Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft
File:                     7UHARIMai6EJ1CYpau5lONy1S2M.mft (raw, json)
Hash identifier:          LiPR1IHnV3zXn1XIVspuF94dcsseHRE9vtQIluVeulQ=
Subject key identifier:   89:80:93:BC:F3:68:90:BE:01:6B:0E:A2:B7:4C:93:0B:95:0A:21:27
Authority key identifier: ED:41:C0:44:83:1A:8B:A1:09:D4:26:29:6A:EE:65:38:DC:B5:4B:63
Certificate issuer:       /CN=ed41c044831a8ba109d426296aee6538dcb54b63
Certificate serial:       0190448C1CABFAB447FF22AA9077C8BA220F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UHARIMai6EJ1CYpau5lONy1S2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft
Manifest number:          02D8
Signing time:             Sun 23 Jun 2024 10:02:31 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:31 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:31 +0000
Files and hashes:         1: 7UHARIMai6EJ1CYpau5lONy1S2M.crl (hash: fTBtmuJQprt9pVWpyaIYElXkD+FZwBI8gQ9Es3wzADw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UHARIMai6EJ1CYpau5lONy1S2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:1c:ab:fa:b4:47:ff:22:aa:90:77:c8:ba:22:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed41c044831a8ba109d426296aee6538dcb54b63
        Validity
            Not Before: Jun 23 10:02:31 2024 GMT
            Not After : Jun 24 10:02:31 2024 GMT
        Subject: CN=898093bcf36890be016b0ea2b74c930b950a2127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:f3:e0:7a:f1:cc:8f:e3:9c:91:7c:8b:fc:
                    6b:cc:e9:28:3f:2f:bc:09:cf:19:dc:55:95:39:de:
                    76:c5:88:d4:3a:d4:d0:e1:1d:61:44:ea:56:ad:eb:
                    7b:35:d1:c5:fa:5b:c5:0a:69:48:0b:07:18:82:f1:
                    1d:ee:ab:dc:20:8e:6f:fd:f1:e5:d9:94:c8:42:d4:
                    71:ed:c3:3d:fd:1e:44:6b:a6:ca:6b:29:c0:7d:3c:
                    fa:95:db:e5:55:af:61:c7:a0:2b:53:dc:c2:de:d2:
                    fe:e9:77:da:5f:c1:a6:da:08:d2:51:09:d3:04:89:
                    01:ac:5c:52:42:56:f1:7e:f5:6a:52:0b:ed:79:b0:
                    ff:94:ea:ab:74:05:43:22:38:90:a8:69:ea:5c:55:
                    f4:74:57:ac:78:f8:97:2c:39:b3:64:0a:bd:a6:8f:
                    85:f1:32:3b:6f:46:f7:8a:ca:22:33:3b:a7:cb:1c:
                    ec:6d:c6:7b:9e:de:26:2b:6c:dc:85:2b:47:d2:1f:
                    79:e1:3a:02:2d:0e:cc:a3:fd:04:1b:90:cc:99:40:
                    32:a3:39:b0:96:35:48:c5:1c:39:f1:5f:ec:a2:7c:
                    1c:98:a7:0b:37:2c:4f:57:40:03:3d:fc:35:fd:eb:
                    d3:13:5d:4e:f3:b5:b8:e9:9c:c5:4e:16:d8:fd:9d:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:80:93:BC:F3:68:90:BE:01:6B:0E:A2:B7:4C:93:0B:95:0A:21:27
            X509v3 Authority Key Identifier:
                keyid:ED:41:C0:44:83:1A:8B:A1:09:D4:26:29:6A:EE:65:38:DC:B5:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UHARIMai6EJ1CYpau5lONy1S2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:90:99:f5:77:6e:a9:91:d7:7a:59:91:61:df:a6:40:5d:
         db:e6:70:d8:29:15:77:29:7b:32:f3:a1:6c:d2:5f:87:95:f5:
         20:38:bd:4c:b4:fb:b4:9d:4e:40:80:c5:20:e7:45:d0:dd:35:
         0e:c4:cc:72:39:10:1f:bc:c5:40:bb:0c:50:27:24:7b:cb:69:
         ba:d8:1c:62:e9:71:50:da:40:db:fe:c4:94:78:5e:03:a1:ca:
         a0:7a:4a:5a:4d:20:1c:c5:46:69:d8:3b:09:3e:4e:ef:bf:27:
         71:77:77:d4:cb:63:cc:a6:1d:0e:2d:7a:21:0c:c2:84:fe:57:
         b3:4b:de:cc:8e:3f:67:15:b2:35:be:dc:f8:d7:1c:87:11:e3:
         e5:8f:92:e4:4d:74:f0:50:88:c5:5d:43:3e:17:dd:77:66:cd:
         ed:46:c5:f5:db:0e:49:8c:92:18:40:97:c1:64:79:c2:4b:8f:
         24:a3:f4:df:2b:5b:d0:57:94:1b:78:6f:57:c4:99:65:b3:57:
         75:bc:d2:28:b2:12:93:79:01:ab:c5:8e:11:e1:f5:10:dd:88:
         6b:33:1a:21:ae:7d:08:77:49:1f:bc:e9:02:07:04:2f:98:70:
         ec:a2:23:d2:3e:b6:c0:ef:20:25:78:b6:52:82:33:1c:b0:3f:
         ed:c6:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:47:48 2024 by rpki-client on console-ams.rpki-client.org