Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
File:                     9j_pwTQEHOvaVoufkI4q7zirf3U.mft (raw, json)
Hash identifier:          UkpqwNXkUYm27X0sj1g2kysuErU3+4YP6v3MKQ++uog=
Subject key identifier:   EC:D7:02:03:5E:B1:98:41:01:AA:DA:45:F6:DE:31:76:6F:90:51:8C
Authority key identifier: F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
Certificate issuer:       /CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Certificate serial:       018F3BF997B48E0EFA3FE1B4C09734DF5A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
Manifest number:          07A5
Signing time:             Fri 03 May 2024 01:02:44 +0000
Manifest this update:     Fri 03 May 2024 01:02:44 +0000
Manifest next update:     Sat 04 May 2024 01:02:44 +0000
Files and hashes:         1: 9j_pwTQEHOvaVoufkI4q7zirf3U.crl (hash: tbBU6Tj82gHDSusG4Cy+bpl2Mk7DfES09gzcmAsLKPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:97:b4:8e:0e:fa:3f:e1:b4:c0:97:34:df:5a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
        Validity
            Not Before: May  3 01:02:44 2024 GMT
            Not After : May  4 01:02:44 2024 GMT
        Subject: CN=ecd702035eb1984101aada45f6de31766f90518c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:b2:b2:28:8c:22:26:45:7e:20:1e:aa:5b:
                    de:04:3b:ab:30:d2:47:fd:83:ad:c6:bd:77:dd:77:
                    38:56:c6:db:76:23:f9:37:fa:b2:f0:39:25:00:f5:
                    fb:a6:dc:82:76:c8:aa:dc:b4:81:b6:de:ec:35:42:
                    02:b3:da:33:b2:4f:9e:b5:8b:ad:23:35:50:aa:82:
                    1c:8b:f1:c0:6a:09:18:50:db:78:66:b6:c6:aa:f7:
                    91:ca:91:5d:ee:5f:93:51:ec:6c:3e:c6:c8:44:5c:
                    5b:0b:03:d4:28:8d:b3:51:13:0a:63:d0:49:dd:17:
                    f5:43:cc:ff:48:41:20:12:6c:a7:6b:c8:60:43:5d:
                    01:89:24:74:1b:b2:cf:41:6c:fb:54:a6:33:af:a3:
                    29:75:83:c8:da:37:73:0a:7a:ca:c1:a9:1f:85:cf:
                    f8:07:43:c3:7d:e7:3b:db:9b:71:c9:44:bd:4e:67:
                    ec:c9:bb:fc:3d:c2:de:2d:bb:93:c6:31:7f:96:ac:
                    56:66:34:03:dc:d2:c1:46:dd:5c:58:30:c8:5c:4a:
                    78:d0:9b:cf:43:20:e1:3f:a0:88:04:d9:9a:f2:7d:
                    02:49:b3:40:2a:38:a8:e8:7a:98:93:49:32:3c:ff:
                    16:9f:a6:40:07:b0:2b:89:4f:34:3a:19:c8:21:95:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D7:02:03:5E:B1:98:41:01:AA:DA:45:F6:DE:31:76:6F:90:51:8C
            X509v3 Authority Key Identifier:
                keyid:F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c7:b2:03:df:e2:ce:f4:7f:da:fc:b9:72:55:7b:64:9a:ab:
         c5:8d:5f:01:b6:79:7b:5a:aa:3d:50:f5:43:0d:c7:2c:d2:c0:
         c1:d3:da:81:98:b6:1a:94:f3:c3:84:0c:94:20:86:0f:6b:fe:
         e9:02:c2:af:95:35:e4:24:d4:49:ab:76:e1:44:6d:1b:52:9a:
         24:0d:9f:75:36:33:d7:09:f8:af:f4:3a:42:50:15:d9:6a:74:
         a1:1f:33:01:89:2c:48:f3:cd:a4:a7:9a:89:40:16:9b:09:23:
         8e:8a:68:73:0b:b0:8b:38:97:f2:73:38:31:ca:5a:3c:85:6f:
         11:c1:ae:51:7e:b1:fc:0d:c7:1d:37:e1:1e:6e:97:7e:88:65:
         0a:0a:16:ca:e9:76:a7:23:30:39:ef:84:74:45:71:e1:9f:96:
         e5:ac:d1:95:03:ab:f3:db:f3:09:f9:71:98:a8:ce:11:9c:ef:
         50:23:9d:23:23:82:bc:b8:11:2c:4d:2d:56:bc:77:17:83:b2:
         b4:fe:bf:c5:e4:2b:fa:4d:52:53:24:b6:4a:c5:fd:20:2c:f9:
         e5:d7:10:67:1b:5d:e0:7e:1d:34:d1:91:e7:cf:2f:0b:bb:e5:
         19:05:42:a2:a7:48:d3:8a:ec:51:d4:23:83:32:6c:82:66:55:
         ed:24:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:37:52 2024 by rpki-client on console-fra.rpki-client.org