Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3b2455-fff3-4bda-9878-29cec2795cb3/1/IuLzU0dX2TkI2kF5ncJhNQYUrkY.mft
File:                     IuLzU0dX2TkI2kF5ncJhNQYUrkY.mft (raw, json)
Hash identifier:          qyR+2NqF4qOFQWXitfq/zvBI/4tbve6GWfjtng9/jUQ=
Subject key identifier:   C7:2B:B0:FF:9D:BB:7E:F4:58:D8:C9:82:8D:14:8C:93:55:7D:3C:AF
Authority key identifier: 22:E2:F3:53:47:57:D9:39:08:DA:41:79:9D:C2:61:35:06:14:AE:46
Certificate issuer:       /CN=22e2f3534757d93908da41799dc261350614ae46
Certificate serial:       01901DEAF6FE16C84B76F72D932BEEC1BF43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IuLzU0dX2TkI2kF5ncJhNQYUrkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3b2455-fff3-4bda-9878-29cec2795cb3/1/IuLzU0dX2TkI2kF5ncJhNQYUrkY.mft
Manifest number:          025B
Signing time:             Sat 15 Jun 2024 22:00:56 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:56 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:56 +0000
Files and hashes:         1: IuLzU0dX2TkI2kF5ncJhNQYUrkY.crl (hash: mc8gy6xIl8wKOJhVfqA2g+jSubUoSvNCqD0U6Gnxhlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3b2455-fff3-4bda-9878-29cec2795cb3/1/IuLzU0dX2TkI2kF5ncJhNQYUrkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3b2455-fff3-4bda-9878-29cec2795cb3/1/IuLzU0dX2TkI2kF5ncJhNQYUrkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IuLzU0dX2TkI2kF5ncJhNQYUrkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:f6:fe:16:c8:4b:76:f7:2d:93:2b:ee:c1:bf:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e2f3534757d93908da41799dc261350614ae46
        Validity
            Not Before: Jun 15 22:00:56 2024 GMT
            Not After : Jun 16 22:00:56 2024 GMT
        Subject: CN=c72bb0ff9dbb7ef458d8c9828d148c93557d3caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:82:ca:4d:f6:d0:79:19:fe:45:c9:5d:e5:
                    68:04:cf:88:19:32:45:8c:a6:57:45:01:33:13:46:
                    61:98:c0:66:d1:42:cb:fc:e3:a2:dc:e4:25:1e:1d:
                    07:cc:39:4f:77:34:8b:87:dc:e2:b7:11:da:fc:35:
                    68:e4:e1:42:77:95:2c:a7:27:79:8c:71:d7:4a:61:
                    b8:11:5b:96:12:e4:ef:29:37:e1:1d:92:c5:b7:77:
                    1c:d1:dd:3e:a9:07:e0:ae:04:41:b8:d8:f3:1d:94:
                    14:e9:28:46:23:f5:8b:9d:89:bd:b6:21:9f:5d:c0:
                    fa:9a:24:bc:6e:53:f8:ca:01:4f:c6:d7:bc:18:8d:
                    0a:df:fe:48:df:22:35:fe:46:61:95:28:48:e1:54:
                    16:5f:e8:c6:51:96:e2:62:0c:d4:a0:8a:93:d8:d1:
                    e9:9b:81:87:20:1f:93:31:03:db:01:af:04:8b:0a:
                    40:21:3b:88:c5:b9:04:4a:ed:af:01:64:39:a1:7c:
                    af:d1:2e:71:24:76:f6:7b:08:94:d2:2a:9a:c8:4f:
                    d3:a3:4a:8f:30:4f:c5:8b:61:f5:22:55:d1:7a:9d:
                    76:c4:8b:4a:7b:c9:b7:cb:ab:89:e9:4b:19:b6:1d:
                    13:f5:be:60:db:39:56:58:ca:2e:65:9a:c2:b2:11:
                    b1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2B:B0:FF:9D:BB:7E:F4:58:D8:C9:82:8D:14:8C:93:55:7D:3C:AF
            X509v3 Authority Key Identifier:
                keyid:22:E2:F3:53:47:57:D9:39:08:DA:41:79:9D:C2:61:35:06:14:AE:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuLzU0dX2TkI2kF5ncJhNQYUrkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3b2455-fff3-4bda-9878-29cec2795cb3/1/IuLzU0dX2TkI2kF5ncJhNQYUrkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3b2455-fff3-4bda-9878-29cec2795cb3/1/IuLzU0dX2TkI2kF5ncJhNQYUrkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c8:6d:56:b8:17:25:1c:1d:70:0b:3e:91:8a:3f:01:36:38:
         4a:cc:b0:ce:be:9e:2c:69:f8:5a:7c:22:22:13:a8:13:97:78:
         96:9e:d3:5b:ee:23:81:46:70:e2:94:7c:9a:6b:bd:23:ba:ec:
         3b:53:72:b0:cb:91:24:c7:6b:3c:05:70:21:74:b6:04:4a:97:
         d5:36:82:cc:17:9f:ef:17:62:92:2f:c3:7d:91:f5:01:67:c7:
         62:79:68:fb:27:fa:81:d7:59:71:ed:46:04:eb:f1:f2:b3:59:
         0a:94:3f:37:b0:13:43:6a:be:fa:24:07:6b:97:e1:c4:58:0a:
         1c:11:81:04:f9:d1:6d:a6:f8:68:af:4c:94:28:46:82:5f:d4:
         58:02:61:d6:34:36:a7:54:fa:24:1c:e4:c6:b1:44:c2:48:23:
         ff:6a:36:bb:0f:ba:38:e5:e8:25:a2:e1:71:a7:e9:17:8d:3c:
         8e:c4:99:69:cf:88:17:4e:da:45:3b:86:aa:45:d8:7f:93:c2:
         d5:41:11:49:95:79:f8:e5:26:7d:0e:71:44:a7:a9:6f:55:c0:
         f6:75:4f:d1:0f:38:4f:46:c3:29:f7:05:5e:be:12:6c:50:a0:
         06:eb:5d:b1:a5:be:73:2c:aa:0a:92:a0:80:4a:8b:60:e0:e5:
         8a:07:1b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:27 2024 by rpki-client on console-fra.rpki-client.org