Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
File:                     iaWq49f3LuzoOWtBSSIIrdUhhDU.mft (raw, json)
Hash identifier:          +Nx/SLyn7z2yYX1G9RaFip8HyaPENUkGiTSScoCbnXw=
Subject key identifier:   E1:30:25:A5:49:E0:D1:67:34:3D:1D:06:52:46:FB:84:11:B1:F7:94
Authority key identifier: 89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
Certificate issuer:       /CN=89a5aae3d7f72eece8396b41492208add5218435
Certificate serial:       01904189D4D7296E90B1483D1687294F3B86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
Manifest number:          10C9
Signing time:             Sat 22 Jun 2024 20:01:10 +0000
Manifest this update:     Sat 22 Jun 2024 20:01:10 +0000
Manifest next update:     Sun 23 Jun 2024 20:01:10 +0000
Files and hashes:         1: iaWq49f3LuzoOWtBSSIIrdUhhDU.crl (hash: Dq8YT7OKXcydmWIDPdTAOhb9gPkUGMy2YTMKSw+fnM8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:d4:d7:29:6e:90:b1:48:3d:16:87:29:4f:3b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a5aae3d7f72eece8396b41492208add5218435
        Validity
            Not Before: Jun 22 20:01:10 2024 GMT
            Not After : Jun 23 20:01:10 2024 GMT
        Subject: CN=e13025a549e0d167343d1d065246fb8411b1f794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:35:d0:ec:cf:0d:20:46:d0:7e:df:d9:bd:
                    33:ee:70:5c:0b:e5:e9:8f:fe:55:19:57:c4:f0:0e:
                    37:6a:ba:1a:3a:d6:39:9d:07:de:6f:2c:fd:d8:fe:
                    ec:92:60:2e:d1:ab:3c:fb:68:04:52:6e:a3:6d:d4:
                    bd:97:a0:9e:f1:5c:23:ee:c4:41:ad:b5:22:c3:a1:
                    eb:9a:f7:16:fe:44:14:c6:b2:28:ba:94:33:a9:97:
                    65:a1:2b:e3:a8:b0:0f:80:4e:23:57:c5:27:c0:13:
                    f0:a1:57:5d:16:24:43:8b:34:bd:69:10:3e:c9:ce:
                    2a:c1:00:83:23:a2:f3:74:31:20:c2:c3:19:88:52:
                    c9:52:4d:4c:b0:e7:ef:db:43:ec:d0:3a:3d:fd:dd:
                    df:2e:5b:7e:0e:37:4b:8c:20:73:46:d9:35:a7:ae:
                    a4:8c:0f:d4:7d:0e:1b:d9:af:bf:b2:01:9d:20:6b:
                    6e:84:e8:ef:1d:71:2e:79:87:8f:a7:42:05:5e:9f:
                    7f:da:65:c1:79:ea:ce:93:32:cd:fe:92:7b:7d:49:
                    5a:fe:6a:1e:f9:13:e1:1b:43:65:42:a7:03:b8:fb:
                    86:c3:b6:13:33:5c:6e:6f:99:09:51:24:39:95:02:
                    92:16:ce:57:05:24:0b:14:c0:70:9c:00:9b:67:db:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:30:25:A5:49:E0:D1:67:34:3D:1D:06:52:46:FB:84:11:B1:F7:94
            X509v3 Authority Key Identifier:
                keyid:89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:53:93:86:ae:c6:34:5f:be:b4:e4:93:54:18:ab:61:86:dc:
         79:9c:f6:aa:5c:f7:42:7c:0b:28:cd:7c:fc:b6:85:c9:86:70:
         98:48:30:3f:5f:54:d0:8e:29:2c:53:40:d9:a5:2c:d5:6a:df:
         f6:29:3e:12:d9:20:74:71:2c:be:a6:58:b3:b4:70:71:fd:2e:
         50:1f:e0:fc:0c:f5:3c:ff:be:31:78:8d:73:bf:11:6b:82:6a:
         49:7e:5a:e5:a9:69:0e:1d:6e:9e:4e:a6:2d:32:3a:ee:8b:39:
         6f:35:94:bf:5b:40:d9:e6:3d:ab:9c:d7:0e:01:c7:5e:58:b9:
         78:64:ee:1d:37:a6:de:34:27:7c:7a:b2:e5:e0:27:96:5f:a2:
         4f:11:d9:47:3e:8b:3f:3b:0b:e0:38:23:53:28:fe:36:bc:90:
         39:ad:0e:cc:5e:4a:bc:d1:fc:cb:61:9f:d6:02:5d:3e:58:a0:
         be:e0:6e:bf:dd:71:44:d2:f6:4a:cd:57:64:93:77:98:87:96:
         b8:89:b5:8b:c1:7e:d0:70:61:22:4e:6e:f3:61:19:16:34:d0:
         97:a9:84:e3:ff:8d:30:63:06:a8:03:a9:fe:9f:bc:94:4c:af:
         c7:19:d7:cc:64:8c:cc:9f:e6:23:ab:b1:1b:36:d6:d9:c6:cc:
         25:a8:6b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:26:47 2024 by rpki-client on console-ams.rpki-client.org