Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File:                     2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier:          WdrWIFey5YJxSBBOAIaMYugMpv1OmvT27E/FFJvzjJo=
Subject key identifier:   8B:FE:32:E3:E2:15:C7:78:71:2A:FB:C7:02:80:5B:7E:5E:93:96:4D
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer:       /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial:       018F47913687E6814A8EA290EFF89676ECB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number:          0706
Signing time:             Sun 05 May 2024 07:04:09 +0000
Manifest this update:     Sun 05 May 2024 07:04:09 +0000
Manifest next update:     Mon 06 May 2024 07:04:09 +0000
Files and hashes:         1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: uMUSzIdDR9HT0NQxMLnDVNn6UoF13LnTXEU5wn5s7vo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:91:36:87:e6:81:4a:8e:a2:90:ef:f8:96:76:ec:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
        Validity
            Not Before: May  5 07:04:09 2024 GMT
            Not After : May  6 07:04:09 2024 GMT
        Subject: CN=8bfe32e3e215c778712afbc702805b7e5e93964d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:81:3f:cc:fd:6c:ef:47:ea:d7:d6:49:42:
                    91:30:01:1c:96:c9:8e:b0:5f:f0:63:e3:8d:14:f8:
                    88:1d:bf:4a:a1:4e:00:cd:7c:25:e3:20:72:2b:ed:
                    ea:1d:37:f4:ba:00:aa:0e:20:e6:18:aa:ac:a2:ac:
                    9b:ec:71:ef:11:8f:bd:4f:b5:f5:f1:63:bb:87:dd:
                    b0:cb:e7:85:02:66:52:ea:b1:fe:01:ae:19:50:26:
                    9e:dd:28:1e:34:75:b5:5a:59:3b:ce:ba:9f:a8:fc:
                    79:82:33:f6:d9:67:ba:80:52:cf:81:ed:be:2e:f4:
                    e1:d4:08:e0:0a:cf:c1:82:4e:75:78:ba:27:bb:7a:
                    f1:1f:7c:93:77:a0:c0:5b:4b:58:ca:bd:b2:3e:54:
                    83:c4:0b:55:e4:07:c8:fb:8d:3e:6c:45:07:8e:4d:
                    e3:a9:a0:65:93:d5:04:20:a1:bf:d4:f6:3e:06:87:
                    46:44:28:29:31:b7:ef:2d:23:c0:8f:e5:a8:2b:f8:
                    2e:24:4e:ff:06:65:53:5b:73:6a:37:03:10:ca:b0:
                    e2:25:e8:b6:ec:c7:b7:25:f8:86:ea:59:5e:2d:b8:
                    ff:de:19:62:dd:4c:eb:85:44:4e:38:da:b3:60:68:
                    88:ee:e3:60:5a:51:ed:97:f5:e8:c9:fb:ea:31:2c:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FE:32:E3:E2:15:C7:78:71:2A:FB:C7:02:80:5B:7E:5E:93:96:4D
            X509v3 Authority Key Identifier:
                keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:98:ff:88:c2:53:5f:02:d6:f6:4c:ae:13:74:1b:cb:a9:50:
         fd:bb:b0:20:a2:0e:96:61:ea:42:45:56:15:d9:a7:e7:bf:d9:
         35:25:4a:d1:19:5a:21:24:2d:1d:25:74:7c:b1:9a:d0:e8:34:
         ae:51:e2:42:21:f3:79:d1:a7:6e:c2:ca:ac:65:d4:00:26:bc:
         f9:1a:ed:b6:53:60:ad:77:6b:ec:42:72:f1:63:08:42:1f:81:
         3f:38:e4:18:b3:a1:f0:d2:f5:3f:d6:de:df:6e:43:16:f6:df:
         61:23:75:75:bb:d9:f1:1d:d0:b8:0c:ba:29:aa:04:f4:eb:ab:
         7c:39:59:56:73:db:ec:e6:c8:0d:59:e0:0f:86:2a:46:35:94:
         49:9d:1e:24:2d:82:01:df:0a:16:66:f4:a8:46:62:d6:4d:07:
         ea:4a:f5:a3:d2:83:82:cd:ec:51:39:d8:bc:79:8b:5d:50:6b:
         11:2e:55:53:03:be:2d:29:de:d6:71:c9:53:fd:b9:c4:12:bb:
         04:5d:3e:80:de:41:82:42:e3:15:0a:e0:88:0d:59:85:ea:73:
         d0:c1:81:39:b7:e0:da:a1:86:85:24:55:08:72:e9:43:14:1f:
         1b:aa:13:54:1b:8d:bd:03:49:2a:61:87:17:c5:fc:b3:b1:f8:
         5b:84:33:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 13:17:43 2024 by rpki-client on console-fra.rpki-client.org