Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/86f992-281c-47d4-b5e0-63dde47a74cd/1/7MVdf2onB-fnCp5FO0l9EIJbsmw.mft
File:                     7MVdf2onB-fnCp5FO0l9EIJbsmw.mft (raw, json)
Hash identifier:          ucwU2/tDEh8a5hP19Vc7LUUA09sbnTc0iXrOGlaQNms=
Subject key identifier:   80:DD:13:95:26:68:EA:1D:61:AD:76:71:71:E6:10:A0:A7:6B:92:20
Authority key identifier: EC:C5:5D:7F:6A:27:07:E7:E7:0A:9E:45:3B:49:7D:10:82:5B:B2:6C
Certificate issuer:       /CN=ecc55d7f6a2707e7e70a9e453b497d10825bb26c
Certificate serial:       0190332B6D1830F3D6C10408AD03B0744A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MVdf2onB-fnCp5FO0l9EIJbsmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/86f992-281c-47d4-b5e0-63dde47a74cd/1/7MVdf2onB-fnCp5FO0l9EIJbsmw.mft
Manifest number:          0323
Signing time:             Thu 20 Jun 2024 01:03:22 +0000
Manifest this update:     Thu 20 Jun 2024 01:03:22 +0000
Manifest next update:     Fri 21 Jun 2024 01:03:22 +0000
Files and hashes:         1: 7MVdf2onB-fnCp5FO0l9EIJbsmw.crl (hash: a4VPsO8cTN49vZKclBGsfHtvToJXNkDNEBcZRatzhr8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/86f992-281c-47d4-b5e0-63dde47a74cd/1/7MVdf2onB-fnCp5FO0l9EIJbsmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/86f992-281c-47d4-b5e0-63dde47a74cd/1/7MVdf2onB-fnCp5FO0l9EIJbsmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MVdf2onB-fnCp5FO0l9EIJbsmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 01:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:2b:6d:18:30:f3:d6:c1:04:08:ad:03:b0:74:4a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc55d7f6a2707e7e70a9e453b497d10825bb26c
        Validity
            Not Before: Jun 20 01:03:22 2024 GMT
            Not After : Jun 21 01:03:22 2024 GMT
        Subject: CN=80dd13952668ea1d61ad767171e610a0a76b9220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:d4:3d:45:3a:43:90:3c:f0:1b:fa:95:2c:
                    f7:f5:f3:5e:1c:46:97:d8:aa:8e:a2:6b:3a:6e:a2:
                    73:0a:c5:40:fc:e7:bb:9d:de:c1:35:d7:4d:a2:35:
                    b6:65:64:fc:41:4e:37:48:bf:8d:da:55:93:15:60:
                    6d:7d:fd:81:79:d2:da:da:22:dd:c0:87:51:95:98:
                    4a:af:3a:55:de:6a:ad:97:f5:a7:16:d2:08:3d:99:
                    2c:5b:f8:e9:b9:df:f6:2a:99:36:3a:ea:a3:1f:28:
                    8a:c3:ea:c1:dd:95:71:73:f1:d6:22:ae:a1:b2:dc:
                    c6:de:70:59:f3:5d:96:1f:9b:89:a9:da:e2:a0:0a:
                    93:8c:90:98:51:e0:de:59:78:fb:37:b1:ba:47:7b:
                    ed:4d:6e:c2:66:3b:5e:4e:b2:f5:a3:8a:1d:22:ea:
                    6c:08:16:48:63:2d:36:06:67:ef:7f:2c:ab:35:b1:
                    79:ae:aa:c7:1e:28:e8:e2:c3:05:c0:45:de:2f:6b:
                    3e:d7:71:8e:45:c8:59:1c:be:a4:62:0e:51:27:73:
                    53:6e:d4:37:b6:81:f3:3f:94:3c:7e:ee:ca:26:90:
                    2c:78:9d:48:f6:6a:77:a8:25:84:d2:10:7e:7e:5c:
                    6c:b9:b2:8c:05:e3:9b:bd:f3:78:14:55:c5:93:db:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DD:13:95:26:68:EA:1D:61:AD:76:71:71:E6:10:A0:A7:6B:92:20
            X509v3 Authority Key Identifier:
                keyid:EC:C5:5D:7F:6A:27:07:E7:E7:0A:9E:45:3B:49:7D:10:82:5B:B2:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MVdf2onB-fnCp5FO0l9EIJbsmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/86f992-281c-47d4-b5e0-63dde47a74cd/1/7MVdf2onB-fnCp5FO0l9EIJbsmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/86f992-281c-47d4-b5e0-63dde47a74cd/1/7MVdf2onB-fnCp5FO0l9EIJbsmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:5a:8a:38:64:83:55:3a:8c:81:6c:3b:be:36:3d:f0:5f:63:
         c9:6c:70:73:67:57:67:3d:93:7d:15:22:b1:2e:62:97:f9:6e:
         c3:6b:ca:ee:e2:d1:3c:28:22:45:26:56:67:b5:4f:a8:e7:6a:
         6a:c7:2c:5a:e3:96:f3:cd:72:ba:2a:22:78:be:0c:87:d9:06:
         c9:7f:ad:24:04:cd:bf:7c:aa:a7:93:4d:98:c2:56:4f:74:fa:
         52:ea:4f:7f:f8:db:26:b2:90:53:e9:ab:8b:20:f6:70:22:f1:
         cc:0d:9e:02:52:47:10:b8:b3:22:e3:a5:d5:da:97:a4:94:8a:
         df:80:78:27:f8:de:04:30:33:15:19:4b:14:01:92:7b:b0:6e:
         06:42:4a:e1:3a:35:b2:5f:4b:c0:a3:db:35:6e:10:e1:7b:ea:
         3f:ab:00:6c:73:cc:9b:dd:46:a3:41:e0:08:d2:4b:f5:f8:b7:
         e9:75:b2:7f:46:a5:c8:d5:a2:a3:82:11:46:a5:74:f6:d6:55:
         d5:1d:35:b6:35:60:15:3d:fe:86:f4:01:3d:c2:54:f0:c9:1e:
         59:19:97:73:73:94:51:fe:c1:d9:31:c0:86:1d:23:5d:9e:1a:
         15:25:e0:a9:12:72:2b:f1:ff:99:33:1f:f8:21:cc:28:6d:ee:
         e3:dd:5d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 09:48:11 2024 by rpki-client on console-fra.rpki-client.org