Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File:                     AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier:          l4KLtxmUwAjis++UYgSpPyyGw5JTBGlYfkiC/n5GoSY=
Subject key identifier:   F6:B7:91:75:E1:25:18:D6:E4:37:B1:65:35:B2:39:9A:6A:E7:90:56
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer:       /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial:       01901DEB3D0406C43F4B65CFE3BA33AFAFAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:14 +0000
Files and hashes:         1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: ZYA+WV9/QHhkDF4YeaIduSeA/KQbZEYQ3gFGDx7VvpQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:3d:04:06:c4:3f:4b:65:cf:e3:ba:33:af:af:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015921784488add9a05661ff11787ec754e605e5
        Validity
            Not Before: Jun 15 22:01:14 2024 GMT
            Not After : Jun 16 22:01:14 2024 GMT
        Subject: CN=f6b79175e12518d6e437b16535b2399a6ae79056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:8d:f8:0f:f4:e0:62:42:5d:a1:5e:7e:75:
                    a1:b8:74:27:3a:7e:30:74:96:db:28:ec:f4:a5:9e:
                    ec:f3:77:88:ba:76:1b:41:3c:4e:1b:49:8d:52:24:
                    0d:f3:a9:32:6c:cc:d5:1d:22:40:a0:c8:45:58:f6:
                    b7:76:12:0b:0c:52:78:e2:21:51:37:63:ca:f5:f9:
                    68:93:e2:60:62:cb:51:81:2b:78:ed:04:2e:28:6d:
                    07:2c:40:97:24:a4:38:19:a6:40:df:3b:c0:15:2b:
                    75:d9:ee:23:40:92:76:bc:cc:7b:a3:71:24:f6:16:
                    40:13:3f:9a:c7:c6:8c:80:20:f9:60:26:3a:8b:72:
                    71:19:53:64:5d:29:ef:65:55:4a:0a:b2:11:e8:49:
                    b3:f0:9a:6b:09:98:93:8a:df:80:21:1d:dd:8c:ba:
                    4b:fa:6e:39:69:fe:12:a2:31:a1:ce:36:69:40:af:
                    e3:49:58:88:d1:40:80:ff:72:e7:f5:8c:7c:a1:9a:
                    68:66:b4:c9:98:ff:0e:13:14:4f:6e:ba:6b:e6:23:
                    8b:ae:8a:27:cf:bf:d9:66:97:14:b8:9e:0c:c7:2f:
                    ee:f3:28:f4:2c:c6:d7:13:af:27:70:62:e6:74:79:
                    8c:21:ef:6c:9f:7b:54:5e:03:16:f1:f1:96:1c:e6:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B7:91:75:E1:25:18:D6:E4:37:B1:65:35:B2:39:9A:6A:E7:90:56
            X509v3 Authority Key Identifier:
                keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:53:61:f5:12:43:91:3e:f1:77:73:b2:bf:e2:c5:56:1a:
         56:67:f6:fc:c9:0e:71:d5:ce:55:5e:20:12:61:b5:82:7e:33:
         ec:40:29:cc:fc:09:89:ff:f6:0a:3f:8a:3d:1a:da:a1:7c:12:
         ab:d7:54:5a:71:61:d9:d5:30:bc:53:6f:ca:30:52:b3:85:7d:
         28:7c:74:da:84:3c:5e:24:d3:c0:19:6d:ce:d8:12:5d:85:96:
         30:aa:1b:13:96:3c:a5:d4:91:ac:5e:ed:83:86:f7:06:6e:73:
         e8:03:cf:03:b7:e3:06:89:cb:4d:ea:a6:9e:0d:f0:94:7e:ff:
         b7:db:d9:c0:67:c0:44:c9:bf:eb:2e:c2:4e:6c:22:cd:76:f2:
         50:5d:03:91:2b:d6:1b:c8:84:7f:31:2e:d8:2d:c9:5c:7e:e2:
         09:bc:53:47:24:50:34:30:73:dc:ee:2e:2e:0e:4e:ba:78:f1:
         1e:44:18:1b:13:d4:bb:0f:54:7e:93:8f:79:47:2b:e6:a9:69:
         dd:57:03:ad:2a:1e:68:5a:95:18:20:bb:af:a4:db:9a:07:77:
         ef:6a:0b:bb:46:99:d8:04:b0:29:c4:24:28:23:85:cf:16:48:
         c5:24:17:b0:01:fa:21:19:d0:12:cf:12:6e:f3:21:28:6e:18:
         a7:77:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:51:56 2024 by rpki-client on console-ams.rpki-client.org