Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
File:                     h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft (raw, json)
Hash identifier:          mgt8BM4Ybk6bap+vdPDmlgboZHZb1KocqkjrnV4L+wA=
Subject key identifier:   6B:14:59:6C:C6:B9:D7:11:44:31:A9:F7:75:ED:1C:E0:28:D1:82:29
Authority key identifier: 87:C0:A7:B4:3D:42:92:49:17:A5:90:59:8B:44:32:5E:4C:C9:2E:E4
Certificate issuer:       /CN=87c0a7b43d42924917a590598b44325e4cc92ee4
Certificate serial:       01903BBEBCB7B80F81F7CA4284B3EBF95171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
Manifest number:          05A9
Signing time:             Fri 21 Jun 2024 17:01:14 +0000
Manifest this update:     Fri 21 Jun 2024 17:01:14 +0000
Manifest next update:     Sat 22 Jun 2024 17:01:14 +0000
Files and hashes:         1: h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl (hash: j/bBPJO6HIfx63yu1mGsVSI2026fYtLl4HYf4IeoXIY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:be:bc:b7:b8:0f:81:f7:ca:42:84:b3:eb:f9:51:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c0a7b43d42924917a590598b44325e4cc92ee4
        Validity
            Not Before: Jun 21 17:01:14 2024 GMT
            Not After : Jun 22 17:01:14 2024 GMT
        Subject: CN=6b14596cc6b9d7114431a9f775ed1ce028d18229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:f5:17:65:91:a8:62:a8:f0:ec:9b:09:c5:
                    b0:b0:2e:6a:dc:3c:26:30:a9:8e:4d:c8:7a:05:42:
                    3d:ac:6f:e6:75:66:66:43:e0:73:af:9d:53:90:7d:
                    d6:46:ce:b0:8e:9c:fe:45:97:10:b6:fe:0a:8f:6b:
                    15:49:45:17:9d:6a:a8:59:eb:bd:43:2d:00:f2:1d:
                    50:cb:22:94:aa:bf:13:ec:ba:50:5c:dc:cd:4b:36:
                    ab:9e:f1:f8:92:4a:68:c0:3b:18:3e:80:30:ba:9e:
                    0d:48:65:5e:03:d7:3e:a8:0d:99:13:df:26:1e:f5:
                    0f:34:62:43:d8:34:d1:ba:f0:e5:42:71:1b:a7:06:
                    ba:d6:6a:e6:dc:a8:15:ac:ea:86:80:fa:f0:4f:24:
                    62:9f:57:db:d2:4c:6d:b5:d1:92:f4:d2:7f:37:ed:
                    2a:75:57:76:1a:3c:9e:7f:cf:99:4c:30:9a:b2:a8:
                    70:04:0c:ba:a0:b0:6f:64:02:16:64:80:b9:45:c6:
                    7c:0a:51:bb:cb:24:b2:2a:65:83:de:39:9a:56:79:
                    f5:db:b1:ae:a0:7d:6f:a9:7b:17:9a:7b:fe:96:7a:
                    f8:a9:44:17:66:00:dc:c1:65:89:e8:82:54:b7:74:
                    b7:fd:77:5f:51:ac:ea:90:93:07:83:cc:45:e1:65:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:14:59:6C:C6:B9:D7:11:44:31:A9:F7:75:ED:1C:E0:28:D1:82:29
            X509v3 Authority Key Identifier:
                keyid:87:C0:A7:B4:3D:42:92:49:17:A5:90:59:8B:44:32:5E:4C:C9:2E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0c:75:05:70:9b:68:c9:14:12:cf:71:14:f1:64:15:5d:5b:
         10:27:99:e4:0e:1e:dc:d5:8e:25:0e:09:ab:83:d2:3f:1f:03:
         4d:84:c3:f8:dc:57:0b:d5:07:c0:0e:1c:f7:4a:33:d6:28:8a:
         8d:10:62:74:f8:5c:d8:ab:aa:56:0e:a7:c4:02:f7:b2:a9:1a:
         73:09:6b:d0:af:71:48:20:7e:93:2f:c6:ae:3f:b2:25:de:89:
         a2:c8:fa:d4:86:a1:dd:79:71:9f:e6:db:07:82:8e:4f:6a:19:
         06:cc:d7:d8:cc:0f:41:83:cc:88:96:7b:3b:6e:49:6b:8e:c2:
         06:e0:8c:a1:1f:00:be:fe:d7:9a:ee:10:76:74:37:65:3d:94:
         69:f1:1d:8a:fc:cf:11:1c:ee:ad:fb:a3:3a:70:e1:d4:18:b9:
         02:35:d9:79:c7:1e:d2:3c:3e:26:ec:fd:0e:d1:04:67:a1:2b:
         cd:6b:0e:c7:2b:99:e3:05:f3:59:bf:cd:b7:41:42:2b:db:9c:
         e4:50:84:c6:85:cf:f1:63:f1:3b:15:e2:c4:1d:5a:ca:e6:c4:
         0d:e4:47:fb:30:48:9a:cb:48:a6:bb:1a:f0:dc:d5:d4:27:65:
         fa:bd:2c:6d:fc:2c:bb:ae:e8:d9:05:44:e6:f9:e0:74:e9:77:
         a2:38:cd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:14:11 2024 by rpki-client on console-ams.rpki-client.org