Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.mft
File:                     SHcGwrHYON95a_g_qn176rxcdvg.mft (raw, json)
Hash identifier:          1KnOOa+D4yPbzOuBvNl7OddApOseoj/KrOwBBUDDVH0=
Subject key identifier:   24:C9:9A:FE:EF:0C:D0:FC:0C:8E:66:EA:C0:85:9F:96:4B:72:12:0C
Authority key identifier: 48:77:06:C2:B1:D8:38:DF:79:6B:F8:3F:AA:7D:7B:EA:BC:5C:76:F8
Certificate issuer:       /CN=487706c2b1d838df796bf83faa7d7beabc5c76f8
Certificate serial:       019037AAB56324B2544CCAFB9CC4ED0341B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SHcGwrHYON95a_g_qn176rxcdvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.mft
Manifest number:          09BB
Signing time:             Thu 20 Jun 2024 22:00:52 +0000
Manifest this update:     Thu 20 Jun 2024 22:00:52 +0000
Manifest next update:     Fri 21 Jun 2024 22:00:52 +0000
Files and hashes:         1: SHcGwrHYON95a_g_qn176rxcdvg.crl (hash: yQ5tPzsYsp90bufVtro5ufqPVtonlYX/KZ9MiHBxsbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SHcGwrHYON95a_g_qn176rxcdvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:aa:b5:63:24:b2:54:4c:ca:fb:9c:c4:ed:03:41:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487706c2b1d838df796bf83faa7d7beabc5c76f8
        Validity
            Not Before: Jun 20 22:00:52 2024 GMT
            Not After : Jun 21 22:00:52 2024 GMT
        Subject: CN=24c99afeef0cd0fc0c8e66eac0859f964b72120c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:43:36:2b:ff:8f:0e:6b:ec:bf:7e:6b:32:92:
                    30:ef:03:8f:34:51:32:54:67:8d:36:eb:ea:da:b8:
                    ba:e4:9c:f7:e0:f1:93:78:92:b2:cb:fc:03:fb:2b:
                    d8:4b:f7:89:d1:37:49:ab:d6:25:b7:33:c1:ff:97:
                    5f:13:64:05:ce:6f:f0:4e:49:3c:f7:84:c8:fd:2d:
                    52:dc:e3:99:5b:3a:3d:65:c8:80:c4:f8:98:fd:e8:
                    ba:3e:ac:9d:d9:a8:da:1e:a4:69:39:af:6a:82:d2:
                    14:7c:de:2a:43:ac:2a:f9:7e:e6:04:f3:0a:ee:87:
                    4c:b6:28:fc:f2:ca:a8:9e:a3:81:fc:23:3b:68:b4:
                    c7:6e:a1:b9:b4:71:7f:6f:f1:44:6c:c7:f9:28:94:
                    bb:9e:b0:fd:f5:e7:41:2f:2f:3a:48:69:c2:66:53:
                    3a:ee:f3:fc:f5:ce:a7:a9:d3:34:2e:b0:f6:e4:36:
                    de:d4:52:e0:ab:4d:cf:c6:8c:f0:fd:9d:db:b4:85:
                    e4:94:79:d6:51:b0:b0:73:de:71:45:20:e8:a9:3e:
                    0e:81:7e:e8:d7:1d:70:e5:c1:ce:70:e6:11:4a:1f:
                    48:20:53:13:89:b1:e1:35:4b:3e:21:d7:8c:b5:00:
                    6b:ac:fc:c7:60:77:65:90:7e:20:16:e5:f8:8f:46:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C9:9A:FE:EF:0C:D0:FC:0C:8E:66:EA:C0:85:9F:96:4B:72:12:0C
            X509v3 Authority Key Identifier:
                keyid:48:77:06:C2:B1:D8:38:DF:79:6B:F8:3F:AA:7D:7B:EA:BC:5C:76:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHcGwrHYON95a_g_qn176rxcdvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:95:3c:14:74:5c:7c:4c:d7:57:f5:57:83:87:f3:98:dc:08:
         7d:2d:44:2d:e2:db:72:d8:df:9e:56:82:aa:a9:90:0a:2c:b9:
         7e:d9:8e:d0:59:ae:7c:d2:6b:88:98:d6:86:63:6d:60:4f:49:
         12:42:1b:cb:e7:5b:33:eb:da:35:55:48:3b:7a:00:09:65:92:
         7a:6c:dd:26:f8:18:f2:05:cf:99:a1:65:1e:49:72:55:70:72:
         7c:81:1a:c7:5f:bb:86:4e:83:f0:e9:b6:04:04:05:9c:81:33:
         f4:69:0b:c3:10:56:3e:94:7a:10:0d:59:6b:f7:c2:41:9f:80:
         d8:3e:35:a1:b6:70:16:09:9d:c1:d0:e6:41:db:63:5b:00:08:
         7f:e1:a6:17:6b:f5:d7:c1:de:3c:e4:cd:c6:ce:13:e9:e6:83:
         a4:1c:28:9f:2d:49:f2:9e:60:0f:3e:20:29:f2:6c:6f:89:da:
         b9:b9:c1:20:b6:d7:89:6e:ef:3f:6e:42:10:02:a9:7b:5e:07:
         34:73:08:61:5d:9c:40:c6:1d:11:6f:95:f1:0b:82:ea:33:54:
         9c:47:5f:e8:40:73:c6:b5:22:7f:47:cf:7e:0e:83:fc:62:a4:
         4b:48:c4:b8:c7:6f:7a:19:c1:61:24:4f:99:29:cf:c8:01:22:
         00:5d:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:03:08 2024 by rpki-client on console-fra.rpki-client.org