Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
File:                     96wXOfUp2vTMczgkibgFl-ugf0E.mft (raw, json)
Hash identifier:          Mm5ayON92vZ3nGMJ8BNbkgkbTixKNaZkN4uJhzP9q7c=
Subject key identifier:   4F:B4:94:0D:83:B7:E5:76:98:6F:71:73:CF:D1:A1:60:B6:C4:F7:6B
Authority key identifier: F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
Certificate issuer:       /CN=f7ac1739f529daf4cc73382489b80597eba07f41
Certificate serial:       01901CA186A3A9D188AD125485BE4FEAF9E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
Manifest number:          03FE
Signing time:             Sat 15 Jun 2024 16:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:06 +0000
Files and hashes:         1: 96wXOfUp2vTMczgkibgFl-ugf0E.crl (hash: m1020wWzKNp7d3RzBFLcth2R72N09LVq5d++qqwX2b4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:86:a3:a9:d1:88:ad:12:54:85:be:4f:ea:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ac1739f529daf4cc73382489b80597eba07f41
        Validity
            Not Before: Jun 15 16:01:06 2024 GMT
            Not After : Jun 16 16:01:06 2024 GMT
        Subject: CN=4fb4940d83b7e576986f7173cfd1a160b6c4f76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:37:01:31:a4:19:e8:23:d9:8f:b6:87:b7:
                    23:2f:4b:03:0d:f1:f9:08:c2:82:e4:a3:51:e2:2c:
                    80:86:72:ea:a9:b3:8e:d1:49:1b:33:c1:3e:d5:a4:
                    e2:79:34:20:e7:05:e2:9b:d2:8c:9a:45:59:08:2f:
                    70:46:8d:21:e3:b1:4d:26:57:da:c0:38:ef:51:7c:
                    6d:b9:79:4e:4e:bf:24:67:e6:a5:9b:ed:84:2f:56:
                    61:04:92:c6:00:cf:9d:20:42:7a:64:05:c9:a5:fa:
                    e0:7a:82:c0:de:ab:4c:98:5d:45:de:52:5c:0b:81:
                    96:6d:19:19:ec:0b:14:88:25:b8:4b:cc:37:12:d2:
                    7a:85:ac:49:8a:07:0e:d4:ce:f9:e9:ee:1f:47:b8:
                    20:64:ea:a7:e3:5a:0d:19:cb:77:89:1c:1b:b7:08:
                    b1:10:62:97:50:43:d1:55:76:b1:17:eb:c7:3a:65:
                    d1:c8:fd:7f:59:83:59:e2:45:b5:63:67:8b:37:46:
                    8e:0a:5b:ec:ca:bf:f5:41:69:a6:d7:9e:38:e7:af:
                    dc:31:c2:1c:14:68:d5:24:61:88:30:f5:bf:db:40:
                    9a:6e:b5:90:96:ac:6d:ef:5f:00:ae:16:8b:b2:b2:
                    55:11:35:e9:22:25:c1:b5:cb:9f:f6:f9:9e:6d:7a:
                    e8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B4:94:0D:83:B7:E5:76:98:6F:71:73:CF:D1:A1:60:B6:C4:F7:6B
            X509v3 Authority Key Identifier:
                keyid:F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:8c:65:81:35:ac:d4:c3:13:0a:9c:87:85:5e:cd:d5:0b:
         ab:b6:8d:78:78:06:e1:d9:30:7d:9d:92:ac:72:14:37:a1:ca:
         e3:99:67:8c:d3:a6:1e:0a:7e:d5:7b:86:c3:d2:b5:89:e4:f0:
         34:54:35:fc:f6:74:d1:62:b5:65:43:22:f7:4a:d1:7f:56:b5:
         a2:03:cc:8e:da:95:b3:d0:f5:d6:20:b5:a4:00:c6:86:cb:d3:
         63:61:02:49:52:e6:37:bd:2d:8b:7f:9b:e4:84:89:f7:9c:da:
         bf:fa:3b:55:bf:46:93:eb:f3:bd:ce:2f:53:8f:f1:2f:14:36:
         46:a3:63:b8:75:01:60:c9:e2:18:e9:3a:8d:d7:86:19:f3:70:
         ca:2f:39:6a:d7:32:15:78:69:ca:b9:40:cc:92:28:c4:8c:32:
         eb:33:a5:39:74:48:c0:71:a2:43:d4:10:9f:79:04:bf:1c:c3:
         5e:d6:52:bc:53:ac:c2:11:0c:c0:72:10:bf:84:eb:c7:4d:57:
         dd:b7:71:12:57:22:4e:73:09:74:f0:bc:65:5a:9c:e5:b1:67:
         78:ea:11:8d:b4:f2:2e:67:bd:d1:61:4e:30:a5:8c:b5:9b:a6:
         78:95:2b:31:52:07:fd:ff:81:52:9b:47:23:da:31:21:ea:9a:
         6a:f1:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:02:38 2024 by rpki-client on console-fra.rpki-client.org