Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
File:                     knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json)
Hash identifier:          c7pSl1ZfTWRaHIklvvMlE+EgNQHfITHltPZYaT7if2M=
Subject key identifier:   9D:BD:5D:D4:2C:28:1A:98:B2:2A:8E:39:5C:39:90:3A:5C:33:73:09
Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
Certificate issuer:       /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Certificate serial:       01901DECB7617F9D9FC627A359AC4BA2145B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
Manifest number:          0F96
Signing time:             Sat 15 Jun 2024 22:02:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:50 +0000
Files and hashes:         1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: FsSxPW62yx2K2VjgTJz92sNYwHnrnQvb/DbemAUaV0A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:b7:61:7f:9d:9f:c6:27:a3:59:ac:4b:a2:14:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
        Validity
            Not Before: Jun 15 22:02:50 2024 GMT
            Not After : Jun 16 22:02:50 2024 GMT
        Subject: CN=9dbd5dd42c281a98b22a8e395c39903a5c337309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:e1:67:0b:76:16:f2:df:ad:d0:a1:3f:81:
                    54:53:c0:fb:cf:ed:46:06:df:4f:dc:99:fe:db:69:
                    8c:59:fe:4c:49:4b:85:34:f8:9d:bc:c3:a8:58:00:
                    c5:72:a5:de:6f:9e:33:d5:22:cb:1c:fd:97:0f:47:
                    60:e9:4e:17:91:5a:85:3c:6b:97:1f:5d:30:75:1a:
                    ed:5b:df:8b:58:de:aa:c8:1f:80:21:a3:1c:f4:bc:
                    94:83:0d:2d:7d:ec:ef:43:45:43:8e:0e:ff:60:71:
                    c9:f9:89:18:9c:77:b7:03:ec:89:1a:cd:3c:51:0c:
                    cd:f2:ce:ec:2e:f5:b3:15:24:c8:30:51:be:38:7e:
                    00:16:09:5c:1a:88:72:da:db:d4:cb:73:19:a8:3a:
                    38:25:8c:a6:00:36:55:17:7a:0a:89:32:c5:15:e9:
                    9c:33:fb:14:0b:66:b1:a6:04:51:4b:e5:f5:b3:10:
                    62:2e:74:cc:ae:92:44:0d:0c:b7:b3:9d:d1:9c:95:
                    09:77:3d:ef:83:85:60:65:52:76:5b:e6:a9:07:f0:
                    9c:64:cb:b6:fc:e8:cb:4e:95:d5:05:83:af:2c:5e:
                    01:06:6b:2a:b9:d3:f9:b9:89:56:87:9d:b8:c8:3f:
                    4d:76:5f:f0:bc:a2:93:2c:7e:97:86:dd:9b:84:df:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BD:5D:D4:2C:28:1A:98:B2:2A:8E:39:5C:39:90:3A:5C:33:73:09
            X509v3 Authority Key Identifier:
                keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:eb:3b:06:43:e5:85:bd:24:6e:9c:50:a0:60:52:3f:e9:09:
         c9:68:1c:8d:5f:c6:a7:60:dd:64:8b:df:6a:a3:df:d8:60:0a:
         d3:37:5d:6c:f8:2d:46:89:12:e8:83:71:f1:a4:91:9e:8f:25:
         9b:ba:92:3f:ba:7d:1d:c2:a7:e5:7e:18:ea:e6:7c:63:67:a3:
         66:2f:cb:5d:b9:41:44:02:e7:49:0c:6f:3a:70:e4:6d:c8:b6:
         09:6c:b1:21:e5:9d:57:fa:2d:74:27:8c:b0:7f:01:6f:41:ea:
         8f:86:a5:c8:00:70:1c:b2:e4:51:ee:41:16:88:22:e7:40:9a:
         69:fd:44:1a:a9:5a:26:dc:07:04:b2:36:fa:12:57:fc:7c:5d:
         ad:67:c8:d3:3a:a8:b8:78:20:ba:42:94:fa:f9:b4:f2:b2:1c:
         f9:1b:8f:ab:5e:33:0f:f6:9e:73:a9:1b:54:96:27:90:58:a5:
         a0:1b:93:0b:48:00:81:3e:60:73:38:67:7a:3a:02:f0:c5:7b:
         3a:71:a3:06:18:98:48:7d:65:18:c9:43:af:2e:5b:eb:9e:43:
         8c:4f:fe:b4:20:84:6b:2b:c6:fc:af:06:b5:1a:f8:b8:84:97:
         66:b2:d0:97:54:16:b2:c3:95:68:87:94:95:4f:73:67:95:b1:
         8f:29:04:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:08:29 2024 by rpki-client on console-fra.rpki-client.org