Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File:                     ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier:          Q/QoiVEIyVkb6u0wIL5ac7/WKD7ID24YpOCPrZihY70=
Subject key identifier:   8D:3A:2E:EE:BB:1D:BB:46:09:E3:9F:19:88:EC:68:F9:71:38:FB:46
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer:       /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial:       01903404BB7ACF86F466EB268A503D6B5E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number:          0AAA
Signing time:             Thu 20 Jun 2024 05:00:43 +0000
Manifest this update:     Thu 20 Jun 2024 05:00:43 +0000
Manifest next update:     Fri 21 Jun 2024 05:00:43 +0000
Files and hashes:         1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: gowjsp6mphxEkQ8RW+p/SKEihhle4Br7AeTaRmZjihU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:04:bb:7a:cf:86:f4:66:eb:26:8a:50:3d:6b:5e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
        Validity
            Not Before: Jun 20 05:00:43 2024 GMT
            Not After : Jun 21 05:00:43 2024 GMT
        Subject: CN=8d3a2eeebb1dbb4609e39f1988ec68f97138fb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:72:f3:e5:64:be:45:84:9c:1b:06:73:b5:
                    17:d0:f0:0d:22:af:cd:e9:e7:84:ad:70:61:06:91:
                    56:44:ef:a4:b6:69:08:cb:d5:91:b0:f6:a6:bf:22:
                    20:1d:2a:ca:a0:55:e0:b8:ec:79:29:1d:9d:b3:f3:
                    0f:9f:f1:2b:55:5b:9e:30:cc:e8:33:41:eb:48:15:
                    13:44:9c:c9:00:db:6c:53:d8:f0:04:50:37:5d:bf:
                    59:b7:79:08:ac:8d:04:2b:65:c0:4d:6d:5a:27:b7:
                    b6:ba:a8:91:93:9f:78:95:79:90:04:c6:08:dd:aa:
                    06:4d:fa:ae:be:30:7a:ab:08:d9:80:7d:b9:26:85:
                    f8:ab:3a:aa:79:49:1b:5f:83:0e:4e:8d:50:60:85:
                    dc:97:e5:b2:2c:85:b4:ea:cb:5e:cf:2d:26:55:a2:
                    2a:52:f5:40:26:e3:fa:40:db:fb:fe:bb:b6:7d:f8:
                    43:53:c0:74:7e:d9:79:12:a7:ec:50:65:cf:e6:7e:
                    c7:5c:52:17:b1:02:48:2d:be:3c:44:72:b2:a5:4d:
                    c0:e6:42:f3:e0:62:36:9f:38:f6:ce:13:66:4b:2e:
                    23:c1:74:b2:e8:2d:30:35:35:01:37:83:3b:6e:96:
                    34:09:f6:c5:9a:c9:81:47:e5:67:51:25:61:a3:02:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3A:2E:EE:BB:1D:BB:46:09:E3:9F:19:88:EC:68:F9:71:38:FB:46
            X509v3 Authority Key Identifier:
                keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:01:e3:15:ec:a9:b0:7f:c8:78:20:81:d5:1f:2f:48:57:7b:
         5f:8b:5f:4d:53:39:35:5c:a6:56:dd:42:cc:53:1d:a8:74:c0:
         ae:cc:9e:4d:1c:e2:fa:ac:ee:7a:68:84:39:92:b6:93:c5:63:
         59:e2:5f:fd:2f:61:25:d0:e4:c9:03:c4:8e:0b:f8:be:6b:46:
         26:52:b9:05:b2:de:89:3e:64:76:bf:ee:13:3a:95:83:14:4b:
         6d:c8:43:2c:53:91:f8:12:8b:f1:f9:d3:f3:94:da:e7:60:e3:
         59:27:76:41:f8:ad:b8:e1:f9:dd:bd:a0:2b:58:46:88:b2:9f:
         97:b6:71:fd:10:f8:f1:81:2c:83:95:81:06:a4:cb:82:1f:7b:
         ee:fb:a3:96:3a:04:48:49:2d:ff:f6:c5:87:5b:e2:10:bc:f3:
         80:66:cc:50:79:dd:bf:a4:a5:65:db:7f:fd:58:4e:3c:cc:ec:
         d8:0a:7b:6b:b3:84:ca:5d:06:ed:5e:88:54:4c:02:3d:76:71:
         b6:72:6a:8a:46:eb:25:2b:9c:64:0b:65:8c:dd:73:2a:c1:ad:
         19:a0:f7:69:e8:e3:39:c8:01:12:e8:ce:20:d0:92:42:e6:9a:
         cc:10:8c:5d:e7:a0:e5:e4:c7:9b:65:7c:08:ff:f3:d5:9b:b9:
         23:60:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 15:11:40 2024 by rpki-client on console-ams.rpki-client.org