Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.mft
File:                     57nHwL3lwmrI5fa1YNpwGLzOjJk.mft (raw, json)
Hash identifier:          Da6LJ+tpIk2Rot9lbTHGrEej2/dzXmkBBuSqHQJfg8E=
Subject key identifier:   41:2C:CC:3B:54:51:41:97:0A:A1:3E:CA:DD:A8:16:26:A9:1B:20:2F
Authority key identifier: E7:B9:C7:C0:BD:E5:C2:6A:C8:E5:F6:B5:60:DA:70:18:BC:CE:8C:99
Certificate issuer:       /CN=e7b9c7c0bde5c26ac8e5f6b560da7018bcce8c99
Certificate serial:       01901E8FA21B4E5911C071AEE9325B133102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57nHwL3lwmrI5fa1YNpwGLzOjJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.mft
Manifest number:          0E5A
Signing time:             Sun 16 Jun 2024 01:00:47 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:47 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:47 +0000
Files and hashes:         1: 57nHwL3lwmrI5fa1YNpwGLzOjJk.crl (hash: RmUH2YfaScuAwGc+FWXkmbNp2i9FLk0Fm5gvTj2FL1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/57nHwL3lwmrI5fa1YNpwGLzOjJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:a2:1b:4e:59:11:c0:71:ae:e9:32:5b:13:31:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b9c7c0bde5c26ac8e5f6b560da7018bcce8c99
        Validity
            Not Before: Jun 16 01:00:47 2024 GMT
            Not After : Jun 17 01:00:47 2024 GMT
        Subject: CN=412ccc3b545141970aa13ecadda81626a91b202f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:90:fe:3c:34:32:50:0b:16:24:20:1a:43:
                    c8:90:c8:e0:29:42:93:52:55:fb:fd:63:8e:d7:88:
                    c0:9e:f5:4a:93:62:d6:3d:08:39:fb:53:ed:0e:b6:
                    28:55:bd:a8:73:4f:dd:aa:78:06:cf:39:94:f0:88:
                    9e:68:c1:46:91:03:02:7f:9b:c6:33:47:61:a0:39:
                    16:3c:d9:f3:49:bc:7b:df:83:30:0c:64:35:08:b9:
                    fb:14:b9:f2:ed:80:84:74:11:70:98:a2:50:c7:35:
                    eb:60:17:d2:92:5b:81:a1:9d:91:dd:28:85:2e:a7:
                    a6:f0:16:77:7e:af:ff:2a:df:a0:42:43:1b:a0:7b:
                    29:cd:23:73:3b:a3:e8:8e:f8:cb:38:23:0e:68:93:
                    e8:2c:f3:57:bd:37:cf:51:72:15:f6:d3:d9:92:cf:
                    61:e7:09:8c:04:de:81:4c:30:47:7b:d3:59:19:70:
                    8c:41:35:e1:18:57:be:0a:19:8d:60:3b:ba:f3:a9:
                    69:e5:ae:57:2a:38:8b:4e:7e:bf:61:2f:4e:13:68:
                    15:80:64:de:1e:2e:97:19:1f:83:77:55:2b:5f:5d:
                    49:d3:75:ae:17:15:8d:1c:bc:5e:ac:4a:5d:08:f4:
                    46:84:63:be:c6:7d:3e:00:5b:b2:ad:95:83:9d:ec:
                    a7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2C:CC:3B:54:51:41:97:0A:A1:3E:CA:DD:A8:16:26:A9:1B:20:2F
            X509v3 Authority Key Identifier:
                keyid:E7:B9:C7:C0:BD:E5:C2:6A:C8:E5:F6:B5:60:DA:70:18:BC:CE:8C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57nHwL3lwmrI5fa1YNpwGLzOjJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:dc:a5:37:24:49:2b:36:a0:03:85:48:5d:46:4a:77:ba:fe:
         cd:cc:9a:55:11:fa:6f:aa:e0:9c:56:b8:e7:96:db:d0:c8:ec:
         b1:a0:73:4e:73:48:c4:33:40:ec:3a:bb:d5:10:6a:b5:1d:da:
         87:68:e2:f2:55:aa:2f:9a:c3:fb:2f:8b:dd:5e:c0:a0:2d:ac:
         1e:c4:23:63:05:ff:9f:54:18:25:20:d3:fd:fb:9c:4e:3e:0a:
         76:36:b4:4d:8a:a6:d1:98:f3:03:57:14:42:da:05:95:fe:d3:
         6c:70:a6:02:79:fc:4d:b2:d8:27:72:5e:15:09:04:9a:73:b3:
         a0:8f:13:48:0d:b4:55:42:fc:a7:00:c0:18:02:3b:8b:bb:9e:
         c0:b2:53:cc:d7:de:9b:48:7f:b3:b5:1a:99:1a:34:65:83:3a:
         0e:47:4b:fc:f7:98:c8:75:bf:29:c5:49:80:49:64:6c:49:40:
         44:42:44:a4:ce:72:e6:a3:02:d9:af:5f:1f:21:d9:f3:ed:2b:
         06:43:1e:29:92:45:9b:4c:0d:88:e0:1d:a3:e9:b3:42:0d:79:
         aa:2f:81:32:84:da:5c:8c:ab:2a:4b:ce:2f:cb:0e:25:1f:67:
         36:e4:b0:22:d4:f6:3c:77:bb:3b:5c:44:56:30:3b:8a:c6:8a:
         52:42:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:06:43 2024 by rpki-client on console-fra.rpki-client.org