Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File:                     ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier:          z8YuQoO/GWzWqK5MQvEcZep7rPMXQTi43zwQ777GEQE=
Subject key identifier:   A1:A5:8D:B6:A7:EF:C2:5D:8C:01:5B:73:EF:D1:28:BF:C1:3D:14:4C
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer:       /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial:       01901CD879CA81F299A35E356992173015B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number:          0A9E
Signing time:             Sat 15 Jun 2024 17:01:07 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:07 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:07 +0000
Files and hashes:         1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: UDpCLniQBB7O5v03whFz8NVpfvB3Se0c6wV7GbGrVZ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:79:ca:81:f2:99:a3:5e:35:69:92:17:30:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
        Validity
            Not Before: Jun 15 17:01:07 2024 GMT
            Not After : Jun 16 17:01:07 2024 GMT
        Subject: CN=a1a58db6a7efc25d8c015b73efd128bfc13d144c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:46:4f:76:e1:51:69:40:0a:7d:4c:1b:28:
                    86:03:ed:88:30:f3:15:9f:76:68:bb:36:30:2b:72:
                    71:4c:ba:cc:64:ec:20:54:bb:0d:65:32:d4:2c:80:
                    bf:40:83:17:0d:dc:93:50:84:43:77:d0:0a:e2:ec:
                    26:c0:3a:44:e7:f3:62:f9:8d:62:24:bd:45:43:bf:
                    1b:bf:c6:a0:39:b9:19:5f:f3:d1:a2:2f:dc:6d:d7:
                    20:fa:2a:a1:e4:c5:bc:ab:37:84:bd:c1:1b:ae:62:
                    93:64:01:47:3b:9b:4c:b5:ef:b8:62:b8:96:48:d2:
                    d7:20:09:98:aa:2f:ac:66:94:49:df:49:4f:d8:7f:
                    e9:17:d1:92:e3:9f:db:a9:31:b2:af:4e:ce:f5:ee:
                    b8:1b:7b:18:da:94:46:b7:7f:27:00:ea:97:f7:8b:
                    5d:ca:c8:2a:b4:bd:d9:81:5a:e4:7c:45:4f:0a:e2:
                    e3:fd:8d:e0:b9:92:95:14:46:16:46:9c:84:d8:db:
                    5f:69:df:06:69:90:b0:63:aa:a7:73:1b:7b:7c:38:
                    58:cb:d3:53:96:5e:0a:3f:27:a1:06:cf:2c:06:f4:
                    48:d1:32:b2:3e:e6:da:fd:80:7c:66:d3:12:3c:b8:
                    58:77:7f:97:95:86:6d:d4:fa:a1:c3:91:cd:80:bc:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A5:8D:B6:A7:EF:C2:5D:8C:01:5B:73:EF:D1:28:BF:C1:3D:14:4C
            X509v3 Authority Key Identifier:
                keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:11:4c:6e:fe:92:89:dc:6e:4f:5b:7a:11:f7:6d:f9:14:b7:
         da:29:bc:41:61:9c:09:f4:e0:12:50:b2:93:88:c9:e6:1e:e4:
         a7:68:41:e9:4b:65:e1:63:17:34:91:da:f1:58:c3:18:01:90:
         ef:4c:4b:05:c7:8e:1e:9f:02:58:26:12:62:b6:72:5b:69:ac:
         5f:c2:d1:c7:9b:70:95:91:3b:eb:4e:e9:d0:d0:93:d1:32:ee:
         60:44:5f:96:06:00:16:4e:2d:13:64:15:c6:a5:10:bd:68:91:
         4f:70:e6:aa:da:21:a6:00:d5:66:bc:c8:d4:f4:5b:f6:3b:df:
         f1:ab:89:67:ce:37:28:90:c5:d9:e7:e5:36:95:c9:68:54:8d:
         46:3d:f2:ce:22:e1:d7:35:4c:e1:16:04:a6:ca:fd:23:4e:1d:
         f7:b0:7c:a7:8e:90:78:30:b9:d2:6e:dc:6c:e4:26:33:95:49:
         54:04:ba:1f:f8:bb:a3:3f:d9:84:d7:21:53:0e:4b:29:46:22:
         c7:a8:f6:42:d0:cf:ba:3e:d3:82:58:43:13:13:0c:cc:40:93:
         f5:04:61:c4:30:9d:30:98:01:0a:40:05:4a:fb:bd:c3:6f:7f:
         06:b5:b1:8d:f2:aa:2c:97:25:31:e8:88:10:ea:16:b9:40:83:
         b9:d1:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:32:46 2024 by rpki-client on console-fra.rpki-client.org