Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File:                     c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier:          KgqGcgfHBB6aAn0GR3SWAjBiRSERpCNzpiYKV9K6Odo=
Subject key identifier:   5E:83:40:23:3E:8E:21:88:E1:BA:94:97:06:77:78:79:B9:ED:BA:06
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer:       /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial:       0190448CCDFA22E89150CC872BC2FA8E1978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number:          0CE0
Signing time:             Sun 23 Jun 2024 10:03:16 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:16 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:16 +0000
Files and hashes:         1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: LkWg5yj8tmgxeTSF6sMk0xr0YcluBxnHbpAiESauHLU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:cd:fa:22:e8:91:50:cc:87:2b:c2:fa:8e:19:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
        Validity
            Not Before: Jun 23 10:03:16 2024 GMT
            Not After : Jun 24 10:03:16 2024 GMT
        Subject: CN=5e8340233e8e2188e1ba949706777879b9edba06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1f:2f:32:78:fb:81:46:48:e7:4d:31:f4:aa:
                    9d:41:0d:23:5b:22:17:d9:4e:26:e8:47:b4:08:8a:
                    ca:20:96:11:e1:3c:5a:48:4d:50:c5:89:59:29:cc:
                    0c:d3:ed:9e:a3:34:85:93:f3:b7:54:24:20:31:77:
                    e3:34:55:25:e6:b1:10:e7:e0:83:aa:69:91:06:93:
                    c7:56:e8:fc:3e:1c:94:86:ff:22:de:ad:c3:7a:47:
                    ca:17:04:56:86:6e:71:b6:ac:6f:64:e9:15:5d:ec:
                    a5:5f:d1:97:4f:ff:f5:c9:82:bb:0f:a7:6c:94:d8:
                    82:92:f0:ec:48:7c:d4:2d:bb:6e:ee:f7:23:92:64:
                    d3:7e:38:3d:a7:62:00:40:9f:80:96:bc:af:79:08:
                    cc:0b:d1:86:40:a0:ca:a9:2d:9a:7a:b6:37:dd:29:
                    51:a8:cd:81:89:9c:1b:5a:d3:47:9e:f8:62:f2:44:
                    d4:80:1e:88:fb:c9:dd:d9:8c:19:79:f1:c5:f1:9a:
                    4f:68:56:cc:97:35:af:11:61:a2:06:88:38:0b:de:
                    5c:39:90:32:3a:fb:f4:04:16:30:88:f1:81:d7:6e:
                    5c:10:5f:93:60:23:14:9b:a8:23:a1:bd:44:5e:3d:
                    bf:08:0d:90:74:92:d4:15:71:f1:9a:34:b1:6a:0e:
                    0d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:83:40:23:3E:8E:21:88:E1:BA:94:97:06:77:78:79:B9:ED:BA:06
            X509v3 Authority Key Identifier:
                keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:01:fe:42:3f:8f:a8:ee:3f:9c:91:b7:99:5c:cf:59:98:08:
         60:e4:0f:f0:28:55:b3:e6:e7:b1:62:f9:7a:53:c8:5f:2a:47:
         f0:60:c0:38:a3:95:69:e8:b6:ae:95:89:8d:cb:34:a4:be:a6:
         c4:4d:11:d6:79:2d:16:1f:a5:a0:40:89:45:ae:70:1c:39:65:
         59:3e:98:87:13:a7:eb:f5:a0:77:c4:96:cb:43:33:56:3b:51:
         5b:db:08:5f:86:ab:6e:37:8a:db:52:64:3b:17:d8:27:17:43:
         bb:0c:76:9c:2f:84:07:66:d5:9b:b3:db:46:0b:b1:ec:00:40:
         4d:c6:79:b2:f1:1c:4a:90:85:75:90:bd:64:4e:0d:23:aa:cc:
         a5:22:1b:cf:0a:19:53:54:77:98:9d:2d:00:87:9e:37:38:52:
         34:60:6b:0e:49:c1:2e:73:7d:c3:5e:ca:86:16:f2:0a:a0:b5:
         da:07:4a:05:c7:79:e6:49:71:68:3c:26:95:7d:3f:a7:b5:c0:
         29:e8:f4:63:20:b5:f7:34:33:c8:4a:ce:c7:de:02:fe:49:10:
         b4:2a:7e:71:3d:76:8a:1f:d2:ba:4e:08:0f:9a:68:c9:3c:14:
         5f:9b:3a:8d:df:fe:d3:ff:0e:7b:18:ed:f3:91:4a:0c:64:4c:
         81:92:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:22:52 2024 by rpki-client on console-fra.rpki-client.org