Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
File:                     H83UEOElAi3gfKWWP5L3jo-JSG4.mft (raw, json)
Hash identifier:          Unk4/Jeoz3GBx87vPFunNHKQ+O9miwebnexhztkK8ek=
Subject key identifier:   B8:A5:E4:6C:DB:4C:60:EE:34:46:51:F4:77:14:52:3D:23:7F:9F:6A
Authority key identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
Certificate issuer:       /CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Certificate serial:       01901A7C74D3466E6585FCEF25BFABFE5F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
Manifest number:          11C0
Signing time:             Sat 15 Jun 2024 06:01:22 +0000
Manifest this update:     Sat 15 Jun 2024 06:01:22 +0000
Manifest next update:     Sun 16 Jun 2024 06:01:22 +0000
Files and hashes:         1: H83UEOElAi3gfKWWP5L3jo-JSG4.crl (hash: b6ujPQggVbdOpaSFqQWmcxBeNCxspadduxoP9rep3lY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:7c:74:d3:46:6e:65:85:fc:ef:25:bf:ab:fe:5f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fcdd410e125022de07ca5963f92f78e8f89486e
        Validity
            Not Before: Jun 15 06:01:22 2024 GMT
            Not After : Jun 16 06:01:22 2024 GMT
        Subject: CN=b8a5e46cdb4c60ee344651f47714523d237f9f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:47:7a:93:86:c7:82:0c:bd:a4:85:dd:e3:
                    5c:eb:86:53:0d:72:5b:bf:56:ad:ae:5d:bc:f4:79:
                    3f:9a:11:00:c4:df:2b:29:ef:92:a9:3f:e6:9f:b2:
                    b7:d3:a9:89:d4:9c:7b:2f:5b:28:af:92:b3:0b:a5:
                    89:92:fd:19:98:73:91:54:d5:97:cb:2c:7d:ff:9a:
                    23:7e:50:5c:9a:0f:94:0f:41:9d:cc:e3:5b:be:5f:
                    ec:c6:67:9c:7f:76:ba:de:7e:6a:df:85:cb:0f:75:
                    21:5a:99:7b:f6:c4:62:d9:34:7c:1e:58:63:ae:59:
                    95:7b:8c:cd:89:ec:ae:08:d2:6e:8d:60:26:66:b9:
                    e3:d0:ec:91:1c:64:01:17:06:27:7d:0a:19:b4:bc:
                    10:fa:17:5c:fa:84:5d:ef:a3:ac:41:9a:e3:da:5e:
                    db:b3:56:42:a1:4d:51:d1:cc:50:b1:a9:b7:6f:86:
                    3f:3f:b0:bd:12:81:d5:4d:5b:86:ef:db:fb:91:ef:
                    e4:a3:98:22:da:2e:52:89:08:62:84:41:36:b7:0c:
                    5f:42:fc:04:cf:b8:db:21:d1:d3:76:85:e6:a4:84:
                    4e:5c:50:55:83:3a:b5:85:69:c5:13:56:c9:88:e7:
                    b2:47:d2:79:d8:b1:91:ed:ef:10:86:62:44:7d:58:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A5:E4:6C:DB:4C:60:EE:34:46:51:F4:77:14:52:3D:23:7F:9F:6A
            X509v3 Authority Key Identifier:
                keyid:1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3a:88:7b:1e:cd:c2:12:55:e5:3a:7f:d5:5b:06:80:70:7b:
         a4:19:5d:f8:72:45:11:7c:3c:29:8c:17:ec:11:37:a3:93:21:
         14:85:08:97:0a:bd:0f:3c:10:8e:99:8f:f3:da:a1:de:f6:a1:
         7a:cb:12:e4:40:c8:58:2c:b0:5b:ef:39:12:d9:61:e5:72:be:
         99:31:f0:c1:c9:6b:13:4c:33:71:d6:91:24:87:6e:12:bb:2c:
         b1:a5:07:9e:31:3d:e1:48:2d:ac:63:8c:d8:54:dd:36:25:d4:
         2e:1a:9a:6a:c8:be:16:45:a4:c0:fa:45:b0:82:ff:d8:81:96:
         c3:28:8e:e5:72:0a:99:74:10:d2:cb:b9:a4:52:7a:57:93:33:
         4c:f5:90:a3:30:5d:b6:47:a4:12:51:49:b1:49:3c:4c:53:b7:
         bf:97:9d:3d:45:5a:a2:8d:71:60:a6:94:80:00:2e:2e:64:75:
         f5:72:89:55:a8:a0:42:e0:fd:43:da:59:64:e5:f4:c6:cf:dd:
         88:00:c4:8d:78:09:e7:ff:52:bf:ac:72:2c:0e:48:b3:59:68:
         2b:36:e0:09:c7:16:b5:87:41:b1:08:56:cd:bd:40:8a:bf:eb:
         66:e3:c5:c4:5f:0e:33:90:9d:36:8a:77:23:52:e8:d8:52:69:
         a9:12:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:09:45 2024 by rpki-client on console-ams.rpki-client.org