Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
File:                     bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json)
Hash identifier:          FUsx/SZZ/YnVkns4hBi4KrttWSw/WF/da9mDY6gv4Kw=
Subject key identifier:   5B:57:C3:82:11:3D:61:9E:7E:76:7E:3F:E8:C2:05:99:4B:F8:1E:0C
Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
Certificate issuer:       /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Certificate serial:       01901BFCD9CA3FF2BA9292F2510B100DBA01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
Manifest number:          0764
Signing time:             Sat 15 Jun 2024 13:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:13 +0000
Files and hashes:         1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: dgwXz1T4lcwPNQz6HjL3r+k68aXN23gzqLgpFVYJGss=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:d9:ca:3f:f2:ba:92:92:f2:51:0b:10:0d:ba:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
        Validity
            Not Before: Jun 15 13:01:13 2024 GMT
            Not After : Jun 16 13:01:13 2024 GMT
        Subject: CN=5b57c382113d619e7e767e3fe8c205994bf81e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:97:30:52:e8:7d:75:6a:bb:9a:56:e6:df:b6:
                    53:74:4d:25:ed:09:b4:c4:5d:1e:75:d1:bd:6f:42:
                    15:ee:e9:37:54:05:31:5d:3e:7e:33:45:21:3a:d1:
                    22:78:01:63:f3:46:32:d2:9e:e4:8a:0a:20:6c:06:
                    23:32:25:08:7f:06:59:e7:a0:54:b6:2f:fa:72:cb:
                    5e:cf:ae:92:54:66:42:ce:3f:fb:5e:a0:d0:48:68:
                    89:ac:d7:67:b1:ba:15:d3:14:2f:4f:8c:70:b6:cc:
                    c3:b1:74:cd:d4:19:b8:50:9b:39:c1:18:b3:d1:c2:
                    09:b7:3c:89:3b:be:83:87:8a:2d:9d:45:92:17:33:
                    6d:8e:21:66:da:cd:4c:c5:d6:c6:ba:ad:86:2b:7f:
                    fe:25:55:e6:84:0e:ba:fe:3d:68:b4:f9:c6:00:95:
                    3f:76:a0:38:89:eb:9c:76:0b:6e:1e:46:b9:cb:34:
                    4f:69:e8:2c:97:a7:48:12:e0:f2:e7:29:a3:47:e2:
                    d3:8e:d1:f4:73:90:58:41:96:e0:5e:15:0e:60:7a:
                    aa:87:d3:37:a5:27:b6:5c:f9:85:11:f2:1b:8d:bd:
                    42:82:1f:1b:bc:41:fc:0d:2a:17:61:38:8e:89:71:
                    b1:16:05:94:3a:9a:54:22:a4:7c:2c:fc:5e:58:7c:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:57:C3:82:11:3D:61:9E:7E:76:7E:3F:E8:C2:05:99:4B:F8:1E:0C
            X509v3 Authority Key Identifier:
                keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b9:77:70:be:b8:f1:93:3f:08:3a:c9:67:5e:82:31:3e:03:
         8d:4f:dc:38:26:4c:4f:b7:f4:12:15:60:3d:7f:aa:34:ef:23:
         77:42:3b:d1:35:52:52:b6:01:d4:fd:ec:d9:93:f1:92:8e:b9:
         cf:1a:ab:b3:93:51:e5:75:cf:58:48:ae:71:4c:66:67:30:29:
         12:8b:17:07:d1:19:3c:73:2d:94:e9:a9:6a:6b:34:21:36:60:
         ca:b6:fe:70:7f:2d:04:3d:26:aa:a4:ab:2f:59:3d:88:4f:21:
         1d:c8:0f:8f:25:2c:2d:a5:dd:7c:18:e3:40:26:d6:76:8f:c0:
         68:19:45:eb:d4:66:76:c2:f5:a6:fa:17:cc:7a:bf:fc:df:6c:
         41:59:61:f2:c6:75:01:9e:fd:d4:07:82:74:3f:5b:8c:5e:30:
         eb:01:e8:cb:ee:06:7e:35:12:58:17:e7:7f:06:42:85:e4:c0:
         38:ca:6d:5f:09:e8:f7:c0:f2:3a:b1:13:75:10:c4:27:16:15:
         8d:c4:f8:a3:9c:53:f4:57:f6:8b:a9:fc:2d:0a:f4:4b:9c:27:
         cd:81:be:2e:6e:1e:23:69:fc:81:ef:14:cc:73:fa:b8:de:b4:
         ee:41:eb:12:74:cd:19:88:f7:09:e6:0b:6e:42:fa:5b:4b:08:
         2f:76:58:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:35:31 2024 by rpki-client on console-fra.rpki-client.org