Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
File:                     FhaeT1b0AaROVKG9hr8svYa4hnM.mft (raw, json)
Hash identifier:          lwNcxZI/RnSdOvEgAg4hgy2H5z3muXrZpuXLHjsMEQw=
Subject key identifier:   27:8A:F3:E9:C3:92:72:37:F5:13:F9:A2:3C:A7:5A:44:8D:D0:47:0C
Authority key identifier: 16:16:9E:4F:56:F4:01:A4:4E:54:A1:BD:86:BF:2C:BD:86:B8:86:73
Certificate issuer:       /CN=16169e4f56f401a44e54a1bd86bf2cbd86b88673
Certificate serial:       01901BFE840E6C8753EB2E047F016CEDE819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
Manifest number:          0E12
Signing time:             Sat 15 Jun 2024 13:03:02 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:02 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:02 +0000
Files and hashes:         1: FhaeT1b0AaROVKG9hr8svYa4hnM.crl (hash: 0uHmftXpIgbka84fnYscpcbIn2kmPLSYemx9mV2ur9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:84:0e:6c:87:53:eb:2e:04:7f:01:6c:ed:e8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16169e4f56f401a44e54a1bd86bf2cbd86b88673
        Validity
            Not Before: Jun 15 13:03:02 2024 GMT
            Not After : Jun 16 13:03:02 2024 GMT
        Subject: CN=278af3e9c3927237f513f9a23ca75a448dd0470c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:b2:6f:c4:75:b0:98:91:e2:87:8d:35:46:
                    70:2f:33:45:17:f4:e6:af:35:2c:a9:e6:76:6a:6e:
                    87:ba:c7:f2:5a:52:f2:d1:e1:98:8f:ec:73:74:50:
                    61:80:41:69:ce:eb:d2:e0:4b:2c:ea:d1:1e:5b:02:
                    72:f6:3d:0c:68:8e:55:55:ff:19:25:a9:ad:54:80:
                    d4:8d:41:ae:23:51:72:3c:40:19:11:67:4e:8c:bd:
                    80:9b:f7:8d:13:d5:1b:6d:75:00:f7:57:02:8c:f1:
                    a7:02:7d:63:b7:3d:f0:76:0e:6e:8a:e5:4c:cd:e5:
                    98:fc:fa:87:6c:b4:68:95:e2:34:15:32:1f:27:ea:
                    41:cb:e9:4b:a9:ff:2f:1c:23:30:1c:d9:ee:4d:1c:
                    cc:4c:b8:78:53:8b:c1:6f:96:1c:45:44:9e:4b:10:
                    39:9e:f1:b0:ae:8a:c7:dc:97:81:56:19:96:3c:79:
                    a7:0b:a2:7b:eb:35:4c:72:ad:51:94:21:6d:1b:aa:
                    36:9c:94:c2:1c:71:44:26:3f:03:73:1a:4f:57:45:
                    96:5d:a5:53:31:d9:6b:08:bd:8b:5d:94:d6:0a:3f:
                    20:b5:f6:1e:a3:d4:35:e5:45:61:7f:0e:95:08:90:
                    b4:80:24:f0:00:a2:f3:dd:4a:ea:c2:a5:a6:d4:80:
                    88:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8A:F3:E9:C3:92:72:37:F5:13:F9:A2:3C:A7:5A:44:8D:D0:47:0C
            X509v3 Authority Key Identifier:
                keyid:16:16:9E:4F:56:F4:01:A4:4E:54:A1:BD:86:BF:2C:BD:86:B8:86:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4b:b6:26:11:87:c7:23:6d:42:d4:87:d1:7c:4e:d0:d2:ee:
         6c:7b:e4:83:6b:9f:66:90:11:96:d6:21:c3:d2:1e:f3:44:50:
         57:88:1e:de:28:fa:68:69:cc:f5:a8:f0:a1:f1:70:45:81:98:
         35:f6:67:81:11:db:9e:a9:f2:32:bc:9f:f0:73:b0:5c:b3:11:
         ba:05:f0:11:45:6d:36:f2:bb:a4:42:71:40:47:c1:72:9b:63:
         fe:f6:c7:42:73:39:4e:98:b6:6f:dd:d0:a1:aa:f2:eb:95:1e:
         36:b8:b1:3a:59:d3:c8:d8:e8:78:e5:53:0a:1b:51:6b:79:20:
         da:ff:09:11:c0:3a:09:f8:a1:f7:89:b3:ba:08:72:2e:13:e0:
         b1:62:6a:a7:da:29:27:6d:fc:c8:83:11:64:03:0d:b4:c9:7f:
         0a:91:e7:dc:5b:a9:12:42:38:97:11:30:ae:e7:26:11:11:36:
         3a:66:24:10:b0:f2:09:46:58:47:28:86:80:22:b2:18:70:7c:
         93:58:b6:04:f9:b9:1b:ff:1f:79:27:86:55:4b:03:07:00:f5:
         49:91:21:4d:0c:ef:8d:9e:eb:b7:00:38:f5:17:c5:e0:31:28:
         83:96:59:93:85:29:49:71:e2:78:23:21:02:5e:b5:25:59:37:
         f0:c2:86:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:57:51 2024 by rpki-client on console-ams.rpki-client.org