Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
File:                     himZ5D_2yece78WG-jpj_f6irkw.mft (raw, json)
Hash identifier:          shA40Qi6/5fGXoSpweadefeld5ZiLzv3tTVsBOv8WUg=
Subject key identifier:   FE:F9:14:CB:55:EB:82:C7:EA:53:B2:3B:94:EB:8B:CB:44:90:46:E5
Authority key identifier: 86:29:99:E4:3F:F6:C9:E7:1E:EF:C5:86:FA:3A:63:FD:FE:A2:AE:4C
Certificate issuer:       /CN=862999e43ff6c9e71eefc586fa3a63fdfea2ae4c
Certificate serial:       0191FAB516E1820D8D31D5A0F126370CCEAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
Manifest number:          A1
Signing time:             Mon 16 Sep 2024 12:00:57 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:57 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:57 +0000
Files and hashes:         1: himZ5D_2yece78WG-jpj_f6irkw.crl (hash: H9czfla3TFgFABFLJUWNLEUwElgZR+TIQf0IJ148nL8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:16:e1:82:0d:8d:31:d5:a0:f1:26:37:0c:ce:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862999e43ff6c9e71eefc586fa3a63fdfea2ae4c
        Validity
            Not Before: Sep 16 12:00:57 2024 GMT
            Not After : Sep 17 12:00:57 2024 GMT
        Subject: CN=fef914cb55eb82c7ea53b23b94eb8bcb449046e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:23:83:2e:49:35:50:a7:0c:42:e0:e8:de:42:
                    de:7a:ed:6c:a5:05:5d:3f:3c:5a:aa:9c:00:2f:53:
                    56:07:cc:22:8a:96:7b:d8:87:86:99:63:1b:d0:52:
                    3b:8e:e5:8f:fd:cd:bf:65:1d:76:0a:3c:52:6f:0d:
                    58:19:b1:57:f7:f6:8a:8f:ee:d6:c6:a6:35:ed:db:
                    66:33:6c:8e:62:f3:af:e0:92:7b:23:d3:00:c0:c2:
                    6b:ca:ca:a2:52:f1:01:02:5f:b5:95:8c:8d:5b:a0:
                    a2:5f:46:cb:30:98:a8:87:d3:d4:31:c8:b4:75:a9:
                    c0:b9:6b:b1:90:34:42:57:f4:19:36:c4:28:54:24:
                    13:f4:be:83:37:78:60:a4:96:26:b9:6d:85:a8:30:
                    74:e0:14:44:1d:00:4c:9e:7a:88:9f:f9:76:9c:7e:
                    1a:57:d7:df:89:60:54:a5:fc:45:e8:4a:b1:e5:40:
                    18:ce:a9:78:04:fe:be:f6:68:14:27:4f:29:dc:b8:
                    7e:17:99:70:56:8a:8b:ce:6d:4b:39:a4:5d:02:d1:
                    8f:c1:c1:b8:f9:2d:e0:7b:c3:30:f1:e1:56:2d:44:
                    9a:00:3d:26:62:57:01:3b:af:3c:03:5a:5b:c9:9d:
                    14:45:eb:9f:a2:69:53:e5:f7:c4:b9:19:5a:93:f9:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F9:14:CB:55:EB:82:C7:EA:53:B2:3B:94:EB:8B:CB:44:90:46:E5
            X509v3 Authority Key Identifier:
                keyid:86:29:99:E4:3F:F6:C9:E7:1E:EF:C5:86:FA:3A:63:FD:FE:A2:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3e:87:33:f0:80:a9:fb:bd:a3:68:ff:35:e2:65:36:8a:d7:
         24:d6:51:b9:90:c3:c6:59:7f:d3:d1:bd:3c:94:62:94:8b:f7:
         a9:9c:a9:4f:3d:d5:e9:af:0d:ad:50:f6:fb:83:ee:8b:af:b3:
         8c:da:6a:c7:cb:54:8b:d6:a8:e0:0d:7b:60:15:09:02:cb:76:
         c5:4a:da:d9:8e:28:bd:7b:60:55:87:91:cc:cd:00:89:5d:3b:
         28:37:f6:f5:46:87:31:33:74:58:61:77:84:04:01:69:a2:b8:
         ea:09:11:50:18:d0:67:cc:85:0c:a5:18:a0:fb:6f:b7:ac:02:
         89:e8:e5:13:fb:fe:70:4b:a4:71:2f:0b:4f:f8:79:ec:c9:8d:
         8f:77:4b:bd:4d:31:52:7c:a0:50:53:1a:10:8d:c3:f3:61:53:
         4e:76:f7:db:84:29:d6:12:5d:79:d9:63:05:81:30:a0:94:61:
         10:c0:f7:d4:e3:6b:2d:e5:ed:13:9a:be:27:df:30:85:ee:cb:
         f1:91:ef:b4:11:94:b5:53:97:10:f8:28:f1:2d:98:e0:44:d9:
         47:07:6e:3e:86:4a:b9:39:fd:e2:11:a7:e4:5e:8a:c3:5c:c5:
         3e:d7:ac:75:fc:e7:99:af:54:a1:f7:ca:c7:eb:74:b6:96:bb:
         c6:08:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:19:55 2024 by rpki-client on console-fra.rpki-client.org