Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File:                     RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier:          Tk1MSlJicdbetF25/SX+m1XhfrR8YH7Ae+EPicogQtA=
Subject key identifier:   9D:9A:29:BB:21:28:48:51:0B:34:59:3A:62:F0:49:BE:FC:27:23:87
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer:       /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial:       01901D46082087ACB8F132F40EECEA159EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number:          067C
Signing time:             Sat 15 Jun 2024 19:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:47 +0000
Files and hashes:         1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: FYJBgF4qUNvr23Tj0VSdp4wOSPovxblTkEY+eCSEScE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:08:20:87:ac:b8:f1:32:f4:0e:ec:ea:15:9e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
        Validity
            Not Before: Jun 15 19:00:47 2024 GMT
            Not After : Jun 16 19:00:47 2024 GMT
        Subject: CN=9d9a29bb212848510b34593a62f049befc272387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:8f:89:46:4f:84:1c:79:74:b8:0f:b3:b4:
                    bc:f2:10:5a:97:3c:d6:0b:a9:0d:26:41:27:0a:38:
                    a7:7c:4c:50:0c:2b:d1:31:7c:1c:e2:43:4a:e2:33:
                    c6:ce:bf:46:7c:7c:a4:c9:bf:ed:55:e4:74:46:24:
                    d5:80:17:01:89:51:a7:0c:d7:91:17:39:80:14:54:
                    8d:3e:c8:22:59:ef:18:a7:54:bf:16:20:f3:ff:dc:
                    fa:1d:8c:de:f8:84:48:0f:3e:10:d3:a3:5c:ab:20:
                    b3:a2:e5:e5:b1:f7:83:2b:f2:cf:93:5f:7a:84:26:
                    2e:a6:35:cd:20:7b:26:b1:71:d6:44:52:1c:72:76:
                    66:d3:fe:ab:c3:3d:f3:96:b7:6e:e7:15:74:4f:1c:
                    32:4c:2c:54:b9:d1:5b:04:fa:ff:8c:3a:2b:b3:52:
                    ac:fb:7a:6c:09:46:1f:b7:f7:91:75:09:df:17:63:
                    fc:ad:67:b2:38:a3:ac:81:34:25:6f:20:3d:02:45:
                    36:91:54:2a:7c:5c:0f:77:30:bf:c3:bd:4c:f5:4e:
                    fa:68:ad:84:4f:c7:e7:ae:04:dd:78:f0:7f:2f:6c:
                    c2:88:7a:2e:82:a2:25:7e:70:df:45:b1:5a:82:47:
                    92:e2:76:52:f9:0d:86:8b:c8:b8:cd:ac:3e:c8:38:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9A:29:BB:21:28:48:51:0B:34:59:3A:62:F0:49:BE:FC:27:23:87
            X509v3 Authority Key Identifier:
                keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7f:b3:06:23:74:73:cc:0b:80:1a:50:2a:72:8c:01:8d:c7:
         e0:0d:f0:91:cb:50:c5:28:56:36:d6:15:93:09:88:68:df:50:
         92:2a:b7:7b:f5:1d:8e:57:64:c9:d8:9d:18:e7:38:44:58:d6:
         1f:57:72:49:84:79:f8:95:4e:57:15:79:4b:81:d6:88:cf:67:
         83:af:c2:89:62:22:97:69:7e:34:bd:d6:b8:ec:79:31:73:78:
         6a:3a:13:02:16:e6:b5:c0:b0:b2:cc:4e:e0:33:5d:66:0b:a8:
         fa:62:f8:28:22:dc:06:90:a6:ac:26:bd:ff:d0:2c:7e:c4:2a:
         91:40:6e:bc:a7:e0:e7:ed:d9:8c:09:dc:d4:3e:e0:7f:a7:96:
         5b:08:b7:a1:16:b4:af:9b:cc:fd:67:10:4e:60:93:03:db:0c:
         c5:70:ec:0d:0e:2f:52:a9:26:42:3c:69:c1:d1:51:2d:32:1c:
         09:05:9e:d2:37:13:fa:98:41:cb:81:31:fe:0f:21:ba:b7:96:
         ab:d3:a4:aa:8d:05:50:19:47:8b:f7:ff:ce:9b:d6:57:80:1d:
         23:df:b0:f4:c1:7f:8a:cf:1f:b9:ef:99:7f:3e:e6:66:75:cd:
         63:4d:f3:c9:c8:62:47:da:8e:cb:5a:52:3e:7a:f7:7e:46:f0:
         d9:f6:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:29 2024 by rpki-client on console-fra.rpki-client.org