Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File:                     meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier:          eXmM+esr4hvldTZYDOMPliG43xi2F0gk0M11AtdU57w=
Subject key identifier:   A9:CA:A7:7F:DA:8C:F1:BB:27:9C:D7:10:7A:93:3F:11:5D:9F:83:93
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer:       /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial:       018F893824B12AB849BC4DDAD9738B91FED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number:          09BB
Signing time:             Sat 18 May 2024 01:01:48 +0000
Manifest this update:     Sat 18 May 2024 01:01:48 +0000
Manifest next update:     Sun 19 May 2024 01:01:48 +0000
Files and hashes:         1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: +ReC7IDclp8FCaObbOyjlCP9mHaEwd9fbf+W5HbqDSE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:24:b1:2a:b8:49:bc:4d:da:d9:73:8b:91:fe:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
        Validity
            Not Before: May 18 01:01:48 2024 GMT
            Not After : May 19 01:01:48 2024 GMT
        Subject: CN=a9caa77fda8cf1bb279cd7107a933f115d9f8393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:34:5c:07:9d:1c:62:1f:d1:82:c0:f3:6a:2b:
                    a8:fb:76:72:d1:b1:d6:9c:f8:89:95:96:76:e1:32:
                    8b:62:2b:c9:73:af:93:ec:88:0e:44:da:59:87:78:
                    b9:c8:ad:a9:52:13:f8:f1:3d:88:92:72:9b:41:15:
                    a9:5f:99:68:3e:88:23:d4:2d:e4:f7:f3:40:c1:84:
                    f5:29:ea:0c:d0:11:5c:ad:b3:f3:01:39:89:b7:cc:
                    9a:dd:27:af:58:d9:c6:ef:05:d5:29:ac:78:f5:8e:
                    99:1b:cf:85:ec:6b:06:db:0a:af:58:97:26:66:2d:
                    f3:bd:18:e6:b5:6b:5e:8c:10:e1:d0:69:20:67:1b:
                    6b:0e:63:6c:a9:3e:70:4e:56:80:98:ca:18:86:42:
                    a1:58:d9:d0:41:18:a6:e5:a4:28:98:54:ab:38:23:
                    8c:af:6e:b6:60:26:09:c2:5e:5b:44:fa:8b:95:14:
                    a8:b3:f8:7c:14:d4:99:24:e9:af:ab:5f:62:82:f5:
                    46:53:82:33:bd:ae:1b:a7:30:6b:d4:b6:e9:65:8d:
                    3b:4e:f6:1a:d5:8d:98:3c:29:02:20:3f:ff:3a:d9:
                    6b:e5:1e:ad:ff:97:15:1a:d6:d7:25:67:fb:34:7a:
                    c5:6a:f3:ee:a6:11:de:41:c9:05:b5:ab:5c:f0:a8:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CA:A7:7F:DA:8C:F1:BB:27:9C:D7:10:7A:93:3F:11:5D:9F:83:93
            X509v3 Authority Key Identifier:
                keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:92:77:76:47:9d:ae:b3:10:99:44:b5:0a:76:6c:0f:f2:ee:
         20:3c:80:ce:25:5f:72:70:78:13:0e:26:ef:5c:46:12:b7:07:
         fd:03:30:1e:8a:a3:32:19:b5:85:3a:03:b3:da:1c:30:40:53:
         03:9d:3d:4f:8e:f9:19:5b:e4:d2:c0:d1:cd:d1:c4:87:4b:52:
         b3:1f:dc:21:ac:b4:8b:51:ad:1f:d6:18:c3:0c:01:4a:31:5a:
         c1:a4:ee:14:a1:17:86:ab:44:37:e5:fa:1a:6e:fa:15:b2:d2:
         77:2c:04:7d:eb:27:96:35:b3:6b:ed:a3:24:4b:67:6e:98:d1:
         a4:8b:a0:88:be:2b:38:07:59:e3:f2:1c:3a:ed:bf:d6:36:fc:
         22:53:8b:f8:63:51:f0:8d:b3:85:33:18:88:a3:75:19:a8:08:
         bc:c7:65:d2:19:e2:6e:fe:a2:49:d4:1e:6d:af:6c:a9:f3:1c:
         10:9b:fa:fd:bb:28:24:10:61:26:70:bc:4b:57:8d:05:1a:f9:
         af:f0:0f:0f:5d:21:77:39:13:dd:1c:cf:b0:b5:16:3a:d9:1d:
         d8:2f:ad:28:ea:0f:40:66:b2:b3:ed:68:07:3b:53:59:a3:8f:
         d6:1b:5c:e0:b7:d5:40:9a:17:22:58:5d:ad:81:c8:a1:da:d2:
         42:ff:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:49:58 2024 by rpki-client on console-ams.rpki-client.org