Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
File:                     HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft (raw, json)
Hash identifier:          1g8Yn15EjgK3Ey/uDpTjP08twpxAUSGI7CYXq6qWx08=
Subject key identifier:   F6:33:E1:5E:7B:FF:57:BA:6A:F4:E5:6B:4B:4A:41:EA:5C:9C:E6:FD
Authority key identifier: 1C:0A:99:50:1E:76:81:FA:3C:67:E1:FD:3D:73:51:28:A2:2C:63:17
Certificate issuer:       /CN=1c0a99501e7681fa3c67e1fd3d735128a22c6317
Certificate serial:       01901EC6FC7157B00BACFE1BC947C8C7E7DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
Manifest number:          0206
Signing time:             Sun 16 Jun 2024 02:01:15 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:15 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:15 +0000
Files and hashes:         1: HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl (hash: j7Uymi31+Cou3dlRmqyqX0WAX9C/QTfRN/3IYCIZzK0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:fc:71:57:b0:0b:ac:fe:1b:c9:47:c8:c7:e7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0a99501e7681fa3c67e1fd3d735128a22c6317
        Validity
            Not Before: Jun 16 02:01:15 2024 GMT
            Not After : Jun 17 02:01:15 2024 GMT
        Subject: CN=f633e15e7bff57ba6af4e56b4b4a41ea5c9ce6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:79:d1:5a:b9:76:83:6b:ee:08:05:d5:3b:
                    ac:24:63:0f:42:ba:82:fe:2a:f2:ec:0f:82:63:92:
                    d7:71:3d:07:a5:29:b6:2c:50:3f:c8:f5:fe:e0:42:
                    94:70:5e:ac:17:27:88:6d:73:3f:db:98:cd:a0:22:
                    bf:09:24:9f:b5:79:42:d3:7e:22:28:8c:3f:66:fe:
                    ba:76:f6:25:2d:21:45:d4:87:7d:79:35:1b:1e:ea:
                    7a:fe:f1:ed:3e:ae:5c:2a:3c:e3:11:d9:9c:63:4d:
                    df:bf:52:a8:5e:eb:dd:14:49:78:79:50:6d:05:9e:
                    87:c9:08:7c:1b:47:0c:63:64:4d:82:ac:f4:59:0f:
                    63:a3:12:91:96:64:28:0d:9a:b6:a4:36:cd:38:13:
                    38:b3:40:99:06:6d:86:3f:05:dd:05:2d:b3:52:8d:
                    fc:f8:a8:c3:2c:f7:57:3f:11:4d:28:c5:9d:1e:ef:
                    e7:34:e4:24:84:8e:e3:85:29:e5:e9:df:ef:68:08:
                    6c:cf:80:ae:6e:5e:4c:d8:15:98:b6:9a:ac:01:ec:
                    15:fd:b8:52:70:97:6b:2c:d7:52:6b:f6:4e:b0:c1:
                    19:ff:d8:cb:19:cf:a9:22:69:8f:96:8c:5c:ad:f3:
                    2e:56:1d:4f:d3:0a:95:a5:53:bb:fc:52:38:bf:d1:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:33:E1:5E:7B:FF:57:BA:6A:F4:E5:6B:4B:4A:41:EA:5C:9C:E6:FD
            X509v3 Authority Key Identifier:
                keyid:1C:0A:99:50:1E:76:81:FA:3C:67:E1:FD:3D:73:51:28:A2:2C:63:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:52:94:f0:b8:88:f0:3d:56:54:43:4a:a2:30:83:73:f0:
         56:10:21:02:ef:7e:1f:a3:c0:51:75:e9:12:72:7b:2e:03:2f:
         88:0b:11:26:cd:23:11:4a:ba:24:64:18:5d:a4:89:c4:23:27:
         46:8b:1d:f0:cc:fc:78:9c:63:e6:32:af:c0:f7:47:cc:6d:c5:
         c8:77:82:87:36:16:60:4b:4d:e3:25:cc:71:bc:18:7f:e9:cc:
         f0:07:6b:40:24:eb:11:1c:64:1e:50:43:a2:e2:b6:e2:65:e6:
         03:5a:4e:7f:c3:3e:99:b6:f0:41:41:b1:63:0f:65:f5:4a:1a:
         4d:5b:2b:cb:47:99:a3:66:86:34:50:63:00:1f:fb:93:91:f4:
         4f:55:ee:42:a3:a7:29:a9:c7:f7:2e:fa:c7:c8:1d:49:5e:c9:
         b7:2b:dc:5e:09:ef:17:e5:66:d4:51:85:ac:28:04:44:a8:0c:
         a5:74:9e:1e:85:ab:4b:27:3f:09:4f:c8:88:be:d0:cc:b5:de:
         09:96:b7:a1:d5:e2:89:81:19:d1:30:fe:9f:34:d4:e8:d1:cf:
         4b:82:8d:af:c7:59:4d:de:d3:85:40:eb:34:25:8f:b6:96:7a:
         ee:a7:55:ad:e2:cc:85:07:aa:9f:74:b8:f9:74:35:32:81:bc:
         1c:86:f8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:16:47 2024 by rpki-client on console-ams.rpki-client.org