Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft
File:                     A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft (raw, json)
Hash identifier:          UByEyqKZoKI8NXuhOy4VyiKHNuGpslwMgW3BICAtQUQ=
Subject key identifier:   0B:D7:28:C5:D4:11:8E:85:21:0D:A4:42:B0:0F:FA:E2:80:D4:AC:61
Authority key identifier: 03:74:64:80:36:83:B1:23:16:0D:1B:94:7C:17:C2:BF:C4:0E:D0:A7
Certificate issuer:       /CN=037464803683b123160d1b947c17c2bfc40ed0a7
Certificate serial:       01903472BDD4970D1F35EDA52A0550EF17C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft
Manifest number:          F8
Signing time:             Thu 20 Jun 2024 07:00:53 +0000
Manifest this update:     Thu 20 Jun 2024 07:00:53 +0000
Manifest next update:     Fri 21 Jun 2024 07:00:53 +0000
Files and hashes:         1: A3RkgDaDsSMWDRuUfBfCv8QO0Kc.crl (hash: j9zAmmmXmVxzNbMYGvL9cHfpHvCj3YL7sda+Ln0qt+Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:72:bd:d4:97:0d:1f:35:ed:a5:2a:05:50:ef:17:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037464803683b123160d1b947c17c2bfc40ed0a7
        Validity
            Not Before: Jun 20 07:00:53 2024 GMT
            Not After : Jun 21 07:00:53 2024 GMT
        Subject: CN=0bd728c5d4118e85210da442b00ffae280d4ac61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:4d:f6:ec:81:a0:c0:5e:fc:2b:dc:fd:ee:
                    3b:06:94:d6:39:85:17:d5:2a:6d:18:8c:09:cc:e6:
                    9f:e6:34:3a:84:92:98:57:1e:3d:71:dd:7b:71:d3:
                    f3:56:74:fa:16:6a:a6:f6:ac:82:bf:af:4d:77:51:
                    43:7d:15:b6:55:61:5d:2e:b9:b2:b7:04:ea:55:e8:
                    5f:91:98:b4:3b:42:79:ca:ca:ec:da:9d:87:a5:61:
                    4d:e3:79:93:a6:7a:b1:e7:e9:7f:c3:5f:9b:16:55:
                    87:a3:ea:9b:24:53:5b:e6:c5:3d:9f:7c:19:16:42:
                    82:84:ad:66:1e:f7:20:c3:39:3f:0f:69:ef:7e:86:
                    8e:a7:7d:75:7d:9d:07:89:10:9c:7e:f8:a1:ca:7e:
                    7f:ee:3d:8d:33:7c:ef:20:fb:ea:dc:0d:da:71:f8:
                    56:64:7b:fc:62:9b:50:7d:cc:16:fc:63:d0:7e:d0:
                    9b:e9:d8:52:ab:f6:c0:56:cd:6f:d4:6c:e0:02:c0:
                    ec:8c:22:56:10:74:c8:ea:c0:e9:61:d9:61:e5:d0:
                    c3:cd:ea:79:6c:97:c5:07:50:23:53:79:ab:3c:0f:
                    1c:7f:b6:96:36:8e:38:7a:8f:3f:24:bc:ae:11:43:
                    ae:0a:44:ce:83:a1:b1:4a:d7:88:a5:35:80:8b:aa:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D7:28:C5:D4:11:8E:85:21:0D:A4:42:B0:0F:FA:E2:80:D4:AC:61
            X509v3 Authority Key Identifier:
                keyid:03:74:64:80:36:83:B1:23:16:0D:1B:94:7C:17:C2:BF:C4:0E:D0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:86:22:db:da:2b:d2:68:55:64:70:a0:60:43:01:b4:9f:07:
         ed:5a:a9:32:20:80:40:49:f3:fa:27:0d:87:7a:c4:31:43:bb:
         02:fc:ee:8e:f7:24:ca:8c:dd:61:27:43:af:e8:9b:f4:a5:4c:
         eb:76:8c:39:cb:d6:09:49:19:88:33:61:6e:09:87:ac:9f:de:
         91:d2:60:4c:ff:a5:0d:77:78:ab:b5:ff:aa:ce:cd:87:08:77:
         39:83:73:da:a3:37:a1:fa:e6:57:f2:2c:f7:d8:83:31:fb:4f:
         02:6d:1b:36:91:f5:9d:39:3f:aa:a1:bd:bb:c1:91:3d:dc:67:
         65:94:b3:c0:62:32:3d:a9:1c:87:bb:4b:3e:c9:20:e4:d4:c4:
         7b:3e:ce:46:91:06:eb:6a:37:73:36:d9:21:79:6b:41:6c:35:
         62:88:e8:0e:2a:4d:19:ce:bc:5a:45:02:9a:04:5b:d8:d5:41:
         bd:62:ce:87:2e:57:f1:4e:78:82:42:37:1f:ff:39:25:3f:91:
         7e:62:42:0e:e9:ba:b8:d3:65:a2:05:b4:6d:14:c9:fb:6d:db:
         03:ff:ab:19:05:51:96:6f:88:08:a0:10:12:24:7c:f8:81:89:
         7d:41:f5:9c:89:39:c7:4c:d3:d7:23:be:b3:78:1b:1d:d8:b6:
         e2:d9:29:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:22:28 2024 by rpki-client on console-fra.rpki-client.org