Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
File:                     Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft (raw, json)
Hash identifier:          Cvslhh8WGAwggJIL8MhPS5j9kqqHKSw600s8ea/XP0g=
Subject key identifier:   69:0C:42:C0:EA:5C:7B:D6:05:3C:05:A8:E7:78:68:87:53:0E:92:A3
Authority key identifier: 12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00
Certificate issuer:       /CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
Certificate serial:       018F3BFAC9A4C9F2087D56EBFFB20E5117F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
Manifest number:          09B9
Signing time:             Fri 03 May 2024 01:04:02 +0000
Manifest this update:     Fri 03 May 2024 01:04:02 +0000
Manifest next update:     Sat 04 May 2024 01:04:02 +0000
Files and hashes:         1: Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl (hash: 1UDjpSlHnJsZ7equGFoOKh2x18zwryJOhW80e15XjdQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:c9:a4:c9:f2:08:7d:56:eb:ff:b2:0e:51:17:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
        Validity
            Not Before: May  3 01:04:02 2024 GMT
            Not After : May  4 01:04:02 2024 GMT
        Subject: CN=690c42c0ea5c7bd6053c05a8e7786887530e92a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:c7:3a:ee:3d:0a:90:be:90:e1:1b:d9:6e:
                    d4:04:19:35:3e:dd:d2:2d:e1:75:02:29:74:2c:c3:
                    61:9e:66:a3:e5:4c:e5:c6:6e:40:bf:1e:74:c3:18:
                    84:17:cf:f2:04:e5:5a:ca:24:21:6e:e2:13:34:3a:
                    74:2a:e6:17:29:1d:2a:7e:6c:ef:eb:8d:b5:91:06:
                    9a:2c:80:19:25:3d:02:83:8e:1a:d3:35:1b:26:9d:
                    f4:a3:91:f9:b0:f6:68:0a:03:96:f5:85:76:9b:43:
                    36:de:bd:2d:32:db:8f:e4:ce:8d:24:87:a0:c7:9c:
                    46:52:36:39:fa:08:73:a7:d1:38:5e:9f:92:cc:9b:
                    dd:d2:64:fd:fb:1f:9b:91:ce:97:e1:f3:5e:a3:b8:
                    4a:c3:6c:f3:a9:04:3c:4b:e1:39:73:0b:81:e8:47:
                    40:6b:0f:56:57:5e:a8:6c:7b:8e:b0:3a:9f:62:99:
                    83:1a:7d:3f:7f:2b:7c:06:9c:cb:26:f8:98:61:07:
                    44:69:8e:7b:44:b3:f1:bf:7b:2f:df:05:8c:32:89:
                    72:e6:29:b2:10:94:ba:ce:b9:f8:7e:1a:e2:96:f0:
                    ad:bd:8c:a0:83:89:a1:ad:62:a5:cd:27:18:31:66:
                    39:a5:9e:2f:f6:3a:6d:9b:5c:f5:9b:29:27:49:f9:
                    1b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0C:42:C0:EA:5C:7B:D6:05:3C:05:A8:E7:78:68:87:53:0E:92:A3
            X509v3 Authority Key Identifier:
                keyid:12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:29:cd:e9:4a:1a:cb:04:b4:ee:4d:54:8d:cc:5c:b0:00:aa:
         ea:47:9f:4f:a7:5e:ab:41:e4:e4:8b:57:14:79:df:f8:c6:e3:
         05:c5:aa:d1:10:f6:0c:35:e8:ba:99:fe:90:8d:5e:af:02:2f:
         c8:83:10:ca:88:7f:cb:3b:6c:db:8c:9e:5b:0f:d7:6f:5c:56:
         3a:88:d3:d3:a1:4d:e5:e4:b4:3f:f7:c5:a9:11:ef:90:58:a2:
         83:be:cc:fe:97:95:bd:5d:7f:45:5e:7e:b8:da:26:f2:87:8b:
         01:a3:b6:c2:f9:5b:29:c0:2f:19:a0:ef:98:d3:91:a3:a5:75:
         93:fa:18:e0:88:cf:48:d2:48:dd:7f:43:df:58:a3:69:b4:7c:
         87:13:b6:f6:5f:cc:da:b2:c7:ab:6c:2c:44:cd:c1:bd:1b:68:
         d8:c1:bb:0b:63:e3:41:e1:9b:1b:0e:24:8d:59:82:4e:d9:ab:
         37:5a:c2:60:db:b6:41:c8:22:56:1f:4f:b8:9d:f4:06:11:72:
         94:f7:61:02:bc:f4:ed:7c:7f:a7:bd:a6:39:2f:09:00:31:df:
         11:d1:c3:69:30:da:2d:19:c3:dd:7a:7b:f7:ec:ae:34:26:e7:
         dd:6c:49:aa:3c:6f:bd:3c:a3:80:8a:94:06:dd:68:be:b3:9a:
         90:52:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:37:27 2024 by rpki-client on console-ams.rpki-client.org