Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File:                     fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier:          KTptcP16xH4ny85toD1SUPdtBxLZKm1o/ebvqGAaPP8=
Subject key identifier:   9B:2D:4C:81:96:CF:F0:92:BA:89:FC:5E:CC:7B:46:A3:45:40:59:DC
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer:       /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial:       018F87493FA06F34E5A10B4B81F23F902EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number:          0A34
Signing time:             Fri 17 May 2024 16:01:15 +0000
Manifest this update:     Fri 17 May 2024 16:01:15 +0000
Manifest next update:     Sat 18 May 2024 16:01:15 +0000
Files and hashes:         1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: PEuvRIjg5tiO9Y5lpnkHbIxeM+tSXrUy9Dz7uNIRpYM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3f:a0:6f:34:e5:a1:0b:4b:81:f2:3f:90:2e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
        Validity
            Not Before: May 17 16:01:15 2024 GMT
            Not After : May 18 16:01:15 2024 GMT
        Subject: CN=9b2d4c8196cff092ba89fc5ecc7b46a3454059dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:0c:8f:c7:e9:99:c0:cf:dd:71:75:29:fc:
                    55:22:2c:73:0f:cc:47:22:1c:b2:d4:c5:93:10:83:
                    2f:e2:79:30:ae:40:d2:43:20:64:8b:7b:ec:93:e0:
                    89:d9:2b:e3:c0:29:68:31:1d:1a:fc:c4:83:a6:4c:
                    b6:5b:0e:b2:da:27:e1:ab:48:10:e8:e5:4e:77:36:
                    b3:c9:03:7c:77:7f:0c:cc:bd:d9:cd:d4:54:d8:cc:
                    7f:8f:f8:da:54:ac:10:ee:06:68:3c:b6:76:ec:e0:
                    ee:05:10:e7:8a:ea:68:90:35:3f:9c:c1:bb:54:ad:
                    8f:e4:a5:5e:a9:3e:d9:94:f8:03:40:b1:a5:a3:7f:
                    4e:ea:88:be:99:38:59:c1:b2:be:34:6f:ab:5b:fb:
                    d6:34:d7:cc:b1:3f:e9:0d:82:0e:24:b4:73:eb:25:
                    03:5d:9d:87:bd:5e:9e:d5:68:e9:26:6c:b0:49:9f:
                    58:9c:65:ad:15:d9:5f:b1:cf:e4:4d:b2:8e:cc:c0:
                    60:b5:82:6c:cd:c5:39:80:04:85:79:8a:0e:63:eb:
                    5d:29:3a:96:8d:54:5e:22:c9:b0:3a:47:97:56:9f:
                    63:e3:78:fa:2b:20:59:1a:dc:9d:52:cc:08:dd:2f:
                    21:a8:55:1d:cc:7d:19:b1:f5:f0:98:f8:ab:fa:88:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2D:4C:81:96:CF:F0:92:BA:89:FC:5E:CC:7B:46:A3:45:40:59:DC
            X509v3 Authority Key Identifier:
                keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9d:ee:af:f1:95:f8:a0:a1:9c:4d:aa:03:d7:86:39:0c:2c:
         25:ed:ec:01:df:57:bb:71:58:da:2d:f8:f6:d5:e7:92:75:ae:
         03:f7:74:aa:95:47:11:fd:f8:b8:db:23:ec:e4:7d:2b:c3:03:
         b0:8c:3c:45:bc:34:25:ba:1b:0f:1f:bb:61:0f:4c:85:8f:f4:
         67:7a:e2:5d:8e:f1:30:34:22:6b:2b:b7:39:40:2d:22:75:c7:
         c1:4d:ee:71:44:f8:c1:8b:2f:cd:e9:48:2d:7f:68:5d:47:e4:
         31:12:b6:07:3b:74:03:a7:d7:ba:ea:11:ec:9b:03:79:fe:ed:
         b3:be:15:b9:36:68:70:af:a7:da:56:aa:ad:db:a0:46:86:f0:
         43:c7:60:36:4d:ce:85:a3:f2:09:4e:15:fd:95:2a:a9:19:14:
         73:fd:12:2e:61:e0:36:53:75:f3:cc:13:e5:d8:9f:36:5b:91:
         c8:79:5b:d0:85:4b:99:7e:f8:fd:d0:81:09:fe:bb:93:ee:a8:
         1e:db:f6:33:ec:3d:b9:53:7e:b0:97:66:09:48:f1:c2:01:5c:
         54:fd:6f:cb:8b:95:aa:8f:00:3e:15:ba:04:03:17:85:17:ec:
         33:28:75:31:94:70:a9:79:34:db:ac:74:fb:b5:0d:2b:a7:6d:
         0c:d6:1b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:24 2024 by rpki-client on console-ams.rpki-client.org