Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
File:                     AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft (raw, json)
Hash identifier:          1frHnYVS9edXXUzU8IS9itH4HuU+Gl1HcgMhkRX0PGE=
Subject key identifier:   FF:75:13:F4:5B:A5:83:A1:68:76:76:60:53:DA:F8:6B:85:62:74:4B
Authority key identifier: 02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
Certificate issuer:       /CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Certificate serial:       01901BFC9BB19F7E7D54B3C9BB5FA8A520EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
Manifest number:          0340
Signing time:             Sat 15 Jun 2024 13:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:58 +0000
Files and hashes:         1: AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl (hash: FFQ2GDcGiSFznq1BMc92a4OytIW9vhLCug0sPAtiiUs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:9b:b1:9f:7e:7d:54:b3:c9:bb:5f:a8:a5:20:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
        Validity
            Not Before: Jun 15 13:00:58 2024 GMT
            Not After : Jun 16 13:00:58 2024 GMT
        Subject: CN=ff7513f45ba583a16876766053daf86b8562744b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:3b:14:08:0c:2e:54:d2:88:c3:10:86:16:
                    58:f5:eb:af:7c:dd:ec:e0:44:8d:af:d5:e2:14:31:
                    27:25:a4:5f:5a:18:2c:bf:71:6d:f9:0f:ad:79:66:
                    1d:10:28:e5:24:56:e4:98:78:a2:d5:56:98:bd:b8:
                    8a:39:88:05:69:de:f7:c5:75:d3:85:bb:11:a3:6e:
                    6b:66:1c:ac:3c:48:ea:c3:bf:e9:e5:83:11:0c:2d:
                    7f:77:99:5f:d6:e9:bc:1b:6c:32:fc:f0:3f:d5:08:
                    18:68:7e:1e:46:d7:db:f4:23:5a:ec:70:98:ba:71:
                    97:f1:1a:fc:7d:b7:08:1a:11:69:e3:fa:c8:a5:26:
                    02:4d:e8:e9:ba:05:03:0e:72:f2:f3:f3:79:51:1a:
                    b2:f1:5d:df:4e:8d:b2:01:03:af:e8:09:11:2e:f4:
                    ac:3d:04:aa:33:6c:72:a6:7d:28:27:b9:5f:e1:af:
                    93:29:0e:8b:c2:ae:5b:65:62:27:f7:70:13:3d:db:
                    81:b8:37:2a:b8:86:e2:5d:7e:1a:91:6c:09:53:9a:
                    3b:26:b2:6d:5d:6e:45:60:66:48:9e:5b:63:c4:06:
                    5f:53:69:28:23:8d:19:56:25:10:42:e4:4f:16:c3:
                    f1:22:70:5b:2b:41:6e:60:ad:dc:78:e8:7d:6c:59:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:75:13:F4:5B:A5:83:A1:68:76:76:60:53:DA:F8:6B:85:62:74:4B
            X509v3 Authority Key Identifier:
                keyid:02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2f:25:11:89:1f:a1:b0:b0:f3:98:1b:62:44:86:8a:c4:58:
         fa:bc:ce:62:97:d3:43:83:2d:4a:e5:06:f7:e2:5c:eb:14:56:
         3e:bd:70:f1:7b:27:f5:03:7a:5b:fc:35:e3:4b:0d:d7:12:ef:
         3e:da:dc:69:04:a2:87:cb:59:8d:a2:31:49:14:4b:d0:0f:05:
         29:39:0b:c8:99:e9:13:f3:3d:bb:1b:7e:4a:c4:3b:7b:21:9b:
         53:fd:d1:e1:18:64:42:f1:7c:77:0d:ee:53:a7:51:b6:49:4d:
         ab:89:37:49:67:c7:ea:45:4d:45:84:ce:9c:a5:7d:26:48:ca:
         38:09:b4:ea:f9:c0:39:5b:3e:c1:61:b3:af:f6:84:b7:85:bc:
         eb:3e:71:c2:f0:3f:92:05:a1:fd:a9:56:14:d1:dc:03:f3:54:
         87:92:0e:f3:08:11:1d:e6:ee:e9:00:a3:85:ab:73:6e:1b:68:
         e6:1c:0e:5a:93:3e:32:b2:f6:9b:a6:b6:94:5e:74:48:ef:fc:
         51:e5:15:6d:38:48:0f:3a:b2:98:1b:a0:c1:86:46:5e:9d:71:
         c3:87:e0:77:4e:30:d9:3a:de:70:58:50:cb:86:a8:61:7c:a7:
         8c:f6:04:dc:2f:47:8a:fa:d8:74:15:d4:0d:85:91:fe:c8:db:
         ad:af:fb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:04:33 2024 by rpki-client on console-fra.rpki-client.org