Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
File:                     fUQxNNzRasFvbNIJ-hx_lYym234.mft (raw, json)
Hash identifier:          qg7QVq3H9T8mnfhaJLcSp1DtsRcFG4kh3HLZ5U74qlE=
Subject key identifier:   52:79:60:6D:8E:61:B4:9F:9D:ED:04:B8:32:82:42:5B:3A:C9:07:B2
Authority key identifier: 7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E
Certificate issuer:       /CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
Certificate serial:       01901E5940E3D97BC6E06E2564AEB2E2A1D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
Manifest number:          11C2
Signing time:             Sun 16 Jun 2024 00:01:24 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:24 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:24 +0000
Files and hashes:         1: fUQxNNzRasFvbNIJ-hx_lYym234.crl (hash: hf83C+zX1Cqoe6Ehu/4ugfgNXwu0KsRTyv6QqtzOS/Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:40:e3:d9:7b:c6:e0:6e:25:64:ae:b2:e2:a1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d443134dcd16ac16f6cd209fa1c7f958ca6db7e
        Validity
            Not Before: Jun 16 00:01:24 2024 GMT
            Not After : Jun 17 00:01:24 2024 GMT
        Subject: CN=5279606d8e61b49f9ded04b83282425b3ac907b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:34:f7:11:0f:92:73:d0:b8:16:c0:64:37:
                    97:35:15:64:79:b4:e5:9f:d7:cb:82:40:54:cf:6c:
                    b4:30:28:9a:4b:0c:d0:a3:04:a2:39:64:55:56:4a:
                    09:d1:e9:d4:da:ab:27:5d:30:27:a5:41:b9:9a:e3:
                    6d:aa:d9:74:70:13:97:23:e1:95:b7:4e:3b:da:44:
                    4a:7c:0c:07:a2:d0:85:e1:5c:2a:ca:be:80:12:d8:
                    12:10:d9:f8:6f:36:b1:56:2a:cd:e1:c7:e3:da:41:
                    07:c5:6e:e2:f9:ec:c2:2c:2d:0b:5d:e6:8f:c9:c7:
                    67:02:ab:23:6c:d7:65:52:0f:f1:90:61:56:79:6e:
                    b1:d8:a0:7c:bd:00:e9:0a:16:16:28:ff:d3:79:f7:
                    ff:e3:e1:45:3f:e9:e8:a0:ee:1c:52:dd:1c:ef:b9:
                    35:f0:6f:d7:6b:6e:c5:00:a3:85:59:c3:5d:4e:93:
                    49:d7:51:8b:14:eb:1f:ec:fe:bd:fd:34:db:e3:be:
                    60:2b:3b:ca:5a:7d:34:79:c8:1e:79:13:95:65:e9:
                    4c:3a:a7:1c:bc:95:f3:56:58:d1:b4:98:95:46:e2:
                    1a:9d:ac:f7:2c:9b:22:36:53:dd:da:3d:5b:d3:cf:
                    33:94:39:75:e8:84:1f:52:9b:02:97:7d:7c:2b:69:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:79:60:6D:8E:61:B4:9F:9D:ED:04:B8:32:82:42:5B:3A:C9:07:B2
            X509v3 Authority Key Identifier:
                keyid:7D:44:31:34:DC:D1:6A:C1:6F:6C:D2:09:FA:1C:7F:95:8C:A6:DB:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUQxNNzRasFvbNIJ-hx_lYym234.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/915152-5c90-4544-8b7c-9c193e78ec18/1/fUQxNNzRasFvbNIJ-hx_lYym234.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:bd:6a:9e:0c:37:87:ba:0e:fc:e1:f2:69:ca:67:f8:ee:e2:
         25:f9:e9:99:b9:83:f9:08:e3:13:87:92:e7:32:91:e1:1a:0a:
         ea:c8:53:56:3a:94:c7:8a:16:e7:19:27:38:84:9b:94:86:7b:
         06:6e:a0:e3:f9:66:3d:c6:70:78:1b:e2:3b:d7:54:00:16:14:
         50:24:74:1b:52:0d:7f:75:68:54:91:e2:01:7f:74:34:60:51:
         f5:b2:52:0e:ed:fd:cf:bb:0d:09:70:b6:42:66:bb:e9:a8:a2:
         2b:d1:35:8a:d1:52:88:45:2c:77:43:a3:eb:71:9f:e4:2d:68:
         af:f4:33:53:29:28:76:74:46:63:7a:41:13:a8:d0:c1:8f:e7:
         21:a5:e3:96:f7:67:53:1e:e2:91:44:d4:a1:b2:aa:78:9e:90:
         26:81:89:c0:bd:c5:ac:b8:c8:d4:3f:2f:37:65:94:7f:ec:19:
         f3:eb:b7:f0:a1:a4:df:64:1f:a4:51:dd:7c:2e:84:46:c1:d1:
         25:8a:ad:90:58:25:6c:eb:42:f4:1a:20:87:d0:1b:d4:6d:ae:
         c9:a7:48:39:38:39:09:ce:f7:80:9c:a6:24:20:d2:3c:8c:6c:
         be:df:63:57:bf:2b:e9:63:56:3d:77:43:45:b9:49:0e:60:c5:
         d0:c7:41:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:30 2024 by rpki-client on console-fra.rpki-client.org