Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File:                     CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier:          X5OKZ87D0PhgYq8qzKRSPp/4iyHBdCi9yGYLY+ig2bw=
Subject key identifier:   EE:00:17:F0:EB:52:6E:B5:94:5C:EF:68:8B:16:14:62:6E:92:A5:38
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer:       /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial:       01901D45FF881AF4095A46BDC0B9D8E02EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number:          0804
Signing time:             Sat 15 Jun 2024 19:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:44 +0000
Files and hashes:         1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: Hbi8XzE3A5iDNI50dRZ02E3b5hcPwRnyTmNqR95EjMQ=)
                          2: X48PuN0I7twDWfuXlpQ2ewOmYX4.roa (hash: UQ213zkRZ1Zm6JR2ufnXKzJL/Wi9dHXoT5u1+azheac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:ff:88:1a:f4:09:5a:46:bd:c0:b9:d8:e0:2e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
        Validity
            Not Before: Jun 15 19:00:44 2024 GMT
            Not After : Jun 16 19:00:44 2024 GMT
        Subject: CN=ee0017f0eb526eb5945cef688b1614626e92a538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7c:62:11:46:94:69:af:0c:1c:ae:1d:13:2f:
                    c8:86:c8:b9:9a:23:7c:8c:45:95:4b:ad:a6:34:0b:
                    a1:ee:7f:a1:a9:63:c7:52:9b:e9:82:de:ee:b6:f9:
                    5d:3c:91:b1:7c:a0:5b:49:43:5c:b4:2b:bc:c9:a6:
                    82:38:96:a4:a5:1b:dd:83:77:99:d2:5c:8b:8d:83:
                    dc:10:f8:a4:df:64:e9:c7:7f:72:fe:9e:31:b1:86:
                    7e:d8:fa:7e:cb:83:58:99:fe:19:a3:31:e0:b7:96:
                    4c:a3:04:08:1c:dc:fb:40:00:8e:15:9b:e3:96:34:
                    6c:86:29:f6:fe:92:2e:ee:4d:d3:0c:4e:1f:a1:62:
                    b4:0c:a6:80:07:9b:29:75:ff:ed:fd:e3:b1:7f:27:
                    66:18:78:d1:69:f2:68:3f:0d:f4:75:ab:fa:3e:3f:
                    0a:55:e7:d1:ce:9c:f2:40:77:3f:79:50:c7:76:b2:
                    bc:d3:2a:65:89:22:48:93:40:1b:bd:87:e7:fb:81:
                    1a:b8:f7:41:d1:e6:f2:52:83:7f:36:68:cd:03:20:
                    ad:7c:17:6d:3c:d4:3c:ed:bb:f3:db:4c:18:d0:b3:
                    82:43:3d:27:2c:81:f1:55:30:2c:7a:dc:92:f4:a8:
                    9e:35:6f:af:f0:db:6e:06:39:b3:ae:da:4e:38:ac:
                    2b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:00:17:F0:EB:52:6E:B5:94:5C:EF:68:8B:16:14:62:6E:92:A5:38
            X509v3 Authority Key Identifier:
                keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:59:28:36:e6:4a:98:63:0e:f7:46:41:b1:0f:07:f1:e4:0e:
         00:cd:c6:83:90:fa:e7:66:b3:0f:88:98:d3:cc:10:b1:cf:e2:
         ed:84:d3:4c:ed:1a:da:bb:47:b1:c3:19:ba:44:fd:54:70:58:
         3f:d1:47:63:e1:16:ff:9a:46:b2:b4:4e:e6:20:ea:59:a4:18:
         e1:78:99:41:4f:0f:a8:9d:a8:f9:60:16:8f:65:28:1e:c3:5c:
         1e:69:6c:c7:e1:dd:1d:7f:64:47:8f:a3:1e:0c:d9:dd:7e:08:
         38:56:10:3d:d8:4d:83:f4:c8:0c:3b:9c:b9:64:46:d0:67:f8:
         40:cc:48:25:4a:e1:3e:9e:a5:ee:66:4e:71:08:03:08:9d:ff:
         71:5c:cf:29:b1:c5:ff:6e:77:e6:e6:8d:2a:d6:21:65:2f:0b:
         71:0f:bf:6a:48:68:92:e4:27:d3:96:5a:e5:49:40:d9:54:fa:
         d0:b0:42:94:d8:49:a7:ad:ba:92:35:14:e0:8c:71:41:01:15:
         64:d7:75:70:21:fb:d6:a4:21:12:83:a8:7e:5d:c1:2f:95:57:
         5a:5c:81:ec:f0:f9:46:3d:d2:f3:8a:c4:95:77:3a:41:59:a8:
         16:95:4d:6b:e8:11:9d:fd:90:f8:7e:48:88:26:0e:3d:c4:e2:
         0b:76:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:15:57 2024 by rpki-client on console-ams.rpki-client.org