Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
File:                     kXWIXPl40u9mE3YhRTC57WjFtFg.mft (raw, json)
Hash identifier:          LQ/s6/zLBrktpdwuj6oeeCJRaV4w8K4YGaVaZuK6OXA=
Subject key identifier:   D4:C0:4B:A2:5C:1A:C7:58:03:5A:E4:A6:55:1E:AA:0C:AC:1B:BA:45
Authority key identifier: 91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
Certificate issuer:       /CN=9175885cf978d2ef661376214530b9ed68c5b458
Certificate serial:       01901DED88F863B394B4D88D86CD689928B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
Manifest number:          04E3
Signing time:             Sat 15 Jun 2024 22:03:44 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:44 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:44 +0000
Files and hashes:         1: kXWIXPl40u9mE3YhRTC57WjFtFg.crl (hash: X4xIWoIy6mtlOAWjAnhLfcybBBFMiyteKKA0AVED9nU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:88:f8:63:b3:94:b4:d8:8d:86:cd:68:99:28:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9175885cf978d2ef661376214530b9ed68c5b458
        Validity
            Not Before: Jun 15 22:03:44 2024 GMT
            Not After : Jun 16 22:03:44 2024 GMT
        Subject: CN=d4c04ba25c1ac758035ae4a6551eaa0cac1bba45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cf:1c:91:6b:fd:23:41:fb:dc:3a:91:fb:fc:
                    79:08:36:db:ab:ca:2e:7d:5e:c4:b5:8c:10:44:78:
                    d7:67:17:de:2d:bc:81:67:f9:dc:47:a6:b5:fc:db:
                    da:c2:ac:de:12:68:cd:38:12:d8:4e:43:4e:ef:51:
                    e8:bc:e3:77:4f:ea:bf:fc:9b:b6:70:39:f4:95:aa:
                    dc:4b:38:2a:72:dc:5d:7f:28:e3:ee:52:d8:23:3b:
                    7d:6a:70:76:11:7e:ee:4d:64:68:09:36:cb:37:5b:
                    d3:88:33:0d:e2:27:c8:f5:99:27:a3:99:d5:ab:6a:
                    77:04:7f:07:d5:2d:be:b2:4d:67:a6:eb:ae:03:9f:
                    66:f8:69:1a:27:ad:f0:04:86:bf:8c:da:87:1f:57:
                    c4:05:d1:64:7a:93:a1:5d:d7:64:2c:e3:d9:1b:9e:
                    35:21:87:68:c1:6a:8e:55:2d:27:f6:a0:b2:e8:85:
                    8a:30:bb:21:a7:19:3b:d7:0d:2f:aa:be:b9:d7:ef:
                    61:8b:f6:1a:70:4b:65:d2:91:0c:b8:95:75:b3:18:
                    1d:ba:cf:df:34:59:6e:d5:58:6c:64:82:c8:28:96:
                    1a:85:40:15:3b:ec:0e:35:2c:f1:96:db:a0:8e:26:
                    62:b6:51:24:11:20:2e:9b:f9:80:e2:14:9a:4a:1e:
                    dd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C0:4B:A2:5C:1A:C7:58:03:5A:E4:A6:55:1E:AA:0C:AC:1B:BA:45
            X509v3 Authority Key Identifier:
                keyid:91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ab:43:b2:a9:1e:10:c0:af:a5:f5:77:9a:db:2d:e1:51:7a:
         b7:f8:a1:ca:bb:91:20:9f:44:d6:99:d2:31:13:8a:25:da:6f:
         ef:c2:81:d5:6a:a1:64:ca:0b:12:c5:8b:75:ec:6c:34:7e:3a:
         e1:a4:2b:38:f6:f3:ea:2a:fa:35:59:0e:bc:4b:27:0c:0c:85:
         3c:0e:e0:25:8f:ab:e4:66:1e:a0:1a:cb:79:b0:83:45:ca:da:
         02:2a:fc:e6:85:4e:e2:41:bb:f6:8a:94:3d:12:53:c8:9d:6d:
         7d:3d:f4:44:0f:aa:57:d1:af:97:92:e4:8e:09:3d:cd:aa:56:
         17:fd:24:0c:e9:45:0c:66:b6:14:fa:51:df:01:c2:87:5a:7b:
         bc:0b:d9:73:df:6d:43:8f:c3:22:49:0f:c2:0f:bf:8e:c4:ca:
         58:29:c8:96:65:bc:9c:b1:4d:55:7b:f4:3f:ea:8e:e0:15:a9:
         11:0b:d4:71:01:42:ff:09:4a:23:b7:5d:b0:6f:5a:f9:1b:bd:
         57:c4:41:43:29:e5:bc:ed:9d:4a:27:8f:9c:48:cd:b5:4f:00:
         ab:41:b3:a1:e3:46:f9:df:32:30:31:c2:2f:04:b0:83:c4:16:
         15:64:41:28:e3:e7:8d:d6:3c:fe:a6:1b:29:76:60:17:0a:05:
         66:64:90:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:07:57 2024 by rpki-client on console-ams.rpki-client.org