Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File:                     RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier:          U3+jTLrWPHGxsyqyVEp7N+/tCyU7S5fMkuvyt27/9d0=
Subject key identifier:   CA:58:92:06:E9:84:4F:74:53:CD:86:B9:92:B3:F5:35:0D:79:FB:7A
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer:       /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial:       019040B0335D08A766D2ECFD1DECFFA1C1E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number:          0666
Signing time:             Sat 22 Jun 2024 16:03:27 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:27 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:27 +0000
Files and hashes:         1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: 9YU66ksrGngml0oVzU5tLbOuMn1Z5mu8wrf895KNR+Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:33:5d:08:a7:66:d2:ec:fd:1d:ec:ff:a1:c1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
        Validity
            Not Before: Jun 22 16:03:27 2024 GMT
            Not After : Jun 23 16:03:27 2024 GMT
        Subject: CN=ca589206e9844f7453cd86b992b3f5350d79fb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:71:b4:e4:3e:fd:86:75:38:22:1f:43:06:
                    58:5f:1a:7d:70:a4:6b:85:0c:19:c8:d5:e7:d1:6d:
                    87:92:00:b5:2a:24:e3:93:3c:23:96:65:f5:c7:c4:
                    3b:0b:96:26:34:3b:9c:5c:21:f8:f1:2f:85:e1:da:
                    58:3d:f7:97:d5:d0:99:29:03:26:6c:e6:e8:6f:d7:
                    62:f4:89:c1:11:48:b3:f6:90:cd:8d:bf:76:86:f1:
                    e6:90:11:e4:a8:87:6a:db:11:be:9f:3f:6c:17:13:
                    d3:bc:dd:31:e4:0a:ce:00:f3:71:fa:6d:21:4e:8e:
                    09:6d:5c:5f:b4:cb:3a:69:e4:01:9b:58:bd:ac:91:
                    01:24:96:2e:07:dd:e5:91:4c:30:86:fe:be:6e:00:
                    f7:0f:04:65:4d:fe:01:9b:b1:6c:9d:82:fb:59:6e:
                    d2:6b:e9:d2:29:35:c8:50:20:d4:4d:4a:ef:ea:1b:
                    e9:7e:68:ef:1d:58:2a:a0:a4:e7:41:91:e5:e2:f4:
                    f6:61:57:68:8c:de:19:7f:91:8e:49:52:85:df:b7:
                    4a:40:00:82:98:20:8e:e9:7b:31:75:a1:9d:99:6b:
                    94:2c:eb:27:fd:f9:87:d2:72:ff:d5:d7:64:60:8d:
                    a6:67:1d:96:ee:2e:29:f3:ce:b5:b0:a3:98:bc:0e:
                    25:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:58:92:06:E9:84:4F:74:53:CD:86:B9:92:B3:F5:35:0D:79:FB:7A
            X509v3 Authority Key Identifier:
                keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:69:c7:31:ca:54:28:8b:3e:38:2e:a4:58:d5:c0:bb:44:1d:
         d1:9f:db:42:6e:c5:55:de:44:bd:19:d9:44:ef:35:42:21:9b:
         21:c0:f1:b1:26:96:38:4a:be:89:ed:04:d5:79:ac:4c:49:70:
         f8:15:7f:20:a5:59:4a:ad:1b:59:7f:81:7b:ef:1b:29:38:88:
         1a:73:1b:53:86:f2:7c:5c:1a:57:13:c0:3f:a2:96:a6:8a:7a:
         72:24:b3:3b:df:ae:16:fd:c5:25:7e:18:9f:94:43:13:cf:44:
         64:5f:d8:97:53:4b:66:d4:84:28:94:13:c8:d8:1d:52:fc:64:
         5c:f1:1a:b7:e7:d3:f7:63:aa:ad:6f:ff:a9:04:8d:56:5c:a1:
         d3:fc:4b:1c:3a:31:5c:7e:f7:57:df:be:cf:b9:c7:22:97:1a:
         fd:f1:bd:e3:0e:c8:07:c6:6d:0e:3f:b0:9e:ad:a0:a6:73:fa:
         c9:15:ef:2a:a0:db:bf:19:f0:df:d7:7c:a2:6a:cb:62:91:a5:
         a1:97:06:93:bb:c4:54:08:23:dd:4c:05:06:71:98:96:cd:c6:
         b8:43:5b:6e:0c:10:e6:52:24:58:53:98:dc:e7:4b:c2:83:12:
         d7:72:5d:b4:6b:e9:0f:80:53:8f:15:09:68:a0:be:7c:24:59:
         82:ec:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:22 2024 by rpki-client on console-fra.rpki-client.org