Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.mft
File:                     ii3QX1WC-f6w8_e98E24skiGqS8.mft (raw, json)
Hash identifier:          JN4b/k8p6Xq6VUwnvRRq8v8aOIzjyUemaAPzBo10a1w=
Subject key identifier:   1F:0B:44:99:33:58:E2:AE:BF:8A:32:E8:4F:B5:DB:A8:E8:33:FA:42
Authority key identifier: 8A:2D:D0:5F:55:82:F9:FE:B0:F3:F7:BD:F0:4D:B8:B2:48:86:A9:2F
Certificate issuer:       /CN=8a2dd05f5582f9feb0f3f7bdf04db8b24886a92f
Certificate serial:       01901DEB38F85BA1618FFB72B86F7632232D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ii3QX1WC-f6w8_e98E24skiGqS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.mft
Manifest number:          0432
Signing time:             Sat 15 Jun 2024 22:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:13 +0000
Files and hashes:         1: ii3QX1WC-f6w8_e98E24skiGqS8.crl (hash: u3Tr8DXL4MKMqq2cmnHZLE37O+dj7DRU8UWrRcKzLnE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ii3QX1WC-f6w8_e98E24skiGqS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:38:f8:5b:a1:61:8f:fb:72:b8:6f:76:32:23:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2dd05f5582f9feb0f3f7bdf04db8b24886a92f
        Validity
            Not Before: Jun 15 22:01:13 2024 GMT
            Not After : Jun 16 22:01:13 2024 GMT
        Subject: CN=1f0b44993358e2aebf8a32e84fb5dba8e833fa42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:65:1c:a9:de:f3:f9:2f:08:7a:39:5a:77:51:
                    10:fb:31:8e:61:4c:c2:a9:37:61:cf:7e:5a:e2:22:
                    12:a1:f8:b3:40:37:9a:08:e7:fc:40:30:38:96:b8:
                    9f:8b:d4:0d:49:47:b7:0d:65:07:ec:6c:b7:fd:ad:
                    ce:94:1b:0c:43:b1:d2:6d:c1:8b:72:4b:8c:00:91:
                    60:78:24:68:ee:10:1f:b1:f6:dd:c5:9d:3b:9f:65:
                    3e:3f:08:90:42:e8:6c:f2:08:70:64:22:e8:21:ce:
                    bb:70:42:9e:ec:62:e5:f6:c6:71:ca:22:20:25:ea:
                    81:b3:dd:f2:a7:b6:78:59:20:bd:17:5c:55:7f:b6:
                    3a:d2:e9:c6:b1:df:11:67:08:62:65:10:93:9f:02:
                    72:7a:31:b4:d9:2a:15:0f:1c:b1:35:6c:75:93:fc:
                    90:2b:8a:d0:7f:98:e0:a0:a8:68:65:8c:a2:b1:0d:
                    a0:7f:c9:e5:a3:09:a5:42:f6:90:18:56:6f:41:30:
                    13:b2:2a:81:c5:35:90:87:f2:b7:db:f9:59:ed:50:
                    58:e6:da:57:bd:c7:c9:d7:59:6f:d7:95:80:58:ce:
                    d0:b5:28:8a:eb:45:51:1e:5c:78:12:db:b8:83:53:
                    f1:9a:90:9b:2b:93:ba:ca:ad:e0:c1:23:b1:d5:1a:
                    ac:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0B:44:99:33:58:E2:AE:BF:8A:32:E8:4F:B5:DB:A8:E8:33:FA:42
            X509v3 Authority Key Identifier:
                keyid:8A:2D:D0:5F:55:82:F9:FE:B0:F3:F7:BD:F0:4D:B8:B2:48:86:A9:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii3QX1WC-f6w8_e98E24skiGqS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:be:50:8c:c7:3c:8a:ec:6b:14:e2:a1:4f:9f:ff:4e:29:6e:
         be:17:eb:8e:62:0d:5f:18:18:6e:a5:29:4c:0f:91:61:45:b3:
         e8:bd:a3:e3:92:c9:e6:0f:dd:d9:d6:ad:59:23:6b:bd:d5:f5:
         e1:44:85:0e:0c:25:84:3c:a7:cd:cd:f9:31:e6:5a:82:6d:ae:
         b3:b6:54:c9:87:98:10:8f:c6:e0:77:39:9f:a6:50:0d:7b:fd:
         0f:3c:15:7b:ce:69:b4:19:44:be:de:c9:f7:82:6b:16:bc:db:
         bc:9c:25:71:f1:0c:b5:80:f1:1c:f1:e6:b4:8e:66:ba:cb:ea:
         9f:46:d4:dc:0d:fb:78:92:f0:7a:91:57:62:58:06:27:c4:c3:
         f4:9b:c8:bb:da:f8:95:01:de:a2:9e:2c:8a:14:cd:79:f5:95:
         44:f6:3c:9c:81:ae:fa:ee:56:e1:11:18:74:0e:24:fa:5c:d5:
         6b:76:ce:ff:54:fe:94:00:db:04:f1:f1:b8:5d:71:a3:3e:56:
         5b:57:c1:c6:75:32:0d:7a:17:93:6f:11:20:17:0d:41:23:f3:
         1c:f5:51:b5:74:fa:ab:63:5b:0f:fb:76:63:b0:15:03:96:6c:
         7b:5c:80:6d:4f:db:17:51:b6:3c:d2:9a:d8:82:8f:52:29:60:
         45:87:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:18 2024 by rpki-client on console-fra.rpki-client.org