Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.mft
File:                     AxQ6N5XzoKyX3-1cg_SN70bVnLE.mft (raw, json)
Hash identifier:          M8Ye5nJP5Q0md2ebi0A/KkCV2BwPVa2/MFWqsBluE6k=
Subject key identifier:   B4:8B:37:78:5E:AA:AA:68:98:B9:01:BA:34:A6:80:D8:2A:91:7D:70
Authority key identifier: 03:14:3A:37:95:F3:A0:AC:97:DF:ED:5C:83:F4:8D:EF:46:D5:9C:B1
Certificate issuer:       /CN=03143a3795f3a0ac97dfed5c83f48def46d59cb1
Certificate serial:       01901DEB4F9A20CADB8CB971BDA22E6466C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxQ6N5XzoKyX3-1cg_SN70bVnLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.mft
Manifest number:          0147
Signing time:             Sat 15 Jun 2024 22:01:18 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:18 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:18 +0000
Files and hashes:         1: AxQ6N5XzoKyX3-1cg_SN70bVnLE.crl (hash: SFyozbgMSy67Wikii+JDwmkcq/VNGBenH5VwBLu8lcU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxQ6N5XzoKyX3-1cg_SN70bVnLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:4f:9a:20:ca:db:8c:b9:71:bd:a2:2e:64:66:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03143a3795f3a0ac97dfed5c83f48def46d59cb1
        Validity
            Not Before: Jun 15 22:01:18 2024 GMT
            Not After : Jun 16 22:01:18 2024 GMT
        Subject: CN=b48b37785eaaaa6898b901ba34a680d82a917d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ba:8a:d1:51:86:21:37:81:41:51:9f:56:7e:
                    16:40:0c:75:17:de:3d:23:65:b0:4f:16:b0:32:2f:
                    28:d2:d5:02:17:67:cf:fb:cb:1d:6c:89:57:7e:47:
                    8d:2e:c1:2e:5f:d7:8d:3c:7e:59:c4:f0:e3:5a:5f:
                    3b:9c:a7:d9:dc:af:6c:ac:da:7b:40:51:f8:b7:e6:
                    6a:b3:c9:36:a0:3d:02:f9:a1:0d:26:6a:e8:74:53:
                    b1:be:49:88:74:92:3c:86:20:86:ce:18:4c:2f:cc:
                    9b:eb:c3:27:92:02:1c:b0:dd:64:ff:7a:19:95:16:
                    85:05:3b:b1:28:74:6a:0f:d4:e5:84:94:4f:05:be:
                    15:b3:bb:68:c4:61:6f:8f:f9:de:d2:33:b0:19:4e:
                    e3:e4:fb:23:76:76:4e:09:e7:7b:5f:99:53:37:0d:
                    d6:72:9d:87:26:b5:da:f6:3a:c2:60:18:9c:d2:8b:
                    fa:d9:b5:b9:eb:e2:f7:e7:19:4b:52:60:82:e9:4a:
                    9c:fd:53:e5:60:fa:fb:3f:a5:70:e9:31:9a:61:bf:
                    fc:fa:0a:66:b7:53:3b:2a:53:db:77:8f:8d:d6:3d:
                    29:92:fc:2a:89:56:98:bd:86:b9:57:72:06:11:e5:
                    67:b3:11:cf:7b:aa:3b:00:8c:b7:bd:e3:68:c3:c1:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8B:37:78:5E:AA:AA:68:98:B9:01:BA:34:A6:80:D8:2A:91:7D:70
            X509v3 Authority Key Identifier:
                keyid:03:14:3A:37:95:F3:A0:AC:97:DF:ED:5C:83:F4:8D:EF:46:D5:9C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxQ6N5XzoKyX3-1cg_SN70bVnLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/235331-df4d-4725-8bee-6535c33cbf02/1/AxQ6N5XzoKyX3-1cg_SN70bVnLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fa:73:5b:81:73:88:25:0e:f6:01:c0:db:8c:7c:2d:a6:81:
         b1:9c:ad:5a:62:5f:b1:75:ff:04:4c:98:57:19:fa:82:48:76:
         25:94:90:e1:db:a6:30:2d:af:78:39:27:a5:0c:8c:2d:d1:cd:
         cf:9b:73:9d:80:39:58:3d:ec:33:e2:46:bd:03:93:ec:00:21:
         6f:b0:e4:26:03:61:6f:a1:12:b9:b4:ba:da:40:b8:a0:21:59:
         e3:87:d2:d1:29:08:29:cd:98:c1:0e:5c:a3:68:00:0c:72:60:
         fe:88:f3:3c:88:8d:d5:de:21:d1:2d:03:0b:39:24:b2:a3:3e:
         4c:90:7c:ac:58:db:56:a4:0b:24:5d:b4:4f:7b:dc:3e:f8:20:
         25:15:d6:24:aa:25:19:87:d1:95:ae:52:0e:c1:f6:38:8e:8c:
         6f:e3:4e:85:7c:5e:9a:db:83:50:b5:04:bc:0f:7d:58:af:be:
         f6:68:96:13:8e:8c:da:1c:1b:f9:fc:45:e9:70:b8:13:cf:2b:
         7d:41:a3:c6:11:88:ab:ce:17:c3:64:66:5d:60:ef:b8:ae:2b:
         0f:43:34:a2:09:44:41:05:21:53:b9:fe:64:3c:1f:ce:ce:97:
         75:99:77:e9:fb:03:77:da:17:94:77:5d:71:d2:6a:8b:79:7c:
         47:f0:83:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:51 2024 by rpki-client on console-fra.rpki-client.org