Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File:                     qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier:          5nyh7D+6gfVYY2NqjA1LLt049+9EVHKG5uuqFUkffPA=
Subject key identifier:   EC:F9:FE:08:45:A9:2C:B7:DE:B2:70:2E:8D:F7:57:58:5E:C6:95:32
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer:       /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial:       01901EC66642AA89D250A09DD81C8FC6FB95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number:          0EDC
Signing time:             Sun 16 Jun 2024 02:00:36 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:36 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:36 +0000
Files and hashes:         1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: 8juZfU7ceur0SRTdIncgJjCeTKq+FulAI02Cz9hH4hI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:66:42:aa:89:d2:50:a0:9d:d8:1c:8f:c6:fb:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
        Validity
            Not Before: Jun 16 02:00:36 2024 GMT
            Not After : Jun 17 02:00:36 2024 GMT
        Subject: CN=ecf9fe0845a92cb7deb2702e8df757585ec69532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:01:c3:89:0e:3b:57:5c:49:9a:2d:44:e5:
                    40:93:90:e8:4c:cc:6e:82:cc:3e:c2:12:75:41:db:
                    7b:2e:55:c3:72:e6:81:38:5a:9d:c8:36:3e:85:a1:
                    44:ce:db:5c:28:ef:fd:c1:a3:99:ea:38:4a:d8:9a:
                    d7:8e:13:04:de:60:cb:24:4e:98:a6:88:71:4a:27:
                    59:72:73:24:92:fe:ad:8f:74:1a:53:ca:65:ce:0c:
                    16:ce:55:47:95:fd:3e:bb:ef:54:f3:74:e9:ea:b4:
                    8f:7c:17:17:f5:ea:4e:32:3c:12:b0:14:b8:3b:77:
                    8c:5d:c7:bd:ad:4b:ad:bb:8c:fb:7c:9e:4c:43:22:
                    aa:ae:eb:d4:85:f5:9e:08:c2:bc:b0:87:4b:54:9f:
                    84:2e:9d:f0:c8:2b:10:01:0f:0d:70:48:fe:c3:a8:
                    2b:4d:ae:47:1e:da:54:c5:77:fa:c4:30:ab:5c:6c:
                    1f:e6:4e:d3:01:73:38:5a:1b:d2:24:90:01:a2:3b:
                    d8:2c:8d:b2:95:81:e0:79:83:45:57:56:42:9e:df:
                    29:82:48:44:8d:7d:b4:f3:56:3c:a5:5b:8a:de:dd:
                    09:1a:a2:72:b3:5e:f9:e5:cb:ea:78:3a:63:36:8b:
                    17:ae:6d:83:66:d1:37:f9:f2:fb:d9:7a:4e:46:b4:
                    80:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F9:FE:08:45:A9:2C:B7:DE:B2:70:2E:8D:F7:57:58:5E:C6:95:32
            X509v3 Authority Key Identifier:
                keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9b:0c:0b:97:d8:8b:5f:37:60:9f:47:c9:0e:7b:73:c2:0a:
         83:c0:3a:23:15:8e:70:51:3e:7d:52:09:41:0c:9a:16:5d:58:
         bb:23:d2:82:6b:c1:4f:6f:37:e9:c2:1e:f2:a5:e4:33:5c:39:
         ba:d8:53:85:fd:e9:f1:68:c2:92:ab:be:7d:ef:c5:ee:a5:a6:
         0b:47:3f:af:f2:ad:08:b0:cc:12:11:9e:5f:90:bd:4f:19:bb:
         8b:68:b5:27:62:27:f3:6a:36:2f:fa:42:3c:9f:a4:a5:0d:bc:
         d8:42:8e:8b:92:8a:c4:b7:76:91:18:ab:8b:f5:eb:57:be:64:
         f7:01:f2:ff:5d:88:2a:ff:2d:1e:96:98:61:42:36:3d:88:28:
         ac:bd:2a:34:8d:c5:08:eb:29:95:20:fc:6a:1a:62:16:09:f0:
         30:9a:0c:b5:cd:7d:9f:b9:f6:17:a2:9f:ee:a5:ca:ee:36:c4:
         85:35:5d:99:de:e5:12:1a:e9:60:cd:4e:de:c3:ae:b4:0c:3c:
         dc:b7:74:fd:22:50:d1:45:59:a5:0d:a2:10:71:2c:36:a4:b3:
         8b:9f:4a:31:9c:37:f8:05:64:46:0c:1f:1d:c0:d1:e9:6d:62:
         93:8e:b6:06:07:cd:f8:e0:8e:9c:a6:6c:81:3c:e5:21:dc:4f:
         72:1f:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:31 2024 by rpki-client on console-fra.rpki-client.org