Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.mft
File:                     cNZU8uFv6IJuBK6W315csKJgOAo.mft (raw, json)
Hash identifier:          lgdZ8ZZ0m2Vhlu2kE17G16DXaUxQ9RNB/erglBAHQzY=
Subject key identifier:   84:0A:A9:05:E8:2E:BF:D0:3A:A1:68:7A:37:16:66:B3:ED:2A:7F:DD
Authority key identifier: 70:D6:54:F2:E1:6F:E8:82:6E:04:AE:96:DF:5E:5C:B0:A2:60:38:0A
Certificate issuer:       /CN=70d654f2e16fe8826e04ae96df5e5cb0a260380a
Certificate serial:       01901D4691FEAF1CDF7963DB93041D0A8433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cNZU8uFv6IJuBK6W315csKJgOAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 19:01:22 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:22 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:22 +0000
Files and hashes:         1: cNZU8uFv6IJuBK6W315csKJgOAo.crl (hash: PFdNbgnUqwfqSMpVz91ocaQhxmbN1PeCoOxIc2s99Hk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cNZU8uFv6IJuBK6W315csKJgOAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:91:fe:af:1c:df:79:63:db:93:04:1d:0a:84:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70d654f2e16fe8826e04ae96df5e5cb0a260380a
        Validity
            Not Before: Jun 15 19:01:22 2024 GMT
            Not After : Jun 16 19:01:22 2024 GMT
        Subject: CN=840aa905e82ebfd03aa1687a371666b3ed2a7fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:70:80:08:84:78:36:c2:98:ca:81:4a:33:a8:
                    e2:85:97:8d:a4:68:70:7f:ae:d5:1e:77:9d:4b:85:
                    ef:b0:10:6a:f8:a1:ba:c1:3a:b0:d0:23:5f:97:af:
                    ed:99:fc:a2:4f:f1:ba:68:b1:72:82:a6:d1:ba:bf:
                    05:8f:f4:38:2a:43:a3:fd:05:71:f2:3e:a0:0d:70:
                    61:da:35:47:90:8f:bb:32:12:3a:0c:8e:be:45:09:
                    3f:2f:84:97:ba:3f:90:e7:99:6d:5c:6c:3f:3c:90:
                    e8:d4:6a:b4:bc:72:50:dc:51:ed:08:41:be:27:21:
                    37:e5:c2:0c:7b:c4:bd:d2:da:c7:dc:e9:c5:37:0c:
                    c0:8f:93:05:ae:9c:41:ea:3e:30:aa:0d:9b:9b:d4:
                    87:35:28:fb:1d:18:ce:30:4a:fa:92:53:6b:8b:59:
                    96:4f:30:cf:a7:84:4e:65:86:2e:45:c7:28:b2:5f:
                    1e:6a:7f:35:50:22:19:98:e6:13:0f:20:09:5b:ad:
                    2a:6e:8f:dd:8a:01:7c:d1:ae:94:b4:ae:5f:7d:16:
                    00:e7:6d:93:9c:23:d6:09:e1:16:55:aa:68:51:82:
                    cc:fb:9a:64:01:b5:75:62:72:49:a8:82:36:37:61:
                    a4:8c:21:38:dd:3e:67:dd:96:c6:f3:db:84:35:a3:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0A:A9:05:E8:2E:BF:D0:3A:A1:68:7A:37:16:66:B3:ED:2A:7F:DD
            X509v3 Authority Key Identifier:
                keyid:70:D6:54:F2:E1:6F:E8:82:6E:04:AE:96:DF:5E:5C:B0:A2:60:38:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNZU8uFv6IJuBK6W315csKJgOAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:3d:58:87:bd:2d:7e:42:48:ef:18:cc:59:4a:9d:30:d0:
         d6:43:7b:8f:3a:8e:f7:03:e7:72:ed:dc:92:bb:a9:3f:60:a6:
         be:63:96:7b:7b:1d:7f:ff:2d:c2:3e:c1:4b:8c:a7:8f:a2:3b:
         72:28:21:ca:2c:d7:91:ea:b4:92:67:21:20:71:69:27:bc:41:
         c4:28:b2:b7:e2:47:50:88:01:60:74:7e:70:3d:ed:46:a7:19:
         12:50:e5:fa:7e:80:05:40:f4:92:f2:8a:2b:6e:02:7a:90:ea:
         80:80:9c:37:cf:cf:cb:81:34:dd:6c:9c:c1:5a:fa:eb:5e:52:
         b9:00:49:e2:5e:b3:4f:a0:61:9f:05:81:f5:fb:65:aa:56:ab:
         66:3c:ff:33:5d:f5:7c:37:b2:94:ae:f8:78:cb:c4:71:29:79:
         40:86:62:68:bb:cc:52:9a:e1:a6:b7:52:9d:37:34:a3:f1:1d:
         31:87:93:33:6d:e6:68:c8:ad:00:6b:6b:46:5e:30:3c:eb:67:
         89:1d:19:54:0a:0a:a1:c3:2c:3e:32:25:69:22:c6:3f:57:58:
         41:b8:37:c2:7b:f4:27:40:8b:85:63:05:0d:aa:98:9a:5c:2a:
         68:78:70:28:a2:5f:6c:a7:60:0b:da:f0:6d:5e:0a:9c:ed:66:
         0b:d2:35:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:53:19 2024 by rpki-client on console-ams.rpki-client.org