Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
File:                     sUIEOsH4lSfPigbXJijjaYM8grE.mft (raw, json)
Hash identifier:          cUxtWJfqKhA9WuOztuDv3QMIjwPwdVUEkeZTt6yk4X8=
Subject key identifier:   28:8F:93:FD:1C:46:54:9B:88:D0:82:EE:97:A3:84:A9:13:73:84:C6
Authority key identifier: B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1
Certificate issuer:       /CN=b142043ac1f89527cf8a06d72628e369833c82b1
Certificate serial:       01901E591B3FB4503434A01921F481170B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
Manifest number:          0639
Signing time:             Sun 16 Jun 2024 00:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:14 +0000
Files and hashes:         1: sUIEOsH4lSfPigbXJijjaYM8grE.crl (hash: gZPOKu98E1JQq/0X8uaXgVrsY5T2wcJ6yCwlO8UaEoU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:1b:3f:b4:50:34:34:a0:19:21:f4:81:17:0b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b142043ac1f89527cf8a06d72628e369833c82b1
        Validity
            Not Before: Jun 16 00:01:14 2024 GMT
            Not After : Jun 17 00:01:14 2024 GMT
        Subject: CN=288f93fd1c46549b88d082ee97a384a9137384c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:e8:9d:a5:6a:61:41:b6:f6:05:77:14:6e:
                    7d:a7:a2:96:3a:90:0c:04:2b:a7:77:3a:d1:4c:bb:
                    7f:ef:24:d8:d0:58:aa:4f:f1:63:ae:de:bb:39:1f:
                    de:62:01:18:8a:02:c2:ed:58:1e:0a:6b:be:8b:0b:
                    7a:e6:94:96:1b:04:8f:e8:90:89:75:8b:3c:98:60:
                    29:03:07:4c:0d:e6:99:8d:29:ab:ea:74:06:2a:4a:
                    4c:f8:d4:2b:1b:07:4b:3f:f3:f2:f2:39:3f:b6:0f:
                    43:b3:c0:1e:46:34:9b:5d:1d:b9:cd:23:b5:33:c8:
                    6c:50:9d:79:d0:ca:f7:c3:06:e9:1b:13:f7:10:b8:
                    7c:57:22:ae:62:9a:af:0e:19:e1:05:e5:8c:21:5c:
                    f2:4d:ce:23:f6:49:8a:df:d4:61:97:6b:a1:e5:90:
                    7d:13:77:5a:08:a8:7b:69:bf:33:71:55:0f:a2:49:
                    41:0f:2a:8e:04:86:91:9b:30:cb:e3:7e:7f:cf:3a:
                    59:ed:50:56:f0:26:78:7c:5a:3b:4f:e3:1f:66:04:
                    aa:36:d1:89:2d:fc:ae:09:29:9c:1c:62:d6:29:d0:
                    36:01:89:c0:81:10:99:2a:db:0a:5b:79:d4:6b:da:
                    3a:36:5e:71:8e:d6:5a:80:b6:b8:aa:7f:be:89:04:
                    27:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8F:93:FD:1C:46:54:9B:88:D0:82:EE:97:A3:84:A9:13:73:84:C6
            X509v3 Authority Key Identifier:
                keyid:B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c2:bb:db:b6:28:bc:1e:f6:ef:cd:54:47:81:61:11:a0:7f:
         bb:b2:7b:b1:88:7c:57:65:fa:07:01:63:ea:79:38:da:b6:dc:
         16:95:52:5f:0d:5b:4e:56:af:e9:d5:82:24:73:ad:99:9c:85:
         41:88:c2:aa:46:13:76:1f:ab:89:74:0f:07:32:66:c7:d8:a2:
         1b:3c:a6:c7:76:38:e4:35:b6:df:c9:22:67:d5:7b:0d:ac:53:
         eb:52:4e:0d:2a:45:83:c7:a1:e4:39:cc:1b:fe:73:b5:2b:95:
         df:e4:f3:2c:59:92:66:61:f9:c5:a5:56:75:4c:a8:3c:38:27:
         a1:b7:51:09:de:0f:90:b7:d8:86:6f:7f:df:2b:9b:41:89:4c:
         12:9f:64:3b:77:7a:88:57:14:06:a8:0f:d9:c2:b6:16:c5:16:
         08:48:cc:42:0c:c7:9a:b1:b2:1b:4f:75:d8:2a:ad:ff:db:b3:
         71:50:5d:a5:24:1e:3a:cf:1d:d1:20:a6:2c:65:89:70:ca:4d:
         e5:f8:5c:8e:37:09:52:a3:76:4a:77:2b:4a:94:ca:84:64:08:
         6f:3e:26:a9:2e:94:5c:65:70:5b:f2:49:38:43:2d:e3:3d:5e:
         cb:35:bc:69:b3:43:58:aa:34:a3:83:d4:ce:05:49:31:ef:fd:
         fb:ff:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:03:19 2024 by rpki-client on console-ams.rpki-client.org