Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File:                     u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier:          tso7B6YxeExXMRjpc/EbZQO69d/DSlnl9EEivNa7/Lg=
Subject key identifier:   08:F6:44:6C:FD:0F:E7:7E:EA:F4:C4:D7:27:FA:4B:ED:F7:FC:E3:98
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer:       /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial:       01901F34BFFAAAED6B4A17E56A8D71D1DAC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number:          C7
Signing time:             Sun 16 Jun 2024 04:01:08 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:08 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:08 +0000
Files and hashes:         1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: 2AJCxGE0rycS/FRqjA3Wk/TSCaKxjzB0ciFyAOk1vwI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:bf:fa:aa:ed:6b:4a:17:e5:6a:8d:71:d1:da:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
        Validity
            Not Before: Jun 16 04:01:08 2024 GMT
            Not After : Jun 17 04:01:08 2024 GMT
        Subject: CN=08f6446cfd0fe77eeaf4c4d727fa4bedf7fce398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6c:fa:38:bd:a9:f8:76:a2:f6:e7:41:e5:f7:
                    fe:8d:35:4b:33:7b:14:70:b2:14:25:00:bb:1b:3b:
                    4c:f7:db:14:08:2c:a4:aa:e0:21:04:07:dc:8c:38:
                    f8:ec:4c:44:3d:e2:8c:05:a5:43:ae:c7:12:e0:16:
                    c0:3d:59:16:ce:06:fe:45:14:f9:2d:6a:27:89:a8:
                    04:3d:47:bf:eb:0f:d5:5d:fe:15:f6:ad:7e:95:e2:
                    f7:cf:85:de:95:c6:9e:5a:72:d5:ec:2b:b4:1a:0b:
                    83:f9:ec:d6:a1:7a:f6:b6:dc:f6:97:44:46:3f:ef:
                    87:31:a0:de:be:7f:6c:f2:d9:a9:6c:8a:c2:83:b4:
                    53:f2:4d:43:b7:ed:fd:76:0d:ab:b6:81:6d:eb:cf:
                    ee:ee:a2:db:a9:f3:4c:24:8f:ff:c9:e3:2c:45:cd:
                    6b:0f:7f:93:bd:48:83:6c:e5:fd:28:bd:c9:b8:b3:
                    22:31:65:b4:8e:e0:b2:d0:8f:e5:5d:2b:77:fd:5d:
                    98:03:0d:c5:c9:20:11:87:a2:b1:86:4e:a0:6f:2a:
                    3f:0d:ae:6d:c4:7b:9e:23:e6:dd:21:40:ae:a5:69:
                    89:ea:93:69:ca:5b:43:43:53:c2:ae:e8:5c:32:0c:
                    ea:c2:5b:95:25:f8:56:8d:76:86:35:9b:3a:9b:4e:
                    b2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F6:44:6C:FD:0F:E7:7E:EA:F4:C4:D7:27:FA:4B:ED:F7:FC:E3:98
            X509v3 Authority Key Identifier:
                keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:44:71:bb:fa:dd:71:70:6f:6d:cd:08:d8:05:cc:42:4c:ff:
         68:ef:14:1b:da:6b:08:23:f2:57:bc:a8:32:87:f1:64:0b:9f:
         63:b4:d3:4d:27:a0:0c:d9:3f:b5:44:02:49:fc:7e:c2:0a:ee:
         0e:29:35:58:35:e5:ea:7b:ab:2d:61:bf:b9:83:75:39:7d:0d:
         b4:75:4b:93:fd:12:f7:5a:11:dd:29:bd:3b:0b:67:96:ad:2f:
         0b:21:2d:e0:30:1b:ab:9e:8c:e5:fe:1d:e0:37:6b:fd:71:a7:
         dc:13:96:e5:a8:5c:e8:2f:13:b2:85:d7:d3:fe:0a:2e:7f:67:
         5b:56:0d:91:31:87:c2:1a:ea:90:24:e8:aa:35:76:6f:51:3e:
         ea:7c:4c:16:f7:ad:7d:5b:9e:47:21:bb:df:ff:33:57:58:fe:
         c8:c1:57:68:45:3d:fb:9d:e9:36:4d:7c:2f:12:df:e5:42:e5:
         5f:a6:31:eb:0d:01:62:60:6f:bf:cb:74:11:87:17:b8:38:e1:
         ff:b8:35:26:80:5b:7d:a4:30:74:6c:4b:18:30:b1:bb:5b:b1:
         fc:c2:99:55:36:38:15:06:99:26:ef:56:6c:9b:78:83:f8:6f:
         5f:43:31:70:9e:43:4b:fa:89:bb:9c:c1:69:01:36:89:99:0c:
         1f:30:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:36:46 2024 by rpki-client on console-ams.rpki-client.org