Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File:                     1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier:          QCYlm7+wJA845A5Xkwy0WcaXISPf9UOvOQYnzOAJhIk=
Subject key identifier:   BE:D4:F7:6E:3E:84:4B:04:EF:12:55:9C:53:1E:85:75:94:0C:6C:74
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer:       /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial:       018FD6E49E8CF901E4876470E534033B0B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number:          05B2
Signing time:             Sun 02 Jun 2024 03:00:58 +0000
Manifest this update:     Sun 02 Jun 2024 03:00:58 +0000
Manifest next update:     Mon 03 Jun 2024 03:00:58 +0000
Files and hashes:         1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: meW9KXG/4G8+wUwIMY2HpoK1Ajt3pEVjmbemkNyPgzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d6:e4:9e:8c:f9:01:e4:87:64:70:e5:34:03:3b:0b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
        Validity
            Not Before: Jun  2 03:00:58 2024 GMT
            Not After : Jun  3 03:00:58 2024 GMT
        Subject: CN=bed4f76e3e844b04ef12559c531e8575940c6c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:8b:86:e0:3c:b5:02:74:7b:1d:77:6a:fe:
                    6c:f1:5b:d9:09:90:9b:d6:59:80:16:81:47:ba:a3:
                    4e:37:59:ee:6f:67:4f:f7:18:f3:4b:fe:6f:21:97:
                    9a:e4:79:77:c8:a2:87:4b:81:e7:11:78:ad:6c:20:
                    41:fa:46:da:86:b0:f1:36:70:bc:ab:15:e1:c2:08:
                    1f:c9:5c:5f:dd:21:93:e3:86:a8:4c:fa:d4:80:ed:
                    05:c5:59:45:44:cf:41:03:56:66:7d:91:11:55:b4:
                    78:73:87:51:8f:bb:6b:39:b7:75:1b:25:60:a3:85:
                    50:da:d1:d0:86:a8:3b:78:86:df:36:26:35:fe:3e:
                    10:21:13:9d:fc:db:9a:bf:bb:2e:df:67:84:74:88:
                    13:7b:0a:58:5b:cf:27:13:be:b8:4f:03:12:20:8f:
                    a3:57:e5:ed:ae:8d:2b:cf:ad:e6:7e:4c:84:da:81:
                    e4:a7:99:96:f8:a4:94:6a:81:fb:b8:70:a7:10:0e:
                    e4:b0:3d:39:b9:d3:37:e6:2b:de:16:00:8a:47:92:
                    cd:13:2d:a3:95:26:b9:7d:81:6e:fd:2f:a4:4a:8e:
                    de:42:d1:c4:85:af:38:9d:d0:93:c8:ba:bc:e0:45:
                    50:db:a3:06:ad:e1:2e:f6:d9:ea:63:47:b7:3a:1f:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D4:F7:6E:3E:84:4B:04:EF:12:55:9C:53:1E:85:75:94:0C:6C:74
            X509v3 Authority Key Identifier:
                keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:82:54:5a:ab:cc:41:6e:ba:57:f7:66:b3:5d:1a:68:c1:5e:
         ae:a1:41:62:14:cc:09:1d:62:64:ac:86:6e:78:88:61:33:3e:
         f9:01:64:cb:c7:3e:ec:a2:a2:87:c9:50:5a:26:ad:3c:e3:34:
         73:16:c1:8c:dc:79:b6:37:6b:07:92:47:b6:55:60:00:29:23:
         5d:17:0e:96:5b:31:41:e4:c4:69:12:f4:ac:59:26:d6:b9:41:
         d9:15:2a:81:5f:3e:25:2d:d7:e5:e1:d7:b9:8c:47:32:d2:42:
         05:6d:f7:87:19:dd:1b:02:57:fd:92:1e:a1:50:9e:92:ab:65:
         68:e3:92:79:89:58:f5:05:a8:df:37:7b:f5:4b:22:e5:01:67:
         82:e4:55:6f:09:49:e2:7f:f6:e8:d1:d8:06:ed:6a:da:1a:ee:
         f5:aa:d1:47:3c:a9:11:5c:94:21:b5:84:4a:bf:07:e4:ca:0b:
         3e:ad:24:d5:9e:2a:3b:79:71:05:40:19:7d:ef:fb:f6:8b:07:
         8e:2b:66:b8:0f:22:1f:05:5d:64:a7:7c:96:42:2a:67:d2:5c:
         9e:76:a3:3d:35:d2:63:8b:f4:bf:6e:bc:af:78:6e:5e:1f:38:
         0f:de:07:09:ed:23:95:f5:6b:c0:63:07:59:9f:35:f1:f6:f0:
         c3:e2:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:47:15 2024 by rpki-client on console-ams.rpki-client.org