Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
File:                     12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json)
Hash identifier:          NG31o7vHdVpMVFVfbLYZWiZ2t935aGNwsM0Ng43V988=
Subject key identifier:   F4:AA:3A:04:69:D5:05:BB:53:C7:63:37:F8:EA:CF:D0:7A:D8:FE:13
Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
Certificate issuer:       /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Certificate serial:       01901EC6CCA228D6384E5917C777D477E8BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
Manifest number:          01C6
Signing time:             Sun 16 Jun 2024 02:01:03 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:03 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:03 +0000
Files and hashes:         1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: g3Vlss0dPKyXlzo0oW9oGhV3qCiD/CNc0W4PltFgsJQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:cc:a2:28:d6:38:4e:59:17:c7:77:d4:77:e8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
        Validity
            Not Before: Jun 16 02:01:03 2024 GMT
            Not After : Jun 17 02:01:03 2024 GMT
        Subject: CN=f4aa3a0469d505bb53c76337f8eacfd07ad8fe13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:c3:43:3a:00:b8:cc:8d:c9:3a:d5:73:66:
                    aa:39:d0:6e:b6:73:dc:74:21:5c:ca:f9:6e:d3:1b:
                    fe:b0:1e:41:a5:48:36:41:4a:31:d2:61:31:d1:9b:
                    1a:b0:e4:64:b3:69:57:01:9a:3a:c5:5b:8f:0b:52:
                    92:45:1a:ec:43:40:de:22:c0:ad:06:84:bc:f9:70:
                    2f:65:65:73:21:46:51:b6:e3:6b:f4:4c:6d:b3:71:
                    5b:85:0c:77:94:83:69:40:77:af:f1:d8:0e:4d:5e:
                    f8:97:63:e6:f9:b6:cc:be:00:05:4e:96:df:35:c4:
                    cb:48:3b:0c:37:ca:ce:bc:fd:78:87:7e:d4:a1:f2:
                    82:89:e2:5c:0f:52:30:96:69:9a:0b:1e:76:19:38:
                    90:3f:39:99:25:30:92:64:bf:cb:9b:5e:2d:9b:0c:
                    54:25:02:00:a5:44:a7:e3:0c:c7:9e:07:1c:8f:ac:
                    bd:2b:e0:17:60:2f:94:11:98:39:e6:3b:39:3e:62:
                    c9:a1:8a:48:70:fa:04:34:2a:66:7b:31:eb:9d:3d:
                    25:46:b2:ee:d2:da:d5:5e:dc:70:dd:da:3f:59:e3:
                    42:a9:0d:22:7d:cc:05:60:e2:07:c9:a6:36:11:54:
                    f0:37:16:14:25:f2:b1:34:88:93:4c:f4:af:4f:d9:
                    42:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AA:3A:04:69:D5:05:BB:53:C7:63:37:F8:EA:CF:D0:7A:D8:FE:13
            X509v3 Authority Key Identifier:
                keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:e1:35:9e:8d:8d:5c:19:a1:d2:85:ef:ed:50:04:dd:f2:e4:
         ee:30:25:6d:01:bb:11:04:b4:f2:da:33:1b:c3:24:4c:50:66:
         0e:59:8b:7e:7e:a5:0e:9d:fb:85:ee:30:48:cf:57:c6:49:af:
         13:b2:09:87:55:6f:33:bf:79:37:43:7c:c2:3a:41:e4:22:66:
         36:a5:03:f5:99:73:ea:b5:8f:03:ef:35:de:f9:7d:6e:d6:2b:
         de:57:b9:8d:31:f0:ae:07:ab:41:2f:d9:f9:66:07:9f:e0:c7:
         02:9d:ab:f8:a8:26:b9:7b:00:be:b7:11:e8:7a:f2:63:75:00:
         1f:b6:ce:ef:0e:c7:e6:7e:9c:14:41:e7:d0:52:1c:86:25:02:
         c9:f5:57:fc:49:a4:26:f7:20:8a:1a:ad:c0:de:3c:dd:b8:26:
         0b:71:95:bf:a9:5a:df:a5:70:9d:14:74:a3:c0:29:32:12:dc:
         fe:03:fa:88:7b:a9:e0:d3:63:23:e5:07:0e:8a:9a:45:fb:02:
         66:2a:22:2b:ae:a6:de:0f:4f:59:b3:aa:42:14:e5:f9:32:04:
         db:5f:af:6f:78:f8:5a:45:fa:37:a6:7b:45:b0:46:a9:4d:6f:
         81:f7:3f:92:e8:10:d2:42:28:87:4f:e4:22:80:5b:6c:99:c4:
         1d:12:17:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:24 2024 by rpki-client on console-fra.rpki-client.org