Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
File:                     XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json)
Hash identifier:          EgEzqE13EwEFJzW6OAdJnbiSIhl3958/AuVYzPfYC4o=
Subject key identifier:   90:37:F9:8E:85:E1:4C:2B:B6:5F:DF:97:C9:41:F6:8D:B8:C8:CB:35
Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
Certificate issuer:       /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Certificate serial:       01901DEC2AE0BC344BEA227FB5A7E66AC129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
Manifest number:          05D2
Signing time:             Sat 15 Jun 2024 22:02:14 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:14 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:14 +0000
Files and hashes:         1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: OYahbWOAPn1npVGYfi69xvh+r0diKPLDHxi3SucrGJQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:2a:e0:bc:34:4b:ea:22:7f:b5:a7:e6:6a:c1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
        Validity
            Not Before: Jun 15 22:02:14 2024 GMT
            Not After : Jun 16 22:02:14 2024 GMT
        Subject: CN=9037f98e85e14c2bb65fdf97c941f68db8c8cb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bb:54:d8:90:69:72:ea:c8:df:e4:96:de:33:
                    be:13:5e:5f:57:48:c4:77:f4:bc:b7:28:ca:76:48:
                    32:6b:f4:dd:4b:91:6b:5c:4e:db:78:c4:bf:6b:9e:
                    44:0f:52:4d:8f:b4:06:7f:2d:ab:20:83:d4:97:25:
                    30:a8:b0:9e:f3:00:d6:27:87:25:c0:30:a3:c9:5d:
                    ee:05:49:03:fc:af:62:6e:86:2b:68:4a:09:e5:0e:
                    79:b5:13:ba:b7:ee:5e:e0:46:9a:73:5d:1e:25:46:
                    f6:bc:27:67:1e:23:13:2c:93:24:6a:ee:c9:51:f6:
                    82:ba:c5:c9:3a:eb:c0:e6:dc:ed:25:f9:31:19:b3:
                    9f:89:07:34:c6:d8:50:e0:8d:d3:1b:f0:54:a6:ae:
                    a6:47:bf:df:85:01:77:5d:9a:07:bc:a2:da:93:7e:
                    b0:c7:a3:9d:b9:cd:ed:a5:8e:09:2f:b9:95:a8:2d:
                    38:bd:60:f8:eb:0b:df:52:3d:5a:96:a5:66:ba:4f:
                    f7:cb:4c:3e:da:06:ad:75:8d:12:27:8c:04:55:10:
                    66:b2:72:74:9f:34:e9:da:85:15:76:fb:7f:8a:76:
                    3e:39:0b:28:f3:d8:3f:c8:54:90:f2:c4:ab:c7:38:
                    7d:42:f7:7a:84:0c:bd:3b:5a:9e:55:f5:50:84:cc:
                    93:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:37:F9:8E:85:E1:4C:2B:B6:5F:DF:97:C9:41:F6:8D:B8:C8:CB:35
            X509v3 Authority Key Identifier:
                keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:7d:e7:33:7f:8b:87:f7:b0:f7:28:ff:02:d3:dc:9e:a4:92:
         f0:53:96:8f:00:67:a9:53:74:e4:7a:63:06:63:ae:a9:62:0b:
         63:5a:6c:0d:f4:fb:3a:84:62:26:e6:f9:38:a7:f6:a5:a6:0b:
         15:64:28:30:0f:21:61:bc:36:2b:91:c0:79:3f:42:85:b8:73:
         ab:0b:f1:ff:65:7e:db:a3:c6:38:b2:c4:9d:20:cc:b1:7e:cb:
         7d:fb:82:09:d3:3c:c7:8c:de:0b:06:30:6e:1b:d5:ec:c9:2d:
         be:39:56:14:58:00:82:3c:35:b8:88:9d:1c:6f:c6:d9:1c:5f:
         30:5f:52:38:9b:5b:c5:c1:15:94:8b:2e:c1:64:b2:27:20:a0:
         df:aa:62:29:52:0b:fd:0f:c1:c5:0e:43:1b:03:52:91:c8:d9:
         19:39:1e:7d:f2:7e:50:ea:ff:01:20:3e:7c:9a:2c:63:9d:5f:
         60:ba:a0:55:54:6f:a9:1b:65:e3:cc:f9:70:af:c6:a4:f0:d2:
         f1:dd:e7:9c:d9:b1:33:75:12:44:76:6c:ab:95:3a:85:3c:5e:
         41:09:17:d9:c2:c6:8e:f8:de:fd:1f:e4:57:3c:49:c0:fd:7d:
         6c:a8:90:68:61:be:c2:20:94:17:1d:b6:aa:44:d7:d2:21:46:
         ea:86:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:44 2024 by rpki-client on console-ams.rpki-client.org