Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft
File:                     iX81rEgorqlfpdLYBNM6ewz_RYo.mft (raw, json)
Hash identifier:          pvAOn6+4ZQvDKqEQqJo9zlM9QD1kAhpv2MDwa5eG+b8=
Subject key identifier:   03:8D:15:10:C2:25:77:19:C5:00:99:0A:81:86:9F:3B:44:EA:75:BD
Authority key identifier: 89:7F:35:AC:48:28:AE:A9:5F:A5:D2:D8:04:D3:3A:7B:0C:FF:45:8A
Certificate issuer:       /CN=897f35ac4828aea95fa5d2d804d33a7b0cff458a
Certificate serial:       01901D7CE180717398588149E65F842AC559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iX81rEgorqlfpdLYBNM6ewz_RYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft
Manifest number:          87
Signing time:             Sat 15 Jun 2024 20:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:41 +0000
Files and hashes:         1: iX81rEgorqlfpdLYBNM6ewz_RYo.crl (hash: WUJFJVAvi7uFXiuJ69xN4EzVZavFPg8LRYBEzZpivTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iX81rEgorqlfpdLYBNM6ewz_RYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:e1:80:71:73:98:58:81:49:e6:5f:84:2a:c5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897f35ac4828aea95fa5d2d804d33a7b0cff458a
        Validity
            Not Before: Jun 15 20:00:41 2024 GMT
            Not After : Jun 16 20:00:41 2024 GMT
        Subject: CN=038d1510c2257719c500990a81869f3b44ea75bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:85:b3:94:c6:eb:82:29:ff:d2:63:5d:94:
                    d6:4b:ce:75:91:20:c9:a1:18:94:23:f1:20:1f:55:
                    8f:62:ef:7a:c4:c7:87:d1:aa:aa:dd:1c:60:5b:53:
                    76:14:93:72:a6:6e:32:69:58:54:d0:e4:8f:03:37:
                    3c:6b:6e:95:9c:1e:5b:5c:5d:5d:2f:0d:37:2e:b3:
                    fe:18:a3:0a:8f:2e:8c:19:87:18:50:15:f0:e3:eb:
                    a1:84:b0:38:28:4a:37:3a:41:f2:49:cb:ab:db:5e:
                    12:fd:9d:fd:c6:a3:4b:ab:f2:0c:0a:be:c8:f7:77:
                    9b:58:0b:fd:56:06:35:d9:e6:71:fa:fb:25:42:b2:
                    26:61:88:70:ab:9d:04:a8:ae:8e:75:e5:a2:4b:86:
                    68:50:27:e5:68:9c:ce:38:54:b7:5b:56:e5:1f:38:
                    c3:ba:bf:8a:be:f4:52:69:e2:db:43:cd:95:61:c7:
                    ef:1b:75:99:89:03:c7:d8:e3:7e:0b:fe:d6:96:c8:
                    a6:85:72:61:43:90:c3:eb:b4:da:93:1f:63:78:87:
                    7f:86:73:76:6e:87:1a:88:4b:9c:4c:65:de:0f:e8:
                    68:a9:91:10:97:03:ad:da:1e:e2:9e:ad:0b:d3:52:
                    b9:80:ae:04:8d:07:fa:d6:58:b0:60:d1:91:b9:59:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:15:10:C2:25:77:19:C5:00:99:0A:81:86:9F:3B:44:EA:75:BD
            X509v3 Authority Key Identifier:
                keyid:89:7F:35:AC:48:28:AE:A9:5F:A5:D2:D8:04:D3:3A:7B:0C:FF:45:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX81rEgorqlfpdLYBNM6ewz_RYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:43:ba:9e:6a:8d:08:56:e6:76:a8:f0:0c:fd:5a:29:06:49:
         4a:1b:e6:2c:4f:04:44:41:05:1b:4d:97:0a:e3:05:bb:26:25:
         ee:ed:98:16:22:8b:67:fc:ae:34:bd:1a:1b:bd:db:34:c6:8f:
         c3:1e:d1:d6:7b:48:f0:fb:25:7c:6f:54:9d:5e:9d:67:27:13:
         69:16:88:c2:bb:04:94:09:7a:09:de:53:71:a2:ca:df:21:9e:
         24:3f:19:a2:ec:76:d5:52:6e:b5:0e:7d:a0:08:e9:93:cb:23:
         e7:f7:bd:db:84:38:92:b1:4f:a7:ba:14:6f:16:9f:26:4f:4c:
         30:3f:8e:ff:da:0a:39:ca:a8:dd:41:05:fa:8e:38:0f:36:23:
         6f:fe:d5:39:d6:a6:75:b3:0a:da:16:d0:3a:9a:5e:33:52:c0:
         54:cc:9a:2b:d4:20:76:8d:a1:91:87:52:af:77:a8:5e:6d:c0:
         38:46:2f:ff:2b:81:4e:ea:79:0d:32:26:f3:f8:ec:76:91:57:
         75:5b:84:bc:cb:77:a8:a1:b5:ce:96:d8:fc:40:b8:dc:34:05:
         33:18:d2:cf:11:1e:2f:54:50:4d:b5:e7:8c:2f:3d:f7:22:07:
         0e:4e:c4:95:c3:8a:b7:45:4f:bf:4e:1a:cb:58:9b:73:4b:dc:
         a2:40:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:34:57 2024 by rpki-client on console-fra.rpki-client.org