Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File:                     cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier:          3hWS3Txf9C5YKVo7KA8UIPjoxb1tPyb70eUPMa3/J+s=
Subject key identifier:   0F:3E:F5:BA:F3:0A:98:39:41:D4:65:27:3F:7A:CB:04:06:E9:AA:17
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer:       /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial:       01901DEC8DF245CB1212BAFA432B278D4B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number:          A4
Signing time:             Sat 15 Jun 2024 22:02:40 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:40 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:40 +0000
Files and hashes:         1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: oH1lairBCngYL3mTma3dEPM4XzJL68f/8NQuXUquEno=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:8d:f2:45:cb:12:12:ba:fa:43:2b:27:8d:4b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
        Validity
            Not Before: Jun 15 22:02:40 2024 GMT
            Not After : Jun 16 22:02:40 2024 GMT
        Subject: CN=0f3ef5baf30a983941d465273f7acb0406e9aa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:eb:ff:26:b3:e3:86:38:05:55:5d:ec:34:
                    e9:68:c0:02:24:14:4d:06:77:5f:78:75:3c:e1:5e:
                    f4:2c:e4:9a:e9:55:53:8a:61:65:f0:95:4f:8f:30:
                    ef:1e:93:5a:07:c5:68:87:ed:a8:8c:71:57:0b:c0:
                    f4:44:e4:11:2f:5e:13:27:19:98:45:0d:63:1c:03:
                    52:2c:ba:ca:57:7f:77:19:33:0f:db:8c:10:f2:f1:
                    6d:4b:55:41:8b:b2:85:29:5b:ac:1c:9a:d2:a7:ab:
                    3a:10:4f:8e:d4:93:8b:99:55:57:5b:13:10:33:6b:
                    6c:88:bf:74:94:12:4d:66:af:80:a7:bd:8c:f7:29:
                    64:d3:24:14:19:63:0a:12:0b:e3:78:e3:93:5a:30:
                    aa:f8:ff:e2:54:ee:65:c7:96:c3:8c:82:79:7b:14:
                    de:96:4b:d4:6a:ef:34:ff:5e:97:1a:95:2a:2e:bd:
                    96:2a:50:d9:7d:77:ce:36:4f:1b:30:b2:aa:01:65:
                    4f:f1:4f:83:8c:d5:ef:55:52:79:0e:8f:46:eb:74:
                    6c:a3:ff:b7:30:69:52:ab:82:79:fa:24:73:b0:c9:
                    56:bd:dc:74:30:96:13:a7:d2:a3:31:6c:27:fc:0d:
                    05:5f:23:e1:d1:08:3f:7f:39:c8:23:db:33:f0:fb:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3E:F5:BA:F3:0A:98:39:41:D4:65:27:3F:7A:CB:04:06:E9:AA:17
            X509v3 Authority Key Identifier:
                keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1e:d8:ab:3a:79:5f:8c:17:60:3e:6b:7d:03:21:3f:85:77:
         e3:df:b2:ad:e9:f2:3a:7c:ba:7e:00:1c:bd:26:60:21:e7:d5:
         0b:c2:16:2e:a3:39:05:fb:c6:a0:05:69:32:27:dd:10:50:80:
         50:a6:4f:08:36:89:67:f1:73:6a:eb:17:79:04:d8:ce:66:6f:
         db:24:e9:a6:8b:65:41:a8:99:f4:2e:28:33:a6:65:2c:d1:43:
         8b:d2:21:37:0e:58:82:55:19:32:01:ae:00:78:95:ce:a0:b9:
         ce:8a:c3:3c:04:0d:da:05:cd:48:13:71:f5:82:26:cf:c1:fb:
         72:0d:bf:c9:e0:08:e6:38:52:56:52:7c:54:75:7f:fd:2d:44:
         d0:4a:99:c5:06:ff:0f:fb:62:7a:c3:34:2b:1c:09:bd:da:5a:
         27:f4:5a:45:3f:6a:58:70:31:b7:2d:43:0e:54:d1:2d:1f:c3:
         28:76:3c:57:1e:cd:7c:1b:01:2e:b1:f9:8c:ed:c9:10:ad:6b:
         22:36:98:d0:8a:dd:2c:8a:0d:23:bf:e5:2b:84:19:32:91:fb:
         4b:30:5f:f0:03:47:a9:e2:e0:e7:3f:ca:4c:b5:e2:8b:bc:8b:
         b7:1b:fd:89:2c:82:f3:7e:54:40:fa:cf:c5:e6:ea:4b:2c:49:
         da:01:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:06:57 2024 by rpki-client on console-ams.rpki-client.org