Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
File:                     MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft (raw, json)
Hash identifier:          X0Nn9Uv3PSZroTlMLYjLL9ViDmNkAFqV6oT4xIIQ3pI=
Subject key identifier:   5A:92:A7:9D:7D:B8:13:CB:42:D1:EF:F6:82:FC:26:2B:4E:51:DC:09
Authority key identifier: 32:A3:B1:F1:B5:91:26:86:97:C1:04:4F:B9:75:84:53:9A:A7:86:85
Certificate issuer:       /CN=32a3b1f1b591268697c1044fb97584539aa78685
Certificate serial:       01903EC250D2C30C8913D352D66A989009B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MqOx8bWRJoaXwQRPuXWEU5qnhoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
Manifest number:          0C8B
Signing time:             Sat 22 Jun 2024 07:04:00 +0000
Manifest this update:     Sat 22 Jun 2024 07:04:00 +0000
Manifest next update:     Sun 23 Jun 2024 07:04:00 +0000
Files and hashes:         1: MqOx8bWRJoaXwQRPuXWEU5qnhoU.crl (hash: X4QoFrcmnkR1n46evy1o4plk4eRAEk8v9ZCivbp+nXs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MqOx8bWRJoaXwQRPuXWEU5qnhoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:c2:50:d2:c3:0c:89:13:d3:52:d6:6a:98:90:09:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32a3b1f1b591268697c1044fb97584539aa78685
        Validity
            Not Before: Jun 22 07:04:00 2024 GMT
            Not After : Jun 23 07:04:00 2024 GMT
        Subject: CN=5a92a79d7db813cb42d1eff682fc262b4e51dc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:71:58:ce:a9:3b:99:07:95:bb:97:fe:0e:
                    c5:75:a8:eb:44:d8:c5:c6:84:f4:b2:40:f9:91:b9:
                    b2:04:dc:3c:62:c8:6d:7a:b0:d7:5e:9f:da:83:a2:
                    70:06:2d:a5:28:1a:c6:3d:d8:1f:c1:a2:c1:8c:5a:
                    30:a9:ef:05:1d:2a:7b:3a:d3:f3:41:55:eb:c3:98:
                    5d:2f:52:63:29:b4:ae:25:a2:7e:7f:9f:6a:43:c8:
                    fa:18:d0:60:62:e2:0a:f2:8e:c1:a0:4f:a6:99:ae:
                    de:fe:5c:ad:bd:84:09:79:11:5c:f5:0c:a8:53:a2:
                    fc:33:c9:64:a4:00:bb:b4:03:78:95:ae:f5:30:de:
                    e5:96:7a:ea:ab:d1:8c:55:ae:e8:b3:40:48:1e:b5:
                    1b:4f:33:1b:cf:2c:a2:26:51:18:5e:c6:2d:d6:3e:
                    94:3e:d2:99:ed:33:bf:2a:d3:d6:90:38:18:62:d6:
                    2d:5d:a0:97:1c:2e:5b:80:3a:9f:cf:bc:a7:1d:3c:
                    3e:6e:3e:5e:e8:2b:10:b1:79:28:e0:a3:32:a9:1f:
                    ca:85:e6:67:e9:8a:f8:60:ac:f9:24:c4:0f:39:a5:
                    c6:f5:e3:d0:af:a7:65:72:05:d2:d0:05:c7:a2:b0:
                    85:cc:e8:9f:7d:ea:e2:87:c0:7d:d9:67:a8:40:f2:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:92:A7:9D:7D:B8:13:CB:42:D1:EF:F6:82:FC:26:2B:4E:51:DC:09
            X509v3 Authority Key Identifier:
                keyid:32:A3:B1:F1:B5:91:26:86:97:C1:04:4F:B9:75:84:53:9A:A7:86:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqOx8bWRJoaXwQRPuXWEU5qnhoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1d:80:ed:7d:fd:9c:76:0d:5c:e8:ba:66:49:ea:b1:11:bf:
         2d:8d:ae:1f:5b:95:fc:4c:68:bb:89:74:3a:50:a0:38:95:cf:
         1f:e5:6a:be:bf:03:8f:b1:8f:34:76:e8:43:74:bb:cd:43:22:
         d6:af:75:c5:96:5c:73:5b:37:28:cf:97:a0:7e:88:3f:04:f4:
         ed:33:92:21:de:ea:fa:ea:f3:49:6a:8e:d9:2d:27:69:44:cf:
         62:91:ed:84:8e:35:4e:ac:ce:41:0f:2b:0f:5d:93:58:7f:56:
         ac:5e:4b:dd:d5:ae:5e:0a:37:46:cb:c0:9f:f4:8f:09:1a:21:
         c8:42:d6:f1:2c:e3:ca:c4:cb:2b:ee:87:03:08:45:36:e2:6d:
         f9:e6:59:c4:06:ff:dc:d4:cc:03:37:09:db:ad:0b:ab:45:d5:
         c7:70:4e:f6:42:46:71:59:52:64:a7:9a:d1:5d:a1:04:d1:5b:
         39:bb:4f:71:43:62:d3:c3:62:d3:41:dc:8f:63:18:c8:53:a9:
         7d:1b:c6:a1:15:92:40:d3:ff:e9:5d:58:55:3b:e2:a2:24:ff:
         a2:cd:d2:2b:99:19:9c:1d:8a:35:13:81:81:8e:a5:a2:84:65:
         b0:f9:df:5d:86:2d:f3:ac:bf:3f:07:6f:b3:c1:07:65:94:d3:
         cc:cc:1b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:58:54 2024 by rpki-client on console-fra.rpki-client.org