Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File:                     k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier:          9KvMYdI9QAsAVuPAmdxOOGoXFbHRJpLkc/h2NA9+who=
Subject key identifier:   72:51:91:58:3F:F4:12:75:84:C9:BE:DC:68:4E:7E:51:FA:E1:DB:A4
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer:       /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial:       0190448A8EBD1824486C676709E9DD49F846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number:          11D7
Signing time:             Sun 23 Jun 2024 10:00:49 +0000
Manifest this update:     Sun 23 Jun 2024 10:00:49 +0000
Manifest next update:     Mon 24 Jun 2024 10:00:49 +0000
Files and hashes:         1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: bYOrBYbuCLlIJs8RZCQ4lt0DNNaRdLu8aCW7H05IJ1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:8e:bd:18:24:48:6c:67:67:09:e9:dd:49:f8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
        Validity
            Not Before: Jun 23 10:00:49 2024 GMT
            Not After : Jun 24 10:00:49 2024 GMT
        Subject: CN=725191583ff4127584c9bedc684e7e51fae1dba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:d4:8c:a2:b1:b3:13:c9:7e:07:a1:9b:31:
                    ff:94:d1:95:0e:d3:88:18:38:1a:e2:29:56:e7:05:
                    3e:90:bb:b5:e6:bb:2c:f0:17:74:ca:a4:74:3a:93:
                    4b:72:be:6f:fb:9d:9f:46:94:1a:ea:5c:fa:aa:e0:
                    12:0d:e0:99:ba:a5:3e:9b:02:02:88:8a:bb:0e:1f:
                    c3:ae:75:80:d3:21:25:7a:90:cc:14:8c:13:85:06:
                    4d:0c:07:cf:d2:16:90:60:ca:87:0c:d3:d6:f2:6d:
                    17:0d:d7:3b:04:70:c9:cc:0d:e9:a8:6e:21:85:36:
                    cf:af:72:a6:b9:16:ae:3f:46:24:08:55:d8:19:bd:
                    06:a1:09:5c:65:c3:8f:e4:4a:67:ac:34:97:cb:29:
                    9f:73:54:d9:38:d7:63:8f:ec:4f:fb:d6:ba:09:62:
                    bb:29:60:ce:79:e6:5f:9a:23:3c:22:ea:24:13:ce:
                    a0:68:13:10:5c:f1:6e:47:ea:01:54:cc:86:6d:ff:
                    a3:30:af:78:41:1a:ca:04:88:40:30:57:b0:a7:41:
                    23:e7:82:3d:ee:97:3e:ff:82:d6:d3:62:2d:8a:87:
                    df:66:14:b2:75:04:e5:1f:f2:ae:a6:d6:fe:63:04:
                    d5:71:1f:61:5c:03:96:d5:5d:2d:e8:3b:e6:e1:18:
                    c3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:91:58:3F:F4:12:75:84:C9:BE:DC:68:4E:7E:51:FA:E1:DB:A4
            X509v3 Authority Key Identifier:
                keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9e:23:03:cb:82:61:b3:7a:ce:bd:49:d5:96:64:89:cd:73:
         ca:f1:01:4d:41:9e:0d:a3:4f:59:b0:7f:7c:ea:27:b7:bd:88:
         4c:38:2e:a4:ba:68:5b:ce:82:7b:f1:8a:c3:a0:28:65:2a:45:
         01:a8:b8:38:94:32:fa:db:fa:0c:43:8c:cd:63:f2:a6:b2:80:
         95:50:b6:aa:fc:70:77:9d:5c:7b:4a:38:74:08:ff:af:e9:73:
         0f:04:e5:d1:06:94:e8:32:49:17:5a:45:12:ed:9e:33:e6:9a:
         49:79:6e:e4:91:5e:18:b0:7d:99:a8:da:75:fb:cb:24:d5:56:
         2b:62:4b:2a:40:01:69:52:15:03:b4:9b:e3:87:cb:40:f4:8f:
         96:dc:49:3b:1b:20:05:98:4a:3c:e3:49:9f:96:ee:89:0f:c2:
         d8:fe:c4:e3:f6:4a:9b:e0:75:5a:63:ee:10:4c:59:30:6c:0c:
         87:ed:be:cc:50:9f:c1:69:80:82:0c:c1:12:ac:4f:30:f0:d2:
         fb:5e:fa:63:f4:6e:35:43:77:bf:6d:5c:0f:54:2d:01:b9:e5:
         83:c6:6a:bb:c2:b1:f1:06:03:8f:d9:a5:7a:29:6b:dd:3e:fa:
         17:0e:a7:5e:46:42:9e:83:1f:57:cb:89:07:ef:df:66:c7:af:
         f6:bd:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:02:46 2024 by rpki-client on console-fra.rpki-client.org