Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.mft
File:                     w64gtKOJ6FTSamWqubDQGZfwrCI.mft (raw, json)
Hash identifier:          YaegyU2UUCoLFnlTqxD8s1BNMuDKSfI6gonsI1oNjzY=
Subject key identifier:   FE:A5:70:6B:D3:B1:E2:CA:FD:31:6C:9B:55:50:26:86:FB:99:A5:31
Authority key identifier: C3:AE:20:B4:A3:89:E8:54:D2:6A:65:AA:B9:B0:D0:19:97:F0:AC:22
Certificate issuer:       /CN=c3ae20b4a389e854d26a65aab9b0d01997f0ac22
Certificate serial:       019023B5EE77176787CB90AFCFEE22045D26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w64gtKOJ6FTSamWqubDQGZfwrCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.mft
Manifest number:          11CB
Signing time:             Mon 17 Jun 2024 01:00:43 +0000
Manifest this update:     Mon 17 Jun 2024 01:00:43 +0000
Manifest next update:     Tue 18 Jun 2024 01:00:43 +0000
Files and hashes:         1: w64gtKOJ6FTSamWqubDQGZfwrCI.crl (hash: bDNT2woawXFR5R90OOknPI9BEfSXuM7XjWkItCA24Ps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w64gtKOJ6FTSamWqubDQGZfwrCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:23:b5:ee:77:17:67:87:cb:90:af:cf:ee:22:04:5d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ae20b4a389e854d26a65aab9b0d01997f0ac22
        Validity
            Not Before: Jun 17 01:00:43 2024 GMT
            Not After : Jun 18 01:00:43 2024 GMT
        Subject: CN=fea5706bd3b1e2cafd316c9b55502686fb99a531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:ed:65:69:c1:bb:08:8b:14:12:9d:6c:0d:
                    51:e5:09:72:c3:b6:f3:f9:03:e7:f9:53:c1:02:63:
                    eb:c0:2e:c7:7e:1d:7c:30:c9:02:0f:ab:f2:26:09:
                    83:87:aa:d1:8a:52:6b:a2:c1:ec:b5:e5:7e:be:44:
                    d3:05:a8:70:05:a4:7c:7b:4e:07:60:dc:d8:23:72:
                    2c:2b:99:80:91:73:8c:d5:9b:e0:c3:01:1e:3b:e4:
                    07:17:3b:1f:d9:cf:bb:f5:37:48:1a:aa:95:a0:56:
                    1e:5c:73:df:08:7c:c2:56:9f:18:b8:c5:00:10:43:
                    3b:f9:19:20:1c:f3:06:9c:ee:f6:8c:e4:54:82:01:
                    41:d7:4a:57:bd:68:bc:26:99:45:b3:31:06:9c:bf:
                    70:7c:ab:c8:4e:41:4d:95:d1:7b:df:ed:38:f8:f5:
                    c1:28:50:27:49:67:f9:5f:ae:1b:45:5c:cb:37:45:
                    54:12:94:e6:bc:39:8e:4d:67:ea:12:6f:de:30:45:
                    d3:1c:1e:7e:31:ca:89:8b:ca:2a:69:23:ac:b7:a6:
                    d7:a9:ed:83:26:02:f2:f2:6a:09:20:c4:1e:54:c5:
                    24:aa:b1:61:30:88:00:cf:03:0b:c7:54:11:cc:d5:
                    25:a5:f7:49:a8:f8:22:6b:16:68:27:05:38:ad:06:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A5:70:6B:D3:B1:E2:CA:FD:31:6C:9B:55:50:26:86:FB:99:A5:31
            X509v3 Authority Key Identifier:
                keyid:C3:AE:20:B4:A3:89:E8:54:D2:6A:65:AA:B9:B0:D0:19:97:F0:AC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w64gtKOJ6FTSamWqubDQGZfwrCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:c7:7e:c8:65:5a:7a:44:04:79:d0:cc:31:b3:7f:e9:d8:3a:
         fe:03:37:dc:13:de:a1:18:93:61:6b:67:5b:ef:e8:71:92:99:
         0a:c2:f1:3c:10:2f:dd:88:6e:64:0f:96:fc:cf:5f:b1:6b:7e:
         0b:ac:c4:ad:c8:0e:84:92:51:7a:34:e5:67:41:90:65:6a:12:
         b5:b8:ce:d6:3d:f3:78:df:5d:5d:60:80:a8:99:8d:d2:73:33:
         dd:44:4f:da:ba:e5:7f:91:24:8f:1f:e8:5f:12:ab:c7:2c:d1:
         22:8c:32:61:05:5f:2b:9a:20:cc:30:c0:8d:34:da:15:f2:da:
         38:80:ec:7b:c7:30:38:ec:6a:0e:84:14:9f:67:0c:b4:c5:60:
         52:05:66:72:14:1f:4f:25:6b:7f:7a:6f:b6:5d:44:f7:f6:c1:
         62:02:cc:d2:63:a9:a1:66:b1:43:16:3a:e5:6b:63:5b:b5:91:
         fc:fd:88:de:81:51:93:78:4f:e7:e5:15:81:11:94:78:dd:d2:
         46:f9:5e:7f:2c:42:22:da:38:dc:10:b4:4c:cf:e6:58:a7:98:
         ca:00:65:ec:11:72:0c:19:31:93:31:80:59:1d:30:37:bc:00:
         08:9b:90:ae:a7:54:dd:0c:98:50:80:7a:2a:f2:52:9b:5c:25:
         ce:34:3d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 07:10:45 2024 by rpki-client on console-ams.rpki-client.org