7VJmWJPuRBdKy0y9jGh0fKR2Iz6MkAl9Bmd1Fg=
Subject key identifier:   3B:0B:10:91:14:2B:49:84:18:0D:25:89:57:9A:A2:C1:36:6A:E4:D6
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer:       /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial:       0190459D9157EBC33ED4268050DB536C9AEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number:          01DB
Signing time:             Sun 23 Jun 2024 15:01:12 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:12 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:12 +0000
Files and hashes:         1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: vjY1ZOV5If4gpXVezJSjIb8Xrmtww64X7PFslLgmpXw=)
                          2: wV5NtQmFJ9GhanQ1MQZKHGY7T7Y.roa (hash: yNlh4AeRSzc8hfhy/mmUwZtOkndLWxajDl6n6qSCx3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:91:57:eb:c3:3e:d4:26:80:50:db:53:6c:9a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
        Validity
            Not Before: Jun 23 15:01:12 2024 GMT
            Not After : Jun 24 15:01:12 2024 GMT
        Subject: CN=3b0b1091142b4984180d2589579aa2c1366ae4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:5f:2a:8f:9b:06:fd:d2:91:e5:25:2d:f4:
                    8d:17:71:39:69:b2:7c:e9:1c:97:95:99:be:85:43:
                    b5:4d:e5:7a:a2:ab:49:f5:91:c1:ca:9b:5e:54:8c:
                    9b:0f:81:47:3d:22:f2:9d:c2:0a:91:e0:3c:70:c7:
                    2d:5f:ce:12:3b:62:0e:d7:8e:f0:ec:7c:dd:0d:69:
                    81:c2:b1:21:2c:39:6f:8d:44:a7:c5:99:6b:7d:ef:
                    04:86:13:e5:ba:2e:3a:3e:15:34:a5:82:11:97:60:
                    ae:b1:f0:3b:42:56:57:a2:5c:97:6f:da:78:60:54:
                    ee:e9:e1:5f:a1:eb:7f:16:84:33:bf:7f:5c:ca:8b:
                    7a:f0:37:93:9c:66:73:32:fe:6a:db:81:b7:7d:af:
                    0d:7d:35:83:cb:0f:d7:d0:3b:f8:7e:ce:c5:9f:99:
                    5b:cb:50:bc:26:ea:66:48:77:a8:58:81:51:6c:70:
                    da:4d:64:03:9b:8e:f6:ca:c1:06:eb:64:08:a2:7a:
                    bf:8d:e7:5a:35:22:89:31:41:19:66:85:9f:03:32:
                    b4:19:d0:e4:77:fa:0c:be:c8:5e:20:0a:54:99:07:
                    1f:5e:a6:9d:a1:a4:ae:93:b9:f2:bd:a8:2c:62:f3:
                    57:01:d7:9a:e3:50:e3:7c:81:0a:d7:9e:71:3b:02:
                    cf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0B:10:91:14:2B:49:84:18:0D:25:89:57:9A:A2:C1:36:6A:E4:D6
            X509v3 Authority Key Identifier:
                keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:a5:3d:b4:94:71:de:48:18:72:6b:5e:d8:39:67:d3:6c:
         80:63:5f:6e:f9:dd:a2:14:59:e3:9d:7c:14:ac:3f:f0:04:e3:
         a6:a6:b9:48:b9:59:f5:52:33:6a:cf:2b:4a:57:8f:6a:54:38:
         35:ab:4c:c8:c2:c5:80:76:68:d9:d2:19:0c:d7:00:73:cd:9b:
         11:54:84:bd:a3:cd:53:04:93:36:2d:de:06:b4:bc:fd:14:a1:
         ff:22:61:32:bb:19:4d:93:57:9f:80:83:fd:52:b1:dd:ac:73:
         17:ca:d8:bf:21:9a:62:42:58:12:3d:9f:c2:3a:a9:7b:d3:be:
         fb:37:62:e0:2b:c0:be:92:b3:72:cc:79:42:86:98:f4:26:ed:
         8b:ea:74:70:a8:d3:71:47:0f:09:06:f4:34:c5:4e:2f:1b:41:
         dd:da:78:76:02:8d:08:e6:88:6d:59:53:bb:b1:67:55:d1:59:
         a9:9f:ec:cb:48:f0:bb:ac:4e:3b:33:b0:ae:d2:1e:0f:e5:33:
         16:c7:94:39:3c:09:ae:d8:1d:a1:1a:db:28:15:a2:d1:68:61:
         5c:15:18:31:20:18:9b:f9:ba:b0:71:42:c1:de:d0:5f:d5:43:
         b7:e0:18:e9:88:5f:1a:da:12:a2:61:6d:41:84:56:bc:ad:5b:
         57:61:ec:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:53:07 2024 by rpki-client on console-ams.rpki-client.org