Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File:                     9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier:          CSo7Sg7yAFp/9/WPMwzAYpRAsRWtZEWnR8WlFLCa8UU=
Subject key identifier:   D8:9A:C3:56:1F:13:4D:8B:E8:47:66:7A:E9:BA:2B:3E:C4:E7:D7:55
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer:       /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial:       018F502413D4BA24EC3392AF5ADBAEBFE9D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number:          063E
Signing time:             Mon 06 May 2024 23:01:32 +0000
Manifest this update:     Mon 06 May 2024 23:01:32 +0000
Manifest next update:     Tue 07 May 2024 23:01:32 +0000
Files and hashes:         1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: 7wE3a7hhpLBhBBcqQ6clH1mHffUcY5V5c5T1oMCFmV8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 23:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:24:13:d4:ba:24:ec:33:92:af:5a:db:ae:bf:e9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
        Validity
            Not Before: May  6 23:01:32 2024 GMT
            Not After : May  7 23:01:32 2024 GMT
        Subject: CN=d89ac3561f134d8be847667ae9ba2b3ec4e7d755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:71:85:e6:16:df:24:70:3b:5e:bc:0d:02:
                    a4:9e:b1:84:ed:ed:4c:81:c0:82:03:ef:03:0f:7d:
                    58:69:cc:f5:10:25:2d:35:41:d8:59:95:2f:5a:3c:
                    34:76:6c:aa:f6:2e:fa:b9:25:86:8c:28:4b:b3:6a:
                    2d:09:09:31:da:fb:47:7c:0b:29:58:04:1c:bb:f9:
                    e6:9a:5d:b4:a3:d2:1b:2a:f4:55:a0:eb:e6:02:d9:
                    a1:04:ab:76:5d:53:4d:45:2d:34:d0:76:5f:e1:4d:
                    04:44:3d:c6:73:b0:6a:11:8f:7e:7e:fc:e2:87:33:
                    14:b2:ff:c1:7e:15:22:b0:51:f2:ff:15:f0:50:cd:
                    16:81:5b:a5:1e:f4:1c:8f:08:2f:3a:d5:ac:76:d6:
                    eb:b7:6f:97:df:7a:0a:36:7b:4b:65:0b:e2:a9:8f:
                    2b:d8:92:17:3c:51:33:39:ed:86:02:f9:01:6c:63:
                    54:6c:28:91:7a:27:79:1a:e1:26:14:75:05:29:1f:
                    28:56:6e:0b:45:a2:ec:e3:6a:7b:96:3c:56:7e:16:
                    a7:14:35:81:c0:9f:d5:7e:23:72:9a:ea:b5:e4:e0:
                    4f:05:d2:51:55:b2:44:49:a5:20:ee:da:6a:3d:e4:
                    e3:37:df:32:a6:e8:67:e0:5c:02:04:7c:97:7d:91:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9A:C3:56:1F:13:4D:8B:E8:47:66:7A:E9:BA:2B:3E:C4:E7:D7:55
            X509v3 Authority Key Identifier:
                keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:8d:9a:e0:db:0c:b3:41:4e:2c:19:26:d9:12:44:e3:bf:
         be:19:9d:90:fe:12:f1:3a:7e:12:62:30:59:8b:65:45:c0:87:
         27:4d:33:cd:d9:f6:a9:22:cf:79:72:a1:77:e0:79:0a:90:0f:
         a2:94:69:29:9f:43:ee:1a:08:ec:c3:ed:4a:0e:ec:88:49:51:
         50:19:07:e5:43:a9:49:a6:e8:42:e3:48:3b:d2:c1:a8:34:dc:
         b3:2e:12:ab:b1:1c:a7:05:37:cf:4c:b0:29:b5:ea:3a:3c:85:
         38:26:09:de:18:02:e2:69:64:3c:57:5c:8a:fa:9e:79:5b:11:
         a2:2d:50:0f:50:c6:e0:11:ca:1d:b2:41:d4:bc:e2:19:db:51:
         07:79:83:bf:f7:d8:42:99:44:05:95:f2:f6:aa:93:48:56:0d:
         b8:3f:44:c8:16:8a:e5:f5:df:c6:ac:d7:80:46:63:3d:82:4e:
         10:c1:e8:10:90:70:da:26:4a:53:bb:e3:2e:fc:6c:51:64:16:
         6a:7f:dc:93:ef:cc:d1:f9:ee:ca:3f:71:96:28:2e:bb:3d:d7:
         6c:3a:6c:d5:30:de:f6:fa:c8:67:29:06:3c:73:49:c7:b9:40:
         4f:83:fa:f1:ca:6f:86:13:db:b4:bc:49:6d:ed:3b:c5:76:68:
         c8:73:9e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:04:29 2024 by rpki-client on console-ams.rpki-client.org