Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File:                     5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier:          k1hoW/+0wELs27GpQM86tCYZ9OaU7F+EaqvLxssj+mo=
Subject key identifier:   8D:27:99:A7:DA:E4:47:8D:41:D2:16:B7:5E:14:B9:4D:4D:37:B0:04
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer:       /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial:       019043E58F4A8381025C2F1B2D01F4C7960C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number:          08B9
Signing time:             Sun 23 Jun 2024 07:00:36 +0000
Manifest this update:     Sun 23 Jun 2024 07:00:36 +0000
Manifest next update:     Mon 24 Jun 2024 07:00:36 +0000
Files and hashes:         1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: B8py/sVc9QixY9YK5evXFNQvpGmni3z8+XU7238Ajlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:43:e5:8f:4a:83:81:02:5c:2f:1b:2d:01:f4:c7:96:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
        Validity
            Not Before: Jun 23 07:00:36 2024 GMT
            Not After : Jun 24 07:00:36 2024 GMT
        Subject: CN=8d2799a7dae4478d41d216b75e14b94d4d37b004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:29:2f:46:c1:31:93:ef:75:e6:a9:37:f5:
                    1e:be:fe:14:04:1a:2c:b2:83:a6:4d:e3:84:52:f2:
                    f8:cf:bf:85:5d:96:3c:2e:d4:7d:b4:0a:bf:a5:c2:
                    6e:47:17:92:cd:8f:d3:66:70:0b:f0:4c:44:b0:15:
                    13:4b:64:c8:40:68:e5:13:76:d8:09:da:87:22:9f:
                    d6:40:34:09:40:4a:cc:fb:b0:f0:7e:5c:b7:1b:b5:
                    a4:aa:18:47:83:84:b0:f1:ae:27:0e:54:5c:59:05:
                    c6:56:13:9e:7a:7b:5a:30:b4:95:80:e9:dc:f6:a4:
                    d3:e1:2d:b9:55:76:32:0e:04:ef:17:4e:02:25:89:
                    11:b1:04:25:e3:24:83:0e:ab:9f:0b:ec:00:92:c2:
                    51:8e:82:c3:f7:b3:f5:1e:76:10:17:5a:3e:0e:0f:
                    f9:2a:c6:76:db:d0:10:13:8b:7f:66:68:da:93:97:
                    c9:30:f4:c4:df:a5:b8:4f:4a:50:ec:a6:46:89:14:
                    01:de:e1:ea:08:72:c5:67:2b:71:bd:63:71:71:76:
                    56:18:46:51:44:cf:6d:f0:93:0c:44:f6:c6:9b:19:
                    24:df:76:ef:79:f1:25:20:b5:cb:49:e4:aa:c2:1f:
                    df:eb:20:55:ed:53:cf:73:ab:6d:2c:37:9a:41:2d:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:27:99:A7:DA:E4:47:8D:41:D2:16:B7:5E:14:B9:4D:4D:37:B0:04
            X509v3 Authority Key Identifier:
                keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:cc:a6:d4:ac:fc:82:02:e7:32:85:32:5d:74:83:d6:67:
         0e:b9:23:2e:44:4d:43:38:89:8a:49:63:f1:0d:96:f1:ce:71:
         34:f0:6e:db:78:6d:00:9a:2e:78:99:61:03:2c:ed:a7:10:fb:
         73:d2:28:2f:12:3b:d2:c9:7e:e5:64:a6:28:b4:4e:f7:3c:a7:
         16:66:ac:7d:68:65:a3:3c:70:0a:48:1e:19:d8:a2:c4:59:55:
         42:21:3a:ca:57:f2:de:8b:a1:d5:83:c4:73:7f:6a:2e:56:fe:
         89:af:54:06:17:a8:a1:2a:fd:a3:a9:c4:40:ee:66:b7:af:c7:
         38:ad:a4:d3:41:c2:76:6f:60:1f:3a:2c:04:a0:ff:fc:ad:94:
         50:7a:3c:40:c8:50:70:0b:8e:20:79:6a:8d:7e:93:24:42:a7:
         9e:93:b1:3c:7e:3e:3a:7b:bf:12:87:22:62:0a:e2:7b:43:7f:
         23:06:51:a0:91:fc:3d:a0:de:52:32:aa:c0:e3:c0:05:0e:78:
         48:1d:28:9a:46:84:f0:b5:2f:f4:96:2c:96:39:1e:f4:2e:f7:
         c0:f5:9e:d8:01:cb:59:bb:62:00:fd:6b:0d:85:63:c3:c3:c9:
         19:16:67:ac:fd:37:53:e2:e0:a1:45:e6:4c:f1:19:3f:68:e1:
         7c:a9:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 14:48:55 2024 by rpki-client on console-ams.rpki-client.org