Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File:                     AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier:          SJ3gbkof0LV39RZXo/kQ4M5asy4Y4UWEe4alzzU86vA=
Subject key identifier:   C4:1A:7C:89:88:4A:B7:1A:BA:55:2C:E2:35:F8:29:A1:69:C7:0D:74
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer:       /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial:       01901DEDA7464B6F95FF55DB36B009DA3CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:03:52 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:52 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:52 +0000
Files and hashes:         1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: eNcMV1oQbK0WWIlKj2QhUdtq07r8gRwsh19sgUtBfy8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:a7:46:4b:6f:95:ff:55:db:36:b0:09:da:3c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
        Validity
            Not Before: Jun 15 22:03:52 2024 GMT
            Not After : Jun 16 22:03:52 2024 GMT
        Subject: CN=c41a7c89884ab71aba552ce235f829a169c70d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:97:94:70:65:a4:67:cd:b5:18:e7:95:23:17:
                    69:4a:25:18:34:ca:16:28:28:24:ad:0e:bf:c8:68:
                    84:14:45:7d:db:0d:29:32:0e:20:51:17:06:df:e5:
                    5f:35:18:78:de:7a:ff:76:7f:6d:3b:70:81:c0:0e:
                    e6:0f:54:f5:7a:9e:28:5c:ab:61:59:db:73:0a:36:
                    ee:a1:25:b4:90:00:85:36:23:e7:fe:ac:16:a8:66:
                    05:44:4e:93:b7:67:cf:e6:e3:f8:2c:4c:0d:7e:a5:
                    79:66:3a:18:1e:f0:86:73:40:e0:2b:c0:68:e1:1a:
                    a9:cf:42:90:a4:92:25:f1:eb:23:17:16:6b:05:5e:
                    ea:67:07:41:87:4c:f7:65:ad:7d:1f:f9:ce:72:4d:
                    70:7b:30:12:69:62:72:92:88:fe:c1:0a:29:06:8d:
                    57:3a:0f:19:bf:9f:10:02:99:05:55:00:0f:ad:4b:
                    c5:9c:4c:0a:62:d9:10:7b:bd:eb:10:04:69:e7:91:
                    ac:bb:23:3a:d3:b1:93:c0:90:d7:43:56:76:94:f7:
                    64:89:41:d1:e2:ff:73:10:6c:f9:50:cd:f8:fd:2a:
                    b9:3e:ab:f4:30:d4:ee:e9:67:bd:4b:a6:62:ba:33:
                    93:a2:ba:1a:db:7c:d2:fb:24:b9:fc:38:46:fa:ef:
                    21:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1A:7C:89:88:4A:B7:1A:BA:55:2C:E2:35:F8:29:A1:69:C7:0D:74
            X509v3 Authority Key Identifier:
                keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:79:e8:4f:ed:fe:85:91:4f:21:4e:51:7e:80:de:ad:1c:b4:
         45:a2:5e:0c:2f:67:24:55:dd:a2:5c:3d:a4:5d:31:1f:86:3f:
         f0:c3:95:44:f3:f0:f5:af:a0:c6:5b:05:7a:5c:2a:0e:00:6f:
         67:90:0b:84:31:df:81:fc:31:61:c1:af:c9:aa:78:ee:6a:7e:
         51:cc:4e:05:2e:d8:77:9f:44:3b:37:48:a5:68:0a:86:6b:47:
         41:1a:86:09:29:fd:0f:a4:13:7e:8a:6b:d8:79:0b:12:89:93:
         2f:0a:74:4c:44:39:f4:05:93:c1:7f:4e:e6:65:2c:8f:09:df:
         02:fe:2b:95:ef:56:6f:c5:bd:da:de:6d:4e:ec:b2:0a:d3:86:
         07:81:2a:78:06:3a:f1:bb:71:2c:4e:74:65:66:41:6a:0e:a9:
         d8:3e:6b:36:62:4e:96:2c:b4:e8:c6:22:15:36:0e:44:2f:87:
         32:50:09:3f:2f:7a:81:8d:d6:ea:99:ae:d1:10:bc:78:ab:32:
         15:ad:20:d3:1b:57:6a:d2:d9:77:bd:0b:69:5b:b7:ec:1c:d0:
         09:77:75:5a:d8:4d:4d:30:67:7c:4b:88:3a:5a:8e:b9:8e:d7:
         f0:3c:7c:90:00:38:4a:1d:c2:a6:d3:80:bf:32:2d:a7:98:fe:
         3f:52:d7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:49 2024 by rpki-client on console-fra.rpki-client.org