Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File:                     u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier:          TPfaA6T/bB+PeMe3KVbqboVmTKs4wnKdy9By1oQpBL4=
Subject key identifier:   48:79:43:D6:BB:63:08:91:44:3B:C1:B1:1D:67:62:72:CC:17:CE:30
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer:       /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial:       01901E21C3C8FE21BD0AF6767084CE75E8AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number:          EA
Signing time:             Sat 15 Jun 2024 23:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:47 +0000
Files and hashes:         1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: 1hc/1QKCfEvM2sLALWpLDyWEXFWYhCyaHynI44hbrqk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:c3:c8:fe:21:bd:0a:f6:76:70:84:ce:75:e8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
        Validity
            Not Before: Jun 15 23:00:47 2024 GMT
            Not After : Jun 16 23:00:47 2024 GMT
        Subject: CN=487943d6bb630891443bc1b11d676272cc17ce30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:95:5e:d8:e7:3b:8d:2c:63:18:d2:19:de:
                    36:92:d6:4c:b4:41:9e:6b:e4:25:be:c9:f4:2f:9d:
                    a5:50:e1:01:61:a7:42:84:58:6d:7d:02:ac:45:ba:
                    34:c3:ec:5d:60:58:cd:39:9e:30:56:d7:30:b1:84:
                    53:a2:c0:6b:7b:df:75:8b:db:4f:6d:21:8e:cb:52:
                    78:6a:da:61:c3:1d:12:d5:68:f8:8c:bb:13:40:6f:
                    88:4b:17:c0:d1:ac:7e:85:d6:3c:7c:ae:94:1e:09:
                    1f:ae:ec:43:65:13:92:be:77:67:c5:88:a6:a4:88:
                    03:47:69:88:53:d9:61:0b:2e:a8:e1:0b:3a:68:11:
                    35:03:5d:18:c3:a6:6c:a0:54:3a:1c:4f:e8:b7:5e:
                    8b:ea:1c:8d:b9:80:59:22:7d:6e:0c:e3:56:23:c9:
                    ce:9c:10:e2:e5:27:da:b9:f4:0a:27:02:21:60:7a:
                    af:af:10:e8:3a:45:3b:e2:3b:58:d0:7f:84:45:bc:
                    09:a2:c5:fd:2a:68:b6:f6:16:20:9c:9e:d4:ee:ea:
                    d3:4d:32:de:e2:bf:9d:b8:2f:60:5b:16:85:7e:bb:
                    7b:12:41:14:da:9a:c7:65:5b:10:46:0c:be:2f:51:
                    8d:78:fb:56:d0:73:57:e5:0d:96:08:6b:e4:14:e0:
                    68:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:43:D6:BB:63:08:91:44:3B:C1:B1:1D:67:62:72:CC:17:CE:30
            X509v3 Authority Key Identifier:
                keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6a:ec:2e:78:86:0f:be:67:7c:7d:a6:68:de:aa:4c:ea:39:
         ac:4d:6e:39:1c:32:d9:90:71:0e:23:25:e4:52:3f:63:e2:d4:
         b2:18:00:b8:8f:4a:40:6f:ab:d9:e8:06:72:76:d0:74:74:be:
         d7:d6:74:be:d2:d9:b7:89:d9:d2:ac:91:63:d4:29:e1:c2:6a:
         5e:05:55:61:0b:1a:09:9b:5e:1a:a6:07:83:ed:21:32:ad:ee:
         b8:fb:6f:37:6d:49:07:11:d7:19:bb:30:75:8f:ca:06:8d:71:
         f4:d1:77:30:dd:75:31:0e:4b:da:7e:fa:fd:6c:57:41:40:d9:
         e7:bb:a6:00:03:26:d3:ea:3b:0b:aa:c9:6b:30:21:d5:82:06:
         de:31:9d:9c:54:88:d2:0d:f1:6b:2e:e6:c0:fe:89:b1:f7:20:
         e0:f8:50:0c:f3:56:62:93:97:b9:c7:c1:91:c3:79:63:03:31:
         21:ff:88:24:ff:75:0b:ae:8d:8e:1a:ab:51:15:fe:a5:ce:24:
         0b:b7:f4:d5:75:a9:9e:4f:a4:60:66:a8:d7:50:ff:f8:93:d1:
         84:b5:b2:5f:d7:bc:75:31:dd:b9:4d:e2:e4:63:ff:16:c3:3b:
         af:8b:0e:cc:b7:92:a7:7e:ac:9d:e2:5b:ea:1b:f2:db:af:81:
         6a:8c:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:40 2024 by rpki-client on console-fra.rpki-client.org