Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.mft
File:                     Jb6Oq69y-65n5x64nRz-otLVHCY.mft (raw, json)
Hash identifier:          o4XSyFJ2XrCsg/nLc1J+r11IN+CG2WLSWAvd8ypnvCY=
Subject key identifier:   02:C3:B4:19:07:30:20:42:60:C4:A4:1E:99:09:B0:DD:09:59:E0:AB
Authority key identifier: 25:BE:8E:AB:AF:72:FB:AE:67:E7:1E:B8:9D:1C:FE:A2:D2:D5:1C:26
Certificate issuer:       /CN=25be8eabaf72fbae67e71eb89d1cfea2d2d51c26
Certificate serial:       019044F897A68A6C458868AE8EDDE2DE4C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jb6Oq69y-65n5x64nRz-otLVHCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.mft
Manifest number:          03E3
Signing time:             Sun 23 Jun 2024 12:01:00 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:00 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:00 +0000
Files and hashes:         1: Jb6Oq69y-65n5x64nRz-otLVHCY.crl (hash: sgZ6yg7GBqGlHIlqV1kSMguVSMrweOidwsW2W/PK48Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jb6Oq69y-65n5x64nRz-otLVHCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:97:a6:8a:6c:45:88:68:ae:8e:dd:e2:de:4c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25be8eabaf72fbae67e71eb89d1cfea2d2d51c26
        Validity
            Not Before: Jun 23 12:01:00 2024 GMT
            Not After : Jun 24 12:01:00 2024 GMT
        Subject: CN=02c3b4190730204260c4a41e9909b0dd0959e0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:29:d6:8a:49:ef:4e:70:01:b3:79:fa:79:86:
                    78:de:3a:95:b7:19:24:f4:b7:9f:d2:17:ea:11:65:
                    8e:4c:06:73:ca:19:15:2c:ae:59:96:95:f2:ec:65:
                    17:35:b0:45:fa:d9:1a:0a:00:8b:0c:30:7e:db:0c:
                    d0:f5:a5:2b:ac:72:3a:6b:33:a2:04:26:d8:28:dc:
                    d2:73:65:83:9f:07:9a:bb:74:94:31:a2:df:9a:cf:
                    5d:4a:ef:9d:82:02:c6:08:36:f1:7e:79:e2:92:62:
                    84:d4:e2:25:fa:67:7c:61:28:2b:38:15:41:1f:70:
                    b4:74:f9:19:bb:47:d0:2d:ae:33:fb:fb:e5:37:26:
                    e0:6e:09:84:94:47:3c:55:f8:33:d4:84:de:b0:11:
                    1d:41:b4:fc:d9:bf:63:22:07:c6:c7:dc:b5:4c:8c:
                    c1:41:d8:4f:9e:77:8f:97:08:3b:4c:04:d4:c0:c9:
                    a5:78:c8:19:1d:65:7f:3b:57:1c:4b:f0:f8:87:88:
                    06:bd:58:cd:03:a2:af:60:58:8a:85:af:7f:5c:d5:
                    0b:9f:c4:fa:29:a8:15:3d:12:12:9f:f2:94:73:ae:
                    91:60:51:37:04:43:48:4c:e5:55:cb:8f:98:45:db:
                    14:c6:95:03:da:f3:d8:0e:75:66:8f:af:c4:91:ea:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C3:B4:19:07:30:20:42:60:C4:A4:1E:99:09:B0:DD:09:59:E0:AB
            X509v3 Authority Key Identifier:
                keyid:25:BE:8E:AB:AF:72:FB:AE:67:E7:1E:B8:9D:1C:FE:A2:D2:D5:1C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb6Oq69y-65n5x64nRz-otLVHCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:6c:02:d9:de:de:32:e8:7e:d4:05:6c:d8:6d:2f:99:48:
         70:88:e2:5a:66:36:c6:69:ab:4d:22:8b:af:ba:f6:bd:1e:68:
         ba:59:72:94:22:2a:1b:2f:4e:5f:55:c8:93:44:ee:b7:e7:16:
         5f:e2:d3:4d:c5:32:6b:57:33:50:09:df:27:ff:89:da:a3:40:
         4a:32:01:d8:69:d7:ec:cb:4b:ec:77:fd:6e:f6:0e:6c:68:eb:
         42:cb:8b:7d:ae:cc:93:2d:14:1b:9a:b4:42:27:f4:7a:e4:98:
         db:1a:b5:dc:59:91:51:89:70:dd:a3:c2:ca:24:6f:10:a1:02:
         22:a2:aa:00:42:b4:70:b6:de:72:a9:18:19:5d:6c:4b:1c:06:
         80:33:31:bd:58:0e:d3:e1:5c:bf:06:9f:6b:eb:1c:b4:af:39:
         c3:ee:26:6e:9f:54:95:c4:dc:92:9d:3d:e2:6a:a9:c3:db:88:
         79:df:2d:d5:39:1e:ba:f4:3f:03:9b:b6:bc:85:b4:c6:64:65:
         d8:2e:94:b9:4f:8f:98:17:35:23:99:e8:45:a5:2f:7c:54:fa:
         3e:90:d2:95:06:39:37:53:5a:2c:8f:67:ce:3e:c1:7a:dc:16:
         af:8e:66:b2:ec:17:80:9a:e0:7b:ad:28:23:e1:d3:8b:a7:2c:
         82:24:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:56:29 2024 by rpki-client on console-fra.rpki-client.org