Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.mft
File:                     m1xNFQ_EcrGHcOCB_82OCXQtAGY.mft (raw, json)
Hash identifier:          QI7ijRYFeH0r525MdSYUAkBTfluM/BO5KKUxrS7gKWo=
Subject key identifier:   B6:31:CF:20:6F:72:64:9C:EA:54:56:A7:6C:1D:A4:07:EF:CA:E0:A7
Authority key identifier: 9B:5C:4D:15:0F:C4:72:B1:87:70:E0:81:FF:CD:8E:09:74:2D:00:66
Certificate issuer:       /CN=9b5c4d150fc472b18770e081ffcd8e09742d0066
Certificate serial:       01901DEB235E29B55351D6F7F77D9C8B6FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1xNFQ_EcrGHcOCB_82OCXQtAGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.mft
Manifest number:          0DE5
Signing time:             Sat 15 Jun 2024 22:01:07 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:07 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:07 +0000
Files and hashes:         1: m1xNFQ_EcrGHcOCB_82OCXQtAGY.crl (hash: RZ11DTzE15P7aMuZbMnf8E6k7ESRT0j33b2j36fudwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1xNFQ_EcrGHcOCB_82OCXQtAGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:23:5e:29:b5:53:51:d6:f7:f7:7d:9c:8b:6f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5c4d150fc472b18770e081ffcd8e09742d0066
        Validity
            Not Before: Jun 15 22:01:07 2024 GMT
            Not After : Jun 16 22:01:07 2024 GMT
        Subject: CN=b631cf206f72649cea5456a76c1da407efcae0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:37:0d:cd:52:c7:63:40:b3:d2:c7:19:97:
                    4e:3b:c9:ea:2e:a6:7e:c6:6f:5e:84:29:33:86:10:
                    7b:b3:c4:de:6b:12:f0:bb:d6:06:2a:ff:f8:6f:0d:
                    b2:03:c7:90:15:29:df:d2:03:c8:ce:5d:a0:b6:a8:
                    bc:10:c0:af:95:6d:24:e3:4f:79:6b:9b:fd:ee:12:
                    fe:a2:06:05:16:16:9d:cf:64:0f:c6:31:92:c9:3f:
                    9d:ee:e7:0a:73:fb:5f:76:aa:7e:53:fe:ce:42:f7:
                    62:85:44:b8:f5:b0:e1:95:a0:88:65:6a:15:99:ea:
                    a1:19:aa:32:d5:7f:bb:ec:29:9d:f7:19:66:04:5b:
                    a0:4b:5c:f0:57:43:a4:0b:f7:2a:aa:2e:6b:f2:16:
                    25:65:1c:9c:3c:c8:1d:99:05:c0:49:ba:4b:fd:9b:
                    58:6b:4f:72:75:9c:b2:dc:dc:47:41:54:85:4b:ea:
                    08:5a:5b:45:2d:fc:a5:18:33:f3:31:12:93:6f:93:
                    d8:47:be:78:7a:e0:84:3d:55:ef:c5:4f:4c:64:f0:
                    9d:6e:df:22:ee:40:8c:be:1c:ad:0f:b6:b8:d4:48:
                    14:6e:e1:d9:0b:f0:2a:fe:6f:bf:30:26:74:af:3c:
                    8b:7d:42:4d:f8:86:ea:a5:9b:77:e5:81:e4:86:55:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:31:CF:20:6F:72:64:9C:EA:54:56:A7:6C:1D:A4:07:EF:CA:E0:A7
            X509v3 Authority Key Identifier:
                keyid:9B:5C:4D:15:0F:C4:72:B1:87:70:E0:81:FF:CD:8E:09:74:2D:00:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1xNFQ_EcrGHcOCB_82OCXQtAGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/44c045-f2e4-4e05-92d5-aadc69a5a04a/1/m1xNFQ_EcrGHcOCB_82OCXQtAGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:32:d2:4a:00:51:8f:da:04:82:69:ef:f9:1d:95:04:e7:d8:
         5b:36:5a:8b:e6:7a:76:dd:e1:bb:25:3a:65:2a:b4:d1:46:5d:
         ce:d0:66:58:1d:d4:af:34:83:19:80:1f:9c:fb:4c:5b:86:8b:
         a7:ab:36:bf:4a:da:b0:e5:24:ff:ba:02:dc:31:90:ff:57:ef:
         ac:87:45:aa:ae:7c:c3:30:b3:1d:82:84:b8:16:2e:ef:71:6e:
         20:7d:8f:ca:fb:d3:7d:bd:86:31:08:1c:9f:0a:3c:ff:03:31:
         e5:c3:25:3b:7b:b8:b3:66:b9:0b:d5:77:fe:01:8c:01:84:43:
         4a:31:80:82:af:dc:3c:a4:f5:81:9a:bf:a2:6d:f0:5f:54:60:
         66:c6:3e:e8:94:4f:af:66:fa:7f:db:8e:aa:5d:48:a8:b5:b0:
         6e:31:ee:5c:f2:d4:bb:73:1d:a3:ff:35:d7:6c:8b:98:84:99:
         fd:85:59:9c:69:0f:8e:b2:bb:e4:69:a5:f2:af:cf:a2:57:5c:
         1c:e7:94:fb:e7:e1:12:9e:1f:2f:8d:87:52:21:2b:7d:97:56:
         b0:08:3b:32:2c:f8:43:2a:68:00:68:c2:67:25:eb:57:3c:86:
         43:a8:4b:ce:b2:b4:b2:09:2c:40:28:03:24:17:35:72:44:38:
         9f:ad:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:23 2024 by rpki-client on console-fra.rpki-client.org