Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
File:                     04BE23ZiygAUgai9swt6vRi86ao.mft (raw, json)
Hash identifier:          K1NKY+0AU9GgaJx2MdvsFmSPDr8qQmSRRZ6CqwfXtqM=
Subject key identifier:   9A:43:DA:3D:DF:FE:05:A1:AA:0C:91:AB:4F:5F:2C:CF:DE:BF:89:3F
Authority key identifier: D3:80:44:DB:76:62:CA:00:14:81:A8:BD:B3:0B:7A:BD:18:BC:E9:AA
Certificate issuer:       /CN=d38044db7662ca001481a8bdb30b7abd18bce9aa
Certificate serial:       01901CD85860A1718FB45D30F1451A54A658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
Manifest number:          0C88
Signing time:             Sat 15 Jun 2024 17:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:58 +0000
Files and hashes:         1: 04BE23ZiygAUgai9swt6vRi86ao.crl (hash: rNtM5wxq6V2ExCp33dygnfQhQlgdPF77r53NSDFAnPk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:58:60:a1:71:8f:b4:5d:30:f1:45:1a:54:a6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d38044db7662ca001481a8bdb30b7abd18bce9aa
        Validity
            Not Before: Jun 15 17:00:58 2024 GMT
            Not After : Jun 16 17:00:58 2024 GMT
        Subject: CN=9a43da3ddffe05a1aa0c91ab4f5f2ccfdebf893f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:e1:f5:91:bc:56:da:4a:ef:b3:c5:5d:cd:
                    12:68:1a:99:eb:41:11:d1:35:2d:33:83:7e:f1:9b:
                    22:23:48:85:20:a9:e1:8f:ad:57:d7:16:d0:a5:45:
                    94:c6:b2:36:c6:9d:33:e9:16:32:7e:03:e2:63:25:
                    45:96:dd:44:71:8d:bb:e0:9e:75:b1:be:d0:9a:b8:
                    cf:12:68:92:89:e5:5a:cd:91:93:e0:50:75:5e:b1:
                    2b:ec:d3:1d:cd:1b:9c:d0:92:a7:83:56:f4:07:69:
                    77:5c:78:71:a5:9a:f6:c8:6a:fe:7e:21:24:52:5b:
                    06:80:c3:79:d4:83:c9:4e:4f:d8:40:b8:98:5d:b5:
                    5a:6a:3b:b1:4d:47:fa:92:06:55:13:4d:1b:e3:4e:
                    23:02:a9:32:a0:f9:46:e5:29:52:d2:2c:e0:3f:4d:
                    70:bf:c8:9f:2b:ac:3c:22:2a:75:4a:35:d7:25:f7:
                    3a:ac:c5:ff:e8:7c:fa:85:be:42:28:1f:c5:8e:90:
                    73:b5:4f:74:f9:bf:3e:12:8c:ad:a9:41:49:8c:9c:
                    0f:bb:37:17:ba:03:5f:d6:5e:97:e8:b2:35:c8:b8:
                    70:19:2b:4c:95:b0:87:91:fe:c9:86:44:3c:22:2c:
                    5e:71:e4:a8:57:e6:58:68:67:be:f8:43:d7:df:ad:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:43:DA:3D:DF:FE:05:A1:AA:0C:91:AB:4F:5F:2C:CF:DE:BF:89:3F
            X509v3 Authority Key Identifier:
                keyid:D3:80:44:DB:76:62:CA:00:14:81:A8:BD:B3:0B:7A:BD:18:BC:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c1:bb:36:2e:bb:fa:fb:17:ca:0e:7b:aa:c9:b9:a0:3e:ab:
         ad:9f:95:49:0f:09:49:03:8c:eb:dc:63:18:65:c3:c9:42:14:
         92:d0:b4:e8:6a:f0:27:c6:c2:56:20:42:5f:52:c4:4f:da:c2:
         84:74:66:0c:ed:8f:7a:fc:75:7e:ea:8b:a5:c5:ae:ca:ae:8b:
         0a:2d:b8:f6:f7:26:5f:e1:84:45:74:d2:b6:74:fa:64:37:3b:
         c9:38:8f:aa:62:44:69:bf:5c:bc:5f:f4:c4:e8:bf:0f:65:c9:
         0a:db:0e:aa:00:60:45:37:ec:63:99:23:db:1e:1a:ca:5e:dc:
         de:f7:ce:f7:22:59:85:bc:36:10:2f:70:88:38:f4:45:42:f7:
         02:19:84:98:35:d5:03:5f:20:e6:0c:3f:16:1b:79:d5:fe:49:
         72:ab:11:d2:17:0c:c3:3b:c7:d4:26:85:af:60:a0:1f:75:18:
         49:91:e6:05:00:b3:48:91:35:12:ce:ab:78:bb:3d:39:b0:28:
         49:7c:98:e1:4d:40:89:cd:64:e0:d0:3e:72:0b:80:92:ba:b4:
         f9:54:02:bb:48:b3:2e:0d:82:00:35:74:8a:3a:53:dd:50:b8:
         e5:2b:87:aa:7c:aa:9c:d0:78:ff:66:1c:e7:49:1b:cd:70:2a:
         d8:49:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:41:19 2024 by rpki-client on console-fra.rpki-client.org