Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9d789b-e3ca-4f36-8c81-44cd29e45c08/1/bW4neYPJaCvrlmHBqiad5aqI3xU.mft
File:                     bW4neYPJaCvrlmHBqiad5aqI3xU.mft (raw, json)
Hash identifier:          CRVb8GXIelyqYpqD9nnZQVA7VBVn/+X71oKFj7kT1gI=
Subject key identifier:   82:7F:97:33:B6:04:9F:65:B6:54:11:29:85:9D:95:DD:5E:84:83:C1
Authority key identifier: 6D:6E:27:79:83:C9:68:2B:EB:96:61:C1:AA:26:9D:E5:AA:88:DF:15
Certificate issuer:       /CN=6d6e277983c9682beb9661c1aa269de5aa88df15
Certificate serial:       01901DEBF19A7360E657CCB930B124CCEF6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bW4neYPJaCvrlmHBqiad5aqI3xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/9d789b-e3ca-4f36-8c81-44cd29e45c08/1/bW4neYPJaCvrlmHBqiad5aqI3xU.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:02:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:00 +0000
Files and hashes:         1: bW4neYPJaCvrlmHBqiad5aqI3xU.crl (hash: 9nm/GCYY6nqYsyWFGzN9XYuKEDcRGBcYNt1omS4vmyQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/9d789b-e3ca-4f36-8c81-44cd29e45c08/1/bW4neYPJaCvrlmHBqiad5aqI3xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/9d789b-e3ca-4f36-8c81-44cd29e45c08/1/bW4neYPJaCvrlmHBqiad5aqI3xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW4neYPJaCvrlmHBqiad5aqI3xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:f1:9a:73:60:e6:57:cc:b9:30:b1:24:cc:ef:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6e277983c9682beb9661c1aa269de5aa88df15
        Validity
            Not Before: Jun 15 22:02:00 2024 GMT
            Not After : Jun 16 22:02:00 2024 GMT
        Subject: CN=827f9733b6049f65b6541129859d95dd5e8483c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0d:25:70:b4:fe:84:5f:9f:58:91:cd:57:ad:
                    20:8b:91:d5:61:ab:2a:70:ae:76:f9:de:fa:ba:4a:
                    27:7f:b2:cd:37:81:57:57:16:95:cf:67:32:a4:2b:
                    43:b3:47:d5:7a:a3:af:a3:72:2c:bc:08:ae:a7:76:
                    d0:44:b0:07:60:82:1d:f0:97:14:39:70:62:b5:93:
                    47:08:27:c4:c4:13:d0:a0:30:b2:47:26:e1:57:0a:
                    d6:6a:c3:94:5b:a1:3b:ff:50:13:60:9e:bb:7e:ba:
                    41:c6:59:31:76:4e:cd:23:e7:ad:a0:ff:41:73:08:
                    d7:22:a8:34:d5:2c:d0:1c:6c:7b:38:42:26:97:b4:
                    58:73:b7:de:43:8b:22:02:dd:eb:6f:e7:4b:ea:ab:
                    8a:0f:c4:5f:e0:6d:cd:2f:93:ed:78:a1:fb:22:a2:
                    4c:00:ed:17:0c:55:47:3e:36:b9:fe:7b:f9:2d:67:
                    ff:bc:b6:7d:31:b1:a2:da:a1:53:f5:5d:75:32:83:
                    57:b3:ab:32:54:00:4b:fb:a3:6c:d9:89:fd:32:fb:
                    49:f6:e4:cb:e4:4d:18:55:d7:c2:59:fb:f1:b0:8e:
                    29:d6:da:6e:97:6f:9f:32:f2:6e:5e:8a:b6:a7:f6:
                    ef:58:f0:53:19:97:1f:b5:25:76:61:42:81:c9:af:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7F:97:33:B6:04:9F:65:B6:54:11:29:85:9D:95:DD:5E:84:83:C1
            X509v3 Authority Key Identifier:
                keyid:6D:6E:27:79:83:C9:68:2B:EB:96:61:C1:AA:26:9D:E5:AA:88:DF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW4neYPJaCvrlmHBqiad5aqI3xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9d789b-e3ca-4f36-8c81-44cd29e45c08/1/bW4neYPJaCvrlmHBqiad5aqI3xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9d789b-e3ca-4f36-8c81-44cd29e45c08/1/bW4neYPJaCvrlmHBqiad5aqI3xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7f:f8:dc:e4:13:13:e5:be:ed:59:4c:e3:40:0c:6b:00:79:
         43:ec:93:8e:15:aa:46:3c:27:1e:83:f9:7f:0f:53:e9:b2:f5:
         10:35:f9:00:c9:fe:38:5d:56:2c:03:21:26:1d:fc:5c:ab:d8:
         59:ca:b9:8a:26:ac:fe:f7:48:52:bc:76:00:87:b1:46:34:9a:
         51:97:65:13:da:61:61:64:a8:45:20:bc:57:6e:cd:7c:9e:90:
         13:62:ea:2e:6e:c3:17:90:2a:7f:42:90:38:d1:81:44:4e:72:
         8b:5a:3f:00:f2:e5:48:1f:5f:1a:39:b4:fb:ae:a0:cc:4e:94:
         8c:3a:84:05:cf:e1:f6:a3:8d:b2:6e:eb:89:37:d2:0a:d9:f4:
         bd:99:c9:7b:b2:0c:3d:3d:1b:ab:88:4f:d4:98:b9:2e:83:3d:
         7f:69:80:33:80:7b:a4:0d:91:13:7b:cc:48:9a:6b:bd:fb:ba:
         97:d7:26:d1:e8:57:a3:e2:2d:ad:1b:00:12:72:49:a2:18:32:
         3e:ad:f3:2d:59:51:5c:f6:58:92:0d:46:00:9e:8d:8e:9c:8e:
         98:1b:77:cc:75:2f:bc:4e:eb:95:9d:85:ea:e9:69:9d:a3:0a:
         ec:fc:25:0f:ad:1e:0e:da:0e:25:40:44:23:60:a6:c2:20:55:
         29:3f:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:15:32 2024 by rpki-client on console-ams.rpki-client.org