Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
File:                     fXrxi3mJleFLOBNhoGu2aEm36Fo.mft (raw, json)
Hash identifier:          O173qpJmw3INg8P4Mel0oC88PAk9oaPixGZptMBrem8=
Subject key identifier:   95:B5:05:EA:F0:3E:C7:BE:F8:B6:A0:36:F0:5D:0D:60:F2:54:3B:4B
Authority key identifier: 7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A
Certificate issuer:       /CN=7d7af18b798995e14b381361a06bb66849b7e85a
Certificate serial:       01901E8FF3CD326D729E74427CAAC89B65BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
Manifest number:          02F1
Signing time:             Sun 16 Jun 2024 01:01:08 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:08 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:08 +0000
Files and hashes:         1: fXrxi3mJleFLOBNhoGu2aEm36Fo.crl (hash: Aqcer9OpLs8XIkjEgbwGsWJeXmDgI3AGvJyUXYy8CAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:f3:cd:32:6d:72:9e:74:42:7c:aa:c8:9b:65:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7af18b798995e14b381361a06bb66849b7e85a
        Validity
            Not Before: Jun 16 01:01:08 2024 GMT
            Not After : Jun 17 01:01:08 2024 GMT
        Subject: CN=95b505eaf03ec7bef8b6a036f05d0d60f2543b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:47:ed:cb:93:c2:95:98:4d:ab:6f:0b:fa:
                    7d:05:6d:5b:33:75:f8:d7:87:07:25:5e:33:c8:e1:
                    42:62:fc:f0:51:f1:70:fc:49:db:cc:f5:0d:a9:26:
                    ec:c9:3d:2e:5e:e4:f0:90:5b:65:48:41:05:40:09:
                    10:49:a7:da:ef:45:38:71:e9:eb:d2:6c:36:13:24:
                    31:a6:95:3f:25:74:db:f1:b0:b2:2b:71:d0:ab:3d:
                    06:4d:58:95:c8:13:a1:53:6b:3d:e7:d8:dc:f7:f7:
                    5c:4e:d3:6b:b5:93:04:f6:00:4a:b1:5f:54:a0:7a:
                    20:31:0b:16:d1:88:68:d3:5b:f1:dc:72:f3:b0:17:
                    69:98:b7:47:18:cd:0a:5b:44:5e:3e:f1:d9:22:a8:
                    e9:da:11:c3:77:4d:6f:86:c8:1f:a0:31:2e:57:25:
                    55:b3:56:31:2c:e9:82:e8:4c:0e:1e:e1:25:b8:35:
                    ed:32:7c:a3:15:12:f0:ab:65:b2:45:c4:e3:16:ba:
                    77:05:e1:16:d5:c2:bc:c6:ea:1f:7e:9d:d0:6f:44:
                    ce:b7:d0:7b:4b:2c:73:f9:72:d9:e9:45:1d:70:f0:
                    78:e2:0d:9b:bb:ee:9c:69:67:9f:47:8c:90:fc:bd:
                    31:82:3a:ae:dd:f2:55:34:f1:1b:d4:85:77:7b:f3:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B5:05:EA:F0:3E:C7:BE:F8:B6:A0:36:F0:5D:0D:60:F2:54:3B:4B
            X509v3 Authority Key Identifier:
                keyid:7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d1:bc:2a:b1:16:0a:8f:a1:ac:30:b1:2b:f2:b4:4a:20:70:
         85:f1:70:8e:bd:cb:6c:6d:54:9e:b0:b8:ea:72:ef:61:7b:a9:
         09:cc:23:1c:15:a0:28:4f:8a:51:7c:8c:2c:0c:cd:2c:ed:50:
         59:53:87:0a:3d:83:45:7e:8b:4d:b4:15:51:f4:14:64:09:60:
         27:7e:f9:56:2f:f8:d3:c8:aa:ce:71:8a:46:d9:5a:26:70:da:
         e7:94:e6:1b:cf:3c:0b:b2:2d:c6:8a:d2:2a:91:1c:30:8a:50:
         bf:c7:31:5c:e5:a1:5d:d4:f8:6f:01:e6:94:8b:d6:b3:6b:cd:
         53:6a:5e:14:60:69:73:15:0a:a5:99:f3:24:1f:4e:46:bf:95:
         95:b8:9e:62:50:8f:c0:d0:7a:da:f5:e1:4a:15:df:e3:0a:93:
         ba:76:a7:0c:73:ab:2e:16:be:3b:34:17:c4:10:b0:f8:e9:e4:
         ca:7c:6c:f7:0c:d1:c1:0e:22:16:6c:cd:34:39:9e:49:6c:b3:
         91:12:bd:6b:ed:78:8c:06:12:75:b3:99:d7:55:2c:f5:73:2c:
         70:b1:cc:b4:4f:60:c7:91:db:43:5d:fe:68:14:dc:4a:1c:8d:
         e7:be:2a:ce:bf:9d:ac:78:0e:a7:56:f3:29:67:c0:7b:04:12:
         23:af:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:03:40 2024 by rpki-client on console-fra.rpki-client.org