Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
File:                     miIdT5cAcYIi7es06TinZjQ_JOE.mft (raw, json)
Hash identifier:          EinhZ4JLe8gYyIHOe16tAcyKvboLtdZUgrUAFvQbq8k=
Subject key identifier:   BD:D6:D3:F4:16:9F:7B:10:D9:1B:78:97:B6:91:22:61:3C:BF:6F:17
Authority key identifier: 9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1
Certificate issuer:       /CN=9a221d4f9700718222edeb34e938a766343f24e1
Certificate serial:       01901DEAEB95557FB80075778487B6E8F41A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
Manifest number:          1070
Signing time:             Sat 15 Jun 2024 22:00:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:53 +0000
Files and hashes:         1: miIdT5cAcYIi7es06TinZjQ_JOE.crl (hash: OxfogdjpEdvhv4sFhW1iJ45MtP7NwLjYdC0p+Iurn0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:eb:95:55:7f:b8:00:75:77:84:87:b6:e8:f4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a221d4f9700718222edeb34e938a766343f24e1
        Validity
            Not Before: Jun 15 22:00:53 2024 GMT
            Not After : Jun 16 22:00:53 2024 GMT
        Subject: CN=bdd6d3f4169f7b10d91b7897b69122613cbf6f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:ff:b4:a1:33:e8:ac:d3:6a:4f:cf:ab:4d:
                    1e:47:e5:85:6c:71:2f:b7:ed:76:f6:7c:1b:58:be:
                    52:f2:f3:b8:69:47:08:a8:81:81:e2:e9:81:bc:92:
                    2b:29:88:fc:94:e5:36:89:bb:66:00:25:df:84:f8:
                    f2:e2:c0:a0:71:5b:0a:e0:ee:8a:8d:28:d2:07:88:
                    4c:c4:a2:fb:6d:6b:5a:b2:1d:4b:bf:9f:58:d9:d0:
                    51:86:87:da:7b:b4:d3:95:60:7b:22:35:f4:b6:46:
                    3f:0b:e2:69:1c:f1:bc:83:97:3d:9e:0c:2f:4d:85:
                    c2:7c:9e:68:73:90:5b:f2:56:be:f7:d1:e3:7c:84:
                    e1:ab:e6:2c:ce:b1:dd:a5:a1:f9:5d:26:99:a6:61:
                    88:7c:e5:a4:12:53:73:2e:b7:cb:a4:12:84:c3:b3:
                    20:17:5a:a8:ea:58:a9:f8:39:27:dd:ad:58:4e:e7:
                    94:60:08:c6:9a:0d:79:01:3c:40:80:0a:ae:7f:8c:
                    0c:47:2a:8d:9e:73:25:9e:a7:c1:31:1b:71:a8:59:
                    c0:23:5e:bd:11:e5:62:1b:aa:d8:26:e9:0a:62:c1:
                    11:f6:41:e3:d7:3a:9e:3d:24:e0:25:11:e6:ac:52:
                    e2:c4:b1:59:75:0b:1a:41:58:fd:58:67:61:6e:fa:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D6:D3:F4:16:9F:7B:10:D9:1B:78:97:B6:91:22:61:3C:BF:6F:17
            X509v3 Authority Key Identifier:
                keyid:9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:18:ee:92:8b:46:3f:d2:2f:a7:09:52:70:86:7a:c6:3d:e7:
         d2:5b:cb:e6:b3:60:e1:a8:6c:c4:07:50:40:1e:70:8b:47:7d:
         6f:6d:32:34:8f:d7:a8:8c:25:f5:63:6f:04:f9:f0:0b:ff:77:
         1a:c1:15:c7:c3:80:90:28:d3:91:97:88:34:a8:0a:da:c9:73:
         f3:7d:82:c1:10:0c:f6:7c:d1:c1:15:b8:a1:45:7c:ce:b0:d2:
         9e:56:7f:62:a0:20:1f:91:c9:5d:44:48:f4:fe:27:2d:cc:47:
         4e:a1:ab:95:48:1d:9a:09:d9:c7:50:3a:c7:cf:86:3f:b6:44:
         fd:40:30:a7:c8:5f:f2:b3:d4:e1:d5:32:18:df:3f:2b:83:e2:
         dc:50:59:bd:90:03:8d:82:7a:df:44:8a:a9:b3:7e:8e:55:eb:
         0c:6e:74:32:cf:6b:ac:65:28:98:fb:c4:30:d7:f9:e8:32:9d:
         6f:50:76:79:3e:2a:d8:b8:43:f7:fd:74:aa:66:f7:5e:c6:ae:
         44:9b:db:29:d9:18:a4:bb:f6:39:a2:07:e1:ca:73:09:b0:46:
         3b:66:2a:9e:6c:df:62:b1:ea:be:6b:46:59:49:c7:5e:41:fa:
         6e:b7:8f:76:9d:19:d9:3a:d4:01:7a:2a:5b:3f:1f:91:f0:a3:
         48:12:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:48:07 2024 by rpki-client on console-fra.rpki-client.org