Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
File:                     n0XrWiiMaO1g29m4fk6CBsqckz8.mft (raw, json)
Hash identifier:          YvW1Bjk4sXr1gchBKfUFnmFJZuCDE5Skz4AGkwnOv20=
Subject key identifier:   58:2C:2A:CA:C5:37:D9:60:14:9D:E3:21:AB:FC:4F:37:08:1C:F9:B4
Authority key identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
Certificate issuer:       /CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Certificate serial:       019048693D69890FBCC5CC95697A4F5D85C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
Manifest number:          0BB6
Signing time:             Mon 24 Jun 2024 04:02:54 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:54 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:54 +0000
Files and hashes:         1: n0XrWiiMaO1g29m4fk6CBsqckz8.crl (hash: O1BB9JG3SACSRvu2Yfxy+u0/mmtX99ZaKpd6toAtfvQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:3d:69:89:0f:bc:c5:cc:95:69:7a:4f:5d:85:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
        Validity
            Not Before: Jun 24 04:02:54 2024 GMT
            Not After : Jun 25 04:02:54 2024 GMT
        Subject: CN=582c2acac537d960149de321abfc4f37081cf9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:cf:4f:a7:f2:25:76:6e:07:ba:82:0f:a0:
                    bc:96:ee:34:f8:be:2e:f9:40:bc:68:aa:3f:6b:92:
                    85:83:54:63:a3:49:1f:39:56:1c:5e:3c:0a:ff:f8:
                    7e:ad:a1:d8:20:f2:b5:a2:da:2d:8d:c0:10:00:b0:
                    4e:54:dd:84:7f:f7:cf:cd:a8:27:78:12:36:95:13:
                    d9:3d:3d:1f:d9:55:4f:d4:6e:54:9b:55:bf:0a:38:
                    fe:2d:19:33:75:35:78:ee:a6:75:25:69:80:eb:50:
                    3e:7d:71:2a:94:fd:94:81:83:62:c8:a9:a2:50:c7:
                    26:13:a3:93:38:ef:3e:f3:0e:93:8d:d9:96:33:b7:
                    5f:19:60:47:93:0d:05:c7:ce:32:e7:94:41:fc:cd:
                    fe:76:ae:bc:fb:8f:5a:43:23:49:11:34:52:94:fb:
                    31:a1:9b:5c:59:c8:5c:b4:21:19:94:4e:37:ef:a2:
                    e6:7d:7f:23:19:e5:13:d0:e6:46:10:71:3f:72:e4:
                    af:bf:44:1b:e8:18:2d:0b:a6:79:e3:6e:34:c0:76:
                    03:f6:3e:5e:1e:41:da:20:ca:be:6a:11:0d:c4:0d:
                    81:46:0f:06:61:d0:59:87:f5:aa:e5:d8:26:34:64:
                    77:2b:8c:9f:e1:e5:33:fc:2d:30:88:88:49:46:bb:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2C:2A:CA:C5:37:D9:60:14:9D:E3:21:AB:FC:4F:37:08:1C:F9:B4
            X509v3 Authority Key Identifier:
                keyid:9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:eb:a0:ca:53:e4:e7:f5:17:91:39:da:fa:1b:39:98:28:49:
         9b:9e:59:4b:f1:24:5c:5c:76:e4:69:f5:ee:80:f3:6e:5e:12:
         3e:9c:cf:6d:2d:47:c9:0c:fe:a4:12:06:05:29:bb:af:df:f2:
         2a:c5:78:ae:7d:57:16:3c:11:3b:d7:50:7e:1c:27:71:1e:31:
         d4:0e:1d:00:59:cd:a7:63:db:e3:75:63:ec:79:a1:1f:60:5b:
         10:61:ce:ed:84:99:4b:d6:a3:fb:a7:1a:32:cd:a5:7e:79:bd:
         19:c4:f6:fb:53:51:a2:df:af:51:ec:34:5b:87:40:6b:ec:5f:
         2a:7c:94:57:ab:e4:e3:9a:5e:3c:da:1c:5f:4b:e4:20:72:42:
         c9:41:14:3c:36:3c:74:54:0f:a9:f4:8c:39:c0:45:f9:35:fe:
         bc:2f:e5:63:c1:54:cb:08:44:9b:fa:b6:f3:78:75:56:5d:01:
         3c:43:be:bb:fe:9c:0f:67:bb:6b:82:81:56:89:e2:08:ec:08:
         2c:c9:90:95:17:1a:1b:56:b5:3e:12:58:54:ec:13:60:17:1f:
         3f:5e:70:1b:a4:29:c4:af:96:1c:56:15:4d:af:f9:9a:53:d7:
         5e:53:89:8c:91:6b:9e:9d:29:dc:88:f1:33:ea:70:6a:a0:09:
         84:fc:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:17:03 2024 by rpki-client on console-fra.rpki-client.org