Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
File:                     iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft (raw, json)
Hash identifier:          M8VgOxSeO2deuuLBQ6KLHRLJHymtwR60fqy/+EmqSI8=
Subject key identifier:   72:FC:7F:38:A1:CF:C5:7B:B0:FF:A3:72:37:7D:11:B7:A5:0A:71:81
Authority key identifier: 88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
Certificate issuer:       /CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Certificate serial:       018F87B6A23D492B87D113C1CDE01E966EF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
Manifest number:          0BF9
Signing time:             Fri 17 May 2024 18:00:44 +0000
Manifest this update:     Fri 17 May 2024 18:00:44 +0000
Manifest next update:     Sat 18 May 2024 18:00:44 +0000
Files and hashes:         1: iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl (hash: 7RDZaeDYLO0t6xpmeXxWauSe9Ob77k3tUwNg2Yj3Y3E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a2:3d:49:2b:87:d1:13:c1:cd:e0:1e:96:6e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
        Validity
            Not Before: May 17 18:00:44 2024 GMT
            Not After : May 18 18:00:44 2024 GMT
        Subject: CN=72fc7f38a1cfc57bb0ffa372377d11b7a50a7181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:86:3f:9c:45:e4:ce:3e:8c:49:5c:a4:42:73:
                    77:89:dd:9b:c8:59:b9:6b:00:67:12:42:3b:95:83:
                    38:b0:ec:7c:33:fc:cc:0f:ab:ae:9c:5e:81:80:1d:
                    fb:6e:65:9a:12:2a:ac:a7:f5:75:48:32:1a:27:c3:
                    78:18:e1:38:ce:5c:78:01:9b:05:fb:a2:83:e8:69:
                    88:52:0c:55:3d:f6:74:d6:63:b3:a8:93:a2:08:ff:
                    a1:ab:6b:bc:a6:a1:09:0c:08:2e:fe:ea:5e:d3:1a:
                    77:64:2d:dd:bc:05:82:68:3d:13:b7:51:4b:11:8e:
                    a1:34:1c:2c:9e:f6:06:08:52:fe:70:96:17:f8:f7:
                    3e:81:95:32:73:2a:10:89:11:e0:bf:41:e5:1a:86:
                    79:72:f1:fb:c5:1e:a2:b9:43:61:63:19:4e:f7:21:
                    09:a0:44:91:d3:59:15:09:c5:a7:87:10:a4:38:74:
                    a3:31:86:d7:df:6d:3f:da:bd:78:5e:f3:cb:3e:00:
                    68:9f:f6:06:98:b5:b8:59:b2:fc:4f:0a:5a:eb:ad:
                    09:34:e8:d7:f9:38:5e:35:c5:6f:8e:e8:cd:f0:38:
                    db:a6:ea:fb:90:43:47:14:83:3a:22:1d:35:86:5f:
                    e3:5e:77:ff:68:ba:05:bd:b9:00:43:1d:65:70:c8:
                    ad:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FC:7F:38:A1:CF:C5:7B:B0:FF:A3:72:37:7D:11:B7:A5:0A:71:81
            X509v3 Authority Key Identifier:
                keyid:88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b6:0e:f6:f1:9c:de:b4:dd:af:7e:95:34:b9:6e:f2:3d:3a:
         eb:37:02:c6:e3:01:ce:db:60:03:54:12:d1:a6:b6:95:76:ff:
         20:f8:dc:1f:ef:8c:b0:08:f0:04:2d:ae:6b:07:f9:b9:84:03:
         2b:7a:dc:ff:cf:0e:81:79:30:1e:7b:ae:dd:65:70:c1:36:10:
         2d:49:18:59:77:ff:ab:0b:fc:23:cb:6f:45:9c:21:03:29:01:
         0c:30:c5:57:b1:00:91:3b:c9:e4:87:38:75:87:8f:3d:96:90:
         53:7d:c8:4d:f6:ad:75:97:68:b4:cf:2b:86:c9:bc:40:06:50:
         0c:e4:fd:85:95:f8:48:43:8e:21:5a:b1:98:49:be:80:37:db:
         ce:f3:15:db:d3:77:8e:6b:c2:d8:ba:c6:bb:1f:0c:a0:00:f9:
         71:85:62:6d:40:be:73:e8:3e:d0:63:5a:e1:91:64:2a:d7:38:
         02:7c:3e:9a:f6:d3:c7:51:49:51:c0:fb:24:bf:52:1b:cb:49:
         a2:52:eb:e4:b2:8e:6d:e3:04:89:61:47:fd:1f:b5:bc:8e:67:
         22:6b:21:e0:e8:a3:09:7f:b8:34:f9:30:e7:21:4d:47:43:b4:
         f6:8e:63:97:0b:1e:76:2d:e8:8a:26:92:fd:dd:21:9b:68:82:
         4a:ea:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:08:31 2024 by rpki-client on console-ams.rpki-client.org