Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
File:                     IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft (raw, json)
Hash identifier:          aJc1f+XiVbW73DULYpdF5+Stp3W0VfuDDSFW0zn6MpA=
Subject key identifier:   53:41:D8:10:4A:12:63:1D:61:A8:1D:84:04:77:A8:DB:25:93:A4:00
Authority key identifier: 22:FB:EF:69:5F:A9:5D:0C:95:90:9E:51:AA:1F:AB:94:FC:40:26:7D
Certificate issuer:       /CN=22fbef695fa95d0c95909e51aa1fab94fc40267d
Certificate serial:       01901EC715E6119329889B542073E23DE122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
Manifest number:          0797
Signing time:             Sun 16 Jun 2024 02:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:21 +0000
Files and hashes:         1: IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.crl (hash: 1FZLrbZ0t/Y2IWdprdqOPkVmrkfIKHiuipDcC44QKeE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:15:e6:11:93:29:88:9b:54:20:73:e2:3d:e1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22fbef695fa95d0c95909e51aa1fab94fc40267d
        Validity
            Not Before: Jun 16 02:01:21 2024 GMT
            Not After : Jun 17 02:01:21 2024 GMT
        Subject: CN=5341d8104a12631d61a81d840477a8db2593a400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:ba:db:8d:90:6c:2a:01:9c:e5:a6:5d:ec:
                    d5:f2:52:0b:0e:1f:ef:f9:ae:ba:f1:4e:ef:fc:5f:
                    7d:80:1a:e2:fb:b6:b9:00:76:a4:ae:5e:97:c4:7a:
                    25:08:7a:b3:6d:a6:6c:51:30:32:b2:98:67:45:01:
                    85:1c:c4:0c:69:61:81:6e:f2:5e:23:6e:9a:94:14:
                    f1:c0:a2:56:3b:ba:af:c5:e8:0b:44:e1:a1:e4:69:
                    d2:fd:27:21:e4:25:a4:8c:58:e9:db:10:d6:a4:e2:
                    8d:69:6e:15:dc:c8:94:82:1e:d8:63:84:09:cb:29:
                    fa:47:69:fb:81:fc:18:26:ca:7a:2a:fc:6b:e2:d7:
                    2c:af:2f:78:8b:44:12:8f:b5:c4:69:9d:ba:3c:36:
                    c0:9d:37:e1:c8:4d:ad:38:8f:5c:61:6d:2e:df:6b:
                    9e:86:10:22:a6:16:5c:3d:af:0c:43:ef:be:1f:d5:
                    65:2f:3e:03:f0:4a:a5:fd:b1:8b:4a:07:1a:78:04:
                    af:ba:1f:d8:4a:82:8a:38:3e:00:cb:2f:cc:e4:e6:
                    f9:a9:a7:56:62:77:7f:d5:3f:a2:fe:44:06:6c:65:
                    6b:b8:c9:d7:92:28:9e:1d:89:40:62:d8:c0:a8:89:
                    23:da:27:9b:95:c6:8d:fc:2a:02:a6:44:11:6d:3c:
                    fe:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:41:D8:10:4A:12:63:1D:61:A8:1D:84:04:77:A8:DB:25:93:A4:00
            X509v3 Authority Key Identifier:
                keyid:22:FB:EF:69:5F:A9:5D:0C:95:90:9E:51:AA:1F:AB:94:FC:40:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3f:91:9d:9a:17:ae:5a:67:8f:1d:46:c7:f9:c3:b8:eb:fc:
         7f:76:f4:b7:cd:90:69:fa:04:e1:11:64:5c:a7:ba:0c:69:37:
         42:88:82:b7:73:84:42:22:01:98:d3:e5:28:1a:f7:1e:5b:10:
         b7:36:b0:56:fb:a1:83:63:64:a3:0c:ae:64:45:5c:3a:a6:67:
         cb:2a:b1:97:6e:48:02:bd:c6:f0:dc:87:65:38:96:d3:a5:ab:
         00:40:f8:8c:f2:b1:18:25:54:5b:82:69:7f:8b:cb:5e:14:1b:
         ed:f5:a2:b5:87:9b:16:0b:cf:86:9a:2e:55:93:58:55:79:41:
         31:94:42:ed:37:21:54:56:1e:8e:ed:35:37:16:ef:a9:c0:25:
         eb:71:6c:f9:4f:ea:eb:da:fa:f7:68:6e:84:75:07:de:ad:96:
         ce:8c:0f:8a:b1:e2:ab:08:cd:a5:79:f8:d3:05:13:91:39:21:
         10:0b:0c:ca:cb:b2:19:37:2e:1b:44:96:be:ec:3d:43:1d:49:
         11:a3:24:83:d6:91:9b:a8:25:90:2c:94:fd:5d:ee:d1:54:66:
         db:fa:15:71:80:49:f7:fe:6d:04:26:15:5a:41:54:cb:84:df:
         be:6e:4a:47:12:79:96:e2:a5:89:ba:82:9b:af:72:04:04:1b:
         a7:fd:df:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:39 2024 by rpki-client on console-fra.rpki-client.org