Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.mft
File:                     w64gtKOJ6FTSamWqubDQGZfwrCI.mft (raw, json)
Hash identifier:          OagepJ2ku2n+JIVo+8+9yR9yHzMHzTSK2JtY0DVNVwU=
Subject key identifier:   0B:FE:53:BB:92:70:7A:3C:C7:08:A4:AA:06:19:33:D8:75:EB:97:CB
Authority key identifier: C3:AE:20:B4:A3:89:E8:54:D2:6A:65:AA:B9:B0:D0:19:97:F0:AC:22
Certificate issuer:       /CN=c3ae20b4a389e854d26a65aab9b0d01997f0ac22
Certificate serial:       01901DECBB2BFC19E802BC4C17C7C3176ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w64gtKOJ6FTSamWqubDQGZfwrCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 22:02:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:51 +0000
Files and hashes:         1: w64gtKOJ6FTSamWqubDQGZfwrCI.crl (hash: d9lXFQZRfjD0Tv3fNH0t+tEwDT6B/BraHxpoRaqyO7c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w64gtKOJ6FTSamWqubDQGZfwrCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:bb:2b:fc:19:e8:02:bc:4c:17:c7:c3:17:6e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ae20b4a389e854d26a65aab9b0d01997f0ac22
        Validity
            Not Before: Jun 15 22:02:51 2024 GMT
            Not After : Jun 16 22:02:51 2024 GMT
        Subject: CN=0bfe53bb92707a3cc708a4aa061933d875eb97cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c0:b5:a8:3c:6c:34:a3:91:4b:72:f6:0b:aa:
                    85:35:40:17:38:4e:14:d2:c8:a0:0b:61:44:65:66:
                    5c:9d:cd:4b:c5:f0:89:9f:54:24:be:cb:40:ba:7b:
                    8f:90:af:d5:13:65:0a:a9:24:5e:d6:41:f0:56:fd:
                    30:df:81:98:a3:f6:01:63:af:b3:ed:9f:74:b2:22:
                    b4:5d:f6:76:76:02:c4:d4:db:b3:67:3b:c2:43:2b:
                    03:5a:2b:ea:ef:d3:cc:d7:6d:23:87:cd:6a:f2:e4:
                    20:9c:1f:6a:92:03:85:45:9e:bb:38:47:a1:c0:81:
                    b9:3f:d0:99:a3:fd:7d:6c:96:1a:f7:7d:15:90:6b:
                    e3:95:b2:61:49:4e:51:1a:74:df:f9:84:c3:b9:3a:
                    3c:d0:06:80:8a:fe:d8:56:1f:d0:7d:0d:c6:09:57:
                    65:71:8e:cb:9f:57:58:4c:42:65:81:0a:18:6f:0c:
                    63:8f:64:69:8e:87:de:8a:b6:f5:1a:d9:bf:7f:6e:
                    3c:b8:8a:03:87:3f:c4:3b:c2:98:6c:8e:86:26:fa:
                    57:69:d6:61:a1:ab:43:c1:c7:1c:6f:b7:af:46:de:
                    54:30:c1:96:ca:5d:30:e3:91:ed:34:92:98:54:4d:
                    71:04:c4:51:9d:f7:85:d6:ee:b2:22:23:50:01:d6:
                    97:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FE:53:BB:92:70:7A:3C:C7:08:A4:AA:06:19:33:D8:75:EB:97:CB
            X509v3 Authority Key Identifier:
                keyid:C3:AE:20:B4:A3:89:E8:54:D2:6A:65:AA:B9:B0:D0:19:97:F0:AC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w64gtKOJ6FTSamWqubDQGZfwrCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:91:dd:c0:51:4f:8f:81:c6:5a:60:42:f3:1e:8a:81:9b:35:
         67:58:49:c4:6f:4a:de:36:39:55:9d:db:8f:4d:fa:4c:7c:93:
         d3:69:64:1e:47:2b:46:96:ab:3e:80:88:b4:31:ca:63:55:4b:
         2f:22:7c:7d:9a:dd:bc:de:dd:57:a3:84:e1:72:49:b4:bc:8b:
         21:4f:81:38:a9:06:e7:17:97:34:11:43:59:e3:43:ac:2b:05:
         41:8e:c6:2b:42:42:62:d4:fa:65:7f:ca:2f:2b:ea:3d:10:8b:
         06:8f:8e:0c:9f:f5:ca:01:5c:32:7c:5e:7e:8d:2d:d5:2d:fb:
         78:f9:80:68:28:1d:db:b7:c1:aa:6b:09:c3:38:8f:85:98:94:
         53:50:6f:71:54:03:bd:e3:2e:ec:2e:e5:27:a7:37:52:b6:85:
         1c:85:12:2c:3f:e8:14:df:7f:e2:68:d1:4b:d8:76:81:07:6b:
         f6:27:be:9e:51:f7:aa:44:67:38:7c:4c:f0:a7:d5:ba:cd:a4:
         eb:03:63:48:06:78:35:63:40:ac:a9:06:4a:73:34:42:8a:f4:
         a6:cf:47:cc:01:7e:a3:67:06:38:7f:36:66:68:8d:ae:74:c2:
         54:19:a4:c6:ce:fb:ad:07:ac:fc:65:e5:16:e8:30:2c:a3:a3:
         79:6d:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:47 2024 by rpki-client on console-fra.rpki-client.org