Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File:                     83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier:          zSnyjMygS0rOcmbDGFnCRLLgfOCD73MvYRJeI1Cqp9g=
Subject key identifier:   4C:87:6E:1F:43:58:AA:2E:AA:A8:B1:09:B9:57:96:A9:1B:E2:56:E5
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer:       /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial:       01906DF3E83CD5CA4A7B808153B92EE43AFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number:          0A96
Signing time:             Mon 01 Jul 2024 11:00:19 +0000
Manifest this update:     Mon 01 Jul 2024 11:00:19 +0000
Manifest next update:     Tue 02 Jul 2024 11:00:19 +0000
Files and hashes:         1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: 8DnTje/mtwu/AoVo91ZO8KuxaAYGV131rsVI51YEpNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 11:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:f3:e8:3c:d5:ca:4a:7b:80:81:53:b9:2e:e4:3a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
        Validity
            Not Before: Jul  1 11:00:19 2024 GMT
            Not After : Jul  2 11:00:19 2024 GMT
        Subject: CN=4c876e1f4358aa2eaaa8b109b95796a91be256e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:d5:3b:59:fe:c5:bd:52:23:82:a4:b6:8d:
                    e0:e9:df:cc:9c:c1:0c:dc:00:e5:ca:e7:1a:b7:a8:
                    06:45:12:17:f5:87:06:84:07:ec:95:66:3b:23:2c:
                    e5:70:7f:36:05:38:f1:d4:cf:0b:4d:db:a3:49:e3:
                    15:5e:53:f9:e2:47:c6:75:9e:4f:59:f4:ba:77:13:
                    bd:43:9f:e9:91:ec:59:5e:d2:fd:70:bd:25:84:5d:
                    85:78:67:53:a8:09:18:07:ca:e1:7c:03:b9:81:19:
                    75:1f:f9:27:51:2d:00:82:6c:0a:4b:8d:1b:c4:d3:
                    01:fe:53:d4:c3:47:c9:67:b2:36:65:95:77:10:8d:
                    fc:59:bd:8b:96:17:d5:08:37:61:bd:d5:03:d0:ff:
                    1f:32:9b:6c:67:e7:04:fd:7c:a9:7e:c5:2c:be:33:
                    81:7f:fc:f7:ef:f7:83:bf:dc:67:68:68:16:57:16:
                    45:d0:1d:b9:54:75:28:db:34:6a:84:14:6d:31:00:
                    1e:34:ba:d6:7a:89:93:75:2a:2c:0a:a6:1b:a8:d4:
                    f8:73:f8:d5:1a:33:74:9d:55:65:f0:82:19:14:6a:
                    af:6a:96:f3:6b:24:68:89:68:b5:ef:52:0b:da:9a:
                    06:24:d1:de:0b:90:db:63:4b:a7:a5:4c:8d:03:d7:
                    59:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:87:6E:1F:43:58:AA:2E:AA:A8:B1:09:B9:57:96:A9:1B:E2:56:E5
            X509v3 Authority Key Identifier:
                keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:32:40:76:d7:15:bf:39:44:d4:66:64:7d:f9:b6:7f:9c:
         04:84:cd:5a:bb:1b:74:ee:6c:99:f9:99:d4:3e:1f:24:eb:55:
         27:3b:78:99:19:06:87:54:d1:6d:03:bd:93:5f:7d:00:7a:de:
         2b:8b:2d:18:72:47:c6:9a:44:3b:4e:5a:48:18:11:43:43:e6:
         47:b9:bb:aa:df:43:08:e4:95:0d:28:92:54:f7:33:7f:b8:ad:
         20:0c:a6:4d:9a:6b:9e:6d:e3:f7:b8:cc:d9:dc:73:60:dc:37:
         96:7f:b0:28:42:72:d3:6a:30:51:54:19:41:06:f9:a3:12:11:
         54:27:e9:cf:6c:3b:05:fa:04:06:09:f9:37:02:fc:c3:ec:87:
         c4:ac:f8:8d:28:27:cd:1e:e6:8a:84:7c:79:41:37:fc:47:5f:
         f6:a0:d3:c0:bb:c9:ef:9f:2d:e3:45:ff:d5:f8:47:b2:b7:65:
         4c:83:ea:42:c3:e2:3a:4c:a8:72:a6:9e:20:fb:fd:ad:b9:09:
         6e:fe:46:6a:ea:25:51:32:dd:23:16:e5:c5:31:d2:f9:40:3d:
         74:66:bc:93:8d:7b:18:5d:05:f1:31:ee:64:15:ae:0a:30:6f:
         b1:d0:bb:0a:2b:db:e7:c3:04:27:46:35:ec:05:09:61:07:2f:
         2c:6f:c2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:09:54 2024 by rpki-client on console-ams.rpki-client.org