Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
File:                     XpgU1DFdMK28jeMGAFVq6cPPns4.mft (raw, json)
Hash identifier:          9yWKbTZKMspbTlRPYsMI/GKDSBfum58jmQvTi1XJdi4=
Subject key identifier:   E4:47:4B:4D:7F:10:54:9F:98:21:A0:93:EA:88:44:B6:BA:23:F8:F9
Authority key identifier: 5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
Certificate issuer:       /CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Certificate serial:       0190415268CC09C37DA51153BF4F14C304E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
Manifest number:          11D8
Signing time:             Sat 22 Jun 2024 19:00:38 +0000
Manifest this update:     Sat 22 Jun 2024 19:00:38 +0000
Manifest next update:     Sun 23 Jun 2024 19:00:38 +0000
Files and hashes:         1: XpgU1DFdMK28jeMGAFVq6cPPns4.crl (hash: /Fmm2PdmLurcN6HE9uY88X7ws7XlfXbqZvv+ScNlDvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:68:cc:09:c3:7d:a5:11:53:bf:4f:14:c3:04:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
        Validity
            Not Before: Jun 22 19:00:38 2024 GMT
            Not After : Jun 23 19:00:38 2024 GMT
        Subject: CN=e4474b4d7f10549f9821a093ea8844b6ba23f8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:a8:aa:db:24:03:f7:9c:36:b3:86:90:1a:
                    b6:5f:4e:e6:65:de:a8:83:21:e4:c2:ff:3a:9d:05:
                    f3:57:16:bf:81:6c:4c:ca:77:f4:0b:76:98:f7:05:
                    76:8a:f0:62:ee:96:82:a5:0a:2b:5e:fb:95:2d:24:
                    ec:17:91:bf:7b:a5:53:7d:6b:72:85:0c:97:6c:13:
                    85:19:44:38:ee:2b:27:51:a5:19:6b:34:e6:bf:5c:
                    a4:b9:54:cf:ae:7a:99:0e:d1:9b:07:87:61:07:b7:
                    1f:77:ce:99:33:2b:9b:dd:6a:8d:60:3e:7d:e3:98:
                    c3:94:b3:f4:e4:61:67:7e:e1:9e:e4:65:e9:be:02:
                    54:34:79:eb:41:2c:d1:92:e4:07:3d:d5:a6:71:56:
                    b7:4d:a4:4f:22:c1:01:d4:4b:e4:91:07:01:ab:f0:
                    55:32:6a:fb:ae:6d:79:bd:15:3c:08:dc:e9:b5:3a:
                    04:df:7c:d6:a4:54:01:bd:86:37:66:c8:6e:9b:b9:
                    9b:9a:e9:dd:b6:a7:93:de:5d:15:6d:f3:1b:53:4f:
                    db:d9:18:38:35:09:0c:56:55:9f:bd:7d:63:78:dd:
                    8f:72:3b:9c:8d:28:fb:de:76:66:c7:46:23:b2:ba:
                    37:c5:b4:14:27:14:30:cc:14:37:50:80:40:42:e2:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:47:4B:4D:7F:10:54:9F:98:21:A0:93:EA:88:44:B6:BA:23:F8:F9
            X509v3 Authority Key Identifier:
                keyid:5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ed:48:9c:35:40:d9:17:18:0e:a1:8a:6f:1b:83:eb:cc:15:
         3c:98:ea:23:ac:e9:d5:fd:e8:dc:1d:0a:b5:72:8b:3d:ea:91:
         49:fb:31:75:13:47:2b:de:9a:0a:5d:ca:10:71:61:25:8c:e1:
         8e:08:e3:3f:8d:db:0e:76:40:11:06:42:f4:3d:11:b5:26:ff:
         25:07:30:b9:3c:5e:9a:29:69:db:55:d1:c2:d8:96:d4:6d:8a:
         a9:6e:cc:5e:38:3b:b0:ff:14:81:f4:38:03:4d:e3:9b:aa:0f:
         02:ed:ac:54:cd:24:d6:e2:f7:1e:87:9d:98:3b:84:f6:43:1a:
         fa:e6:63:7f:d5:d6:14:46:65:9b:6f:cd:0e:96:e8:21:1b:44:
         d1:bb:dc:8e:25:43:eb:b3:8f:d1:25:61:a1:63:0f:a0:bd:a8:
         2c:e9:0e:33:4b:d4:9e:54:c6:a2:06:13:b3:58:60:06:f3:73:
         85:33:df:59:dc:0a:6b:a6:39:d2:69:1f:ff:5e:9f:b0:55:81:
         13:b2:c9:46:7d:6c:02:da:bf:76:2c:42:e9:75:6f:01:0f:e1:
         8b:53:23:db:9a:13:90:29:8a:f1:17:93:6d:30:dc:fa:40:08:
         0a:a3:f6:ec:a3:cf:6e:9d:fe:f8:71:e1:42:f4:ab:e6:65:62:
         04:4c:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:04:56 2024 by rpki-client on console-fra.rpki-client.org