Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
File:                     aXC3r07RGKBaFTFefYuUY0yf6iA.mft (raw, json)
Hash identifier:          gMJfzRfi78oukVVBMcehvaviwLHyNbZG+Nvn1ui98hM=
Subject key identifier:   86:B0:93:75:AC:74:38:56:4B:8D:F0:6E:EE:5A:F9:31:C7:1C:FF:B6
Authority key identifier: 69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
Certificate issuer:       /CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Certificate serial:       01901D467EBBDAEB8F46BB58CA73FFCF160B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
Manifest number:          0750
Signing time:             Sat 15 Jun 2024 19:01:17 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:17 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:17 +0000
Files and hashes:         1: aXC3r07RGKBaFTFefYuUY0yf6iA.crl (hash: Y6gVMO7j0TXh1uX5hEdnktQkRAbL6HUjmUtsfbN5Rd0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:7e:bb:da:eb:8f:46:bb:58:ca:73:ff:cf:16:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
        Validity
            Not Before: Jun 15 19:01:17 2024 GMT
            Not After : Jun 16 19:01:17 2024 GMT
        Subject: CN=86b09375ac7438564b8df06eee5af931c71cffb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:be:28:35:cb:0f:2e:d6:51:56:eb:c4:d4:
                    9d:dd:de:5d:9b:d0:85:cc:74:90:c6:6b:8e:55:d3:
                    01:44:c5:91:65:22:44:08:54:05:a2:c3:28:35:cd:
                    fc:9c:21:ea:34:65:03:7d:2b:19:14:69:5d:5c:04:
                    ca:1b:9a:75:ef:ae:e0:66:e7:b5:8e:0d:c6:fc:bf:
                    15:81:04:3d:35:2b:05:83:97:19:75:a1:e9:e3:79:
                    4d:0e:18:9a:b6:77:4d:db:0b:95:08:6e:3d:9c:81:
                    bc:e7:b1:72:29:52:e8:a5:1d:f5:19:e8:16:fc:5e:
                    6e:87:5e:9e:9b:e8:47:99:83:6f:4b:dc:31:4f:14:
                    68:6c:cb:ab:7c:68:c4:6a:67:bc:4f:b3:b9:68:d2:
                    ed:06:c0:6e:64:50:34:14:35:21:50:c7:2c:fa:13:
                    fc:23:74:9c:0f:9c:74:d7:93:ff:be:30:01:3f:9c:
                    ea:32:d2:e8:f6:9f:c3:ef:ed:6c:3d:30:5d:d5:d3:
                    35:fe:66:21:84:ca:1b:29:2f:2e:d1:33:44:0f:77:
                    cf:ca:f1:67:1c:c1:03:ae:37:42:99:9c:94:25:a5:
                    14:c2:cf:ad:8f:93:99:f5:01:ab:97:28:6d:f9:dc:
                    a3:43:65:27:60:72:c1:07:af:6b:97:0f:e2:de:6c:
                    d1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B0:93:75:AC:74:38:56:4B:8D:F0:6E:EE:5A:F9:31:C7:1C:FF:B6
            X509v3 Authority Key Identifier:
                keyid:69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:6f:23:5a:dc:0b:79:51:6d:f1:ad:66:ba:4a:ff:fd:92:7f:
         4b:4e:b1:1a:cd:ce:1a:0f:8c:22:cb:2e:58:a0:dd:3f:6f:c8:
         d7:3a:12:aa:4c:33:ba:b4:c2:b8:9a:d6:92:97:0f:d2:81:8e:
         e5:da:7a:d8:d1:bd:69:48:36:7b:b8:8a:48:7c:ab:27:3d:de:
         56:c2:98:fb:ed:22:a0:8e:ff:b7:b3:34:b4:1e:6c:8d:ce:ac:
         42:fd:48:8e:dc:1c:e2:b7:fb:f0:63:25:78:e2:63:03:35:40:
         3c:b9:ce:60:8e:d9:4b:d5:31:13:a7:c6:b1:58:1b:cc:d6:3c:
         f4:88:27:2b:a7:bd:8b:6a:4d:75:c5:89:5f:ad:fe:7f:2a:20:
         eb:29:11:2f:c4:0b:6a:54:77:e5:97:2a:b1:c3:4d:08:23:d0:
         21:63:bb:fa:31:7e:0d:33:9c:cc:33:81:14:97:e0:3c:90:49:
         24:fd:17:9d:21:2a:90:d3:cb:38:81:71:8f:b4:31:84:86:37:
         89:9f:1a:a4:92:44:28:23:8b:31:16:36:dd:e9:ab:d6:0b:73:
         b7:c8:e9:f0:35:04:b6:1c:b1:9e:e2:68:a3:e9:35:a3:f8:48:
         10:f5:c1:11:0c:83:a7:10:07:ef:3d:0d:0d:22:07:08:ab:bb:
         32:c1:cc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:29:07 2024 by rpki-client on console-ams.rpki-client.org