Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File:                     zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier:          A2vQ5Tn+6QAkN+3XqUUpxa0wZyx1mIaPt5EyjaB+iGE=
Subject key identifier:   76:25:20:B8:07:E9:5B:9F:47:12:2B:B5:C1:AB:8C:34:86:DB:17:68
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer:       /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial:       01901BFE9F8A606FA1CC3E448023E8B15E0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number:          07C0
Signing time:             Sat 15 Jun 2024 13:03:10 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:10 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:10 +0000
Files and hashes:         1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: tDpqedksRfR3M3vl43cxjP43rwU2zszoa5yEVPaDlhg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:9f:8a:60:6f:a1:cc:3e:44:80:23:e8:b1:5e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
        Validity
            Not Before: Jun 15 13:03:10 2024 GMT
            Not After : Jun 16 13:03:10 2024 GMT
        Subject: CN=762520b807e95b9f47122bb5c1ab8c3486db1768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:44:c9:a8:72:7e:52:62:6b:56:b0:e7:f6:
                    df:55:d5:22:ba:09:3b:2a:19:e2:16:6a:39:12:50:
                    c3:51:19:60:09:d7:f8:4b:05:90:8b:e0:a7:ba:20:
                    a7:c2:37:28:bf:45:bb:a2:64:74:d8:df:0a:57:29:
                    da:5a:6a:a2:60:dd:aa:a9:d5:c2:85:c5:d1:ba:4b:
                    d4:cc:91:f3:a7:83:14:f6:81:af:e6:ef:15:ee:10:
                    b1:d5:01:9b:d6:e6:6b:b1:49:53:92:76:a5:5e:7d:
                    d3:34:1d:be:d5:48:7f:2b:19:e4:34:d1:62:43:8a:
                    d6:fd:b1:f1:60:8e:96:a2:bb:c2:33:f1:54:45:1d:
                    56:ca:26:b7:89:09:ee:68:05:59:dd:a4:7f:d1:2b:
                    bf:5a:68:d5:72:16:82:60:a0:cc:24:4d:0e:03:da:
                    9b:d9:5f:0d:74:5a:fb:00:00:45:cd:90:4a:a6:b6:
                    b3:ab:b0:93:cf:04:d7:92:a6:f9:ed:4e:e5:a5:0b:
                    76:06:bb:57:e8:ec:66:0b:9b:42:94:4a:27:f2:ae:
                    cf:82:4d:ef:83:09:ca:33:7f:b5:04:03:67:e9:51:
                    d3:76:df:79:2f:78:90:11:4b:9d:37:60:c2:0f:87:
                    1a:3b:f6:eb:92:72:70:c3:18:9c:6e:5d:8e:1f:7e:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:25:20:B8:07:E9:5B:9F:47:12:2B:B5:C1:AB:8C:34:86:DB:17:68
            X509v3 Authority Key Identifier:
                keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f6:6f:9c:1b:90:49:e1:ba:7e:79:d0:7d:ea:02:76:1f:0d:
         a8:7b:b5:50:7d:42:13:49:d7:24:3f:6e:03:ca:c1:55:29:d6:
         86:8b:9a:3f:8a:0b:1c:0d:ce:a3:52:ef:4c:5f:ee:72:c7:d3:
         62:bd:e0:41:df:84:f9:95:41:14:4f:80:a0:3d:43:dd:30:68:
         2c:e2:7c:44:d6:ed:89:e6:91:c8:30:6d:18:f8:47:10:89:54:
         3f:06:ed:5c:c3:7f:3e:9d:dc:dd:38:c1:ba:ee:58:80:fb:2b:
         c7:45:78:ff:64:09:42:bf:10:6b:a0:f7:80:42:e6:86:ce:51:
         0a:ae:5b:59:97:61:99:e4:38:06:e6:c5:8b:9d:f3:ff:12:69:
         70:c4:29:39:06:c8:d1:40:13:d1:9c:67:37:f7:25:63:2a:1f:
         02:8c:94:e7:cb:b2:60:c8:80:df:54:99:a3:41:a2:0e:02:c3:
         ee:aa:c6:27:85:d2:30:e0:34:13:86:b1:66:ad:ff:bb:c7:24:
         87:9c:05:69:da:a5:b0:76:d2:44:47:dd:64:61:c7:6b:37:47:
         cc:89:08:12:cf:21:f6:50:cd:5a:67:66:7c:bd:0e:9b:69:b5:
         87:dc:32:ea:fd:36:f0:9a:78:13:87:e8:52:f9:38:da:7b:24:
         fb:a2:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:56:55 2024 by rpki-client on console-ams.rpki-client.org