Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
File:                     4CzXYQ92Hg7SUq57ufMPHisXtec.mft (raw, json)
Hash identifier:          UFgk7CxAkCb3EfXLKsw4E0NoRnOjnF8ZdZA/q3w2hrk=
Subject key identifier:   6F:FD:8E:AA:01:09:31:AE:39:94:B1:89:B9:9F:88:EA:7B:47:8F:6C
Authority key identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
Certificate issuer:       /CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Certificate serial:       01901E589020A9405165BF3CCC1F955A2BE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
Manifest number:          0E57
Signing time:             Sun 16 Jun 2024 00:00:38 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:38 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:38 +0000
Files and hashes:         1: 4CzXYQ92Hg7SUq57ufMPHisXtec.crl (hash: paWyoCgVKr8PpbVy0lz8Y/PzNPry83ce23gJ7vHDL6g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:90:20:a9:40:51:65:bf:3c:cc:1f:95:5a:2b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
        Validity
            Not Before: Jun 16 00:00:38 2024 GMT
            Not After : Jun 17 00:00:38 2024 GMT
        Subject: CN=6ffd8eaa010931ae3994b189b99f88ea7b478f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:bf:97:f2:9d:f7:3f:43:ee:5b:d9:24:fb:
                    51:b1:36:d1:26:a4:92:27:eb:8c:68:48:ad:b6:82:
                    2d:0e:6c:68:81:6d:95:6c:1b:8c:b6:09:ea:a4:6e:
                    87:83:42:ae:5c:ed:62:42:89:1f:e8:d4:62:a0:98:
                    08:0e:44:8e:a9:21:6e:c4:72:8c:08:7f:4b:76:56:
                    54:0d:88:f9:9a:af:52:24:12:b5:62:57:c2:b5:cd:
                    92:67:94:56:0e:41:7e:ba:16:2f:31:4c:66:06:f7:
                    04:ec:02:9d:88:37:f6:bc:a2:86:77:af:b9:69:32:
                    aa:af:54:ae:47:8d:cb:c9:ef:1d:02:8b:3f:f4:52:
                    fc:75:6e:e5:a2:99:53:81:f2:7a:99:c1:b6:66:cd:
                    78:cc:3f:03:d3:ce:dc:21:66:7d:59:e7:7f:ab:cf:
                    bd:9f:c4:71:80:fc:1a:9c:27:17:f2:22:46:5f:5c:
                    8f:3b:a8:79:9f:73:d7:bb:97:f9:be:51:4a:9e:ad:
                    f1:cc:2b:54:08:7d:14:b0:ce:fc:ab:1c:d1:48:6c:
                    bc:b9:88:42:16:d7:66:34:4a:1e:c1:11:04:b6:69:
                    87:d9:79:20:99:f3:b9:9b:02:be:37:5a:05:b7:cb:
                    7c:85:5b:96:aa:1b:9e:54:d4:91:74:81:a3:96:b1:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FD:8E:AA:01:09:31:AE:39:94:B1:89:B9:9F:88:EA:7B:47:8F:6C
            X509v3 Authority Key Identifier:
                keyid:E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:bd:a9:9f:d9:09:61:79:c4:aa:2a:49:98:fd:6e:92:9a:22:
         43:9c:e2:b8:34:33:b4:75:16:34:bc:9b:cf:4b:00:79:cb:ba:
         52:91:3b:19:37:fa:ae:8a:59:77:fd:d5:b8:4a:f0:5e:75:3c:
         ab:db:e4:91:6b:0e:05:bc:69:6a:d5:16:28:08:e1:f5:70:2d:
         a8:39:da:8c:6c:6d:19:0c:9e:7e:03:6b:19:d6:f7:44:af:be:
         53:51:95:a3:ad:bf:09:e5:d8:b1:5d:83:49:2f:61:9c:84:59:
         99:f8:52:49:76:d6:7e:f5:d7:6e:d3:9b:a3:c1:d1:93:6b:9a:
         f2:1d:55:7e:1b:c9:14:84:ea:62:e0:d8:c8:3d:41:6a:2d:76:
         df:07:48:a3:a5:bb:16:f1:58:9d:a3:28:a1:30:3c:2b:a2:cd:
         d8:63:3f:08:52:b4:9e:84:09:f8:7b:a5:60:7d:d5:17:3a:37:
         12:00:a7:3b:db:51:b2:78:4e:df:23:05:20:9d:a9:78:c9:da:
         d2:91:6f:69:f2:6e:06:3e:93:5a:5d:a0:3f:05:37:55:03:cc:
         ae:e7:f2:a3:f2:5f:21:51:39:c5:85:35:86:64:c9:52:ce:45:
         83:9a:aa:54:c2:d6:43:f7:b2:66:86:d0:d5:5d:7e:93:72:d4:
         52:ed:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:40 2024 by rpki-client on console-fra.rpki-client.org