Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File:                     fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier:          NTbP9/RHTvg5KLm/Hmn2493Wre1/5lLt8cr1kYOk0F4=
Subject key identifier:   9A:DF:22:66:2D:6C:5A:8F:39:B6:78:22:CB:BD:C8:CF:FE:C4:D2:6A
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer:       /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial:       018F87B663B1C4021FC77BCC42EE903C2554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number:          0C69
Signing time:             Fri 17 May 2024 18:00:28 +0000
Manifest this update:     Fri 17 May 2024 18:00:28 +0000
Manifest next update:     Sat 18 May 2024 18:00:28 +0000
Files and hashes:         1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: VQGlC4Bpwy9gvGhrP+kJSBIuj2ENgvleIO/n9pzo72c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:63:b1:c4:02:1f:c7:7b:cc:42:ee:90:3c:25:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
        Validity
            Not Before: May 17 18:00:28 2024 GMT
            Not After : May 18 18:00:28 2024 GMT
        Subject: CN=9adf22662d6c5a8f39b67822cbbdc8cffec4d26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:4a:75:ed:2f:42:cb:bb:94:1f:df:8e:3f:
                    00:ca:9b:ed:f7:5a:fc:f8:65:c1:1f:74:d4:38:e6:
                    0c:af:44:19:c5:af:f6:ba:13:a0:15:07:23:53:b2:
                    60:10:02:86:aa:2f:73:0d:1c:d0:3c:cd:24:a0:96:
                    8b:c8:7d:ad:68:23:9a:42:0e:ba:c4:b1:2d:10:2e:
                    43:64:27:58:e0:2f:5c:19:41:5b:36:82:c5:a4:51:
                    48:cb:0d:f3:31:0b:40:aa:3c:58:43:fe:d2:8d:e4:
                    ec:4a:c2:7f:3b:c8:c9:af:cf:6d:b7:0e:82:12:97:
                    eb:ca:69:6c:75:79:37:ed:08:9d:87:88:ce:7c:78:
                    ec:16:7d:b9:1e:1f:5b:60:2e:fe:8b:3d:e8:04:2a:
                    b4:d7:ce:0e:10:98:f8:06:1e:5c:65:72:fc:0a:11:
                    c8:c7:f6:57:ee:7d:7f:2b:e9:b4:23:ee:d3:6d:9b:
                    a6:9f:29:ce:bc:87:42:72:7f:a9:23:72:81:cf:cc:
                    e8:e5:95:99:2a:17:2b:1c:d9:77:14:5a:7b:46:ac:
                    83:22:4a:ac:9c:c0:44:d5:f5:7f:10:1e:c6:01:3c:
                    ea:c7:6c:81:f2:a7:71:90:8a:1d:b5:c0:ab:d0:70:
                    76:17:c3:c8:47:b0:ff:c0:91:2e:67:de:de:1b:ae:
                    5f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DF:22:66:2D:6C:5A:8F:39:B6:78:22:CB:BD:C8:CF:FE:C4:D2:6A
            X509v3 Authority Key Identifier:
                keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f6:34:04:16:3c:ea:3f:77:42:5c:80:d1:1a:c6:d2:17:28:
         42:77:b9:e8:47:cc:ae:df:be:ff:78:76:6e:43:e2:4d:50:05:
         69:8e:d2:12:91:11:51:ba:29:ca:7c:8d:0b:7f:be:a4:ff:aa:
         cd:f5:66:ff:2c:62:78:ee:8b:e6:10:3b:7b:57:e8:f8:00:4f:
         12:4f:67:a1:9c:f1:32:95:df:4f:45:6d:b9:cc:0e:32:87:ff:
         61:4f:10:4c:a6:81:34:8d:cd:92:e7:e5:79:a1:69:5b:b8:06:
         d5:3c:48:c3:06:35:4c:20:cb:ef:53:6e:b1:e0:6a:24:29:1f:
         4e:13:00:8e:54:9f:32:d0:00:b3:86:69:b7:f8:43:94:d0:cf:
         1e:8e:77:00:90:f2:55:ef:62:54:df:e1:76:3c:c8:b7:7f:8c:
         4a:0d:b4:fd:97:78:21:b0:00:e7:1b:29:da:39:de:20:9a:8c:
         41:cb:95:1a:3a:d6:e1:9e:de:51:b8:9c:fc:7d:82:3b:84:be:
         33:c9:5f:72:0c:75:52:8c:db:55:5c:a3:f3:e7:f2:af:af:47:
         2b:f0:56:31:e8:8a:c5:f2:fc:e9:59:d5:f7:5c:9f:ca:0a:39:
         b9:54:27:19:3f:19:2c:b8:1b:6f:21:f0:9c:82:86:f0:21:f0:
         fc:3f:a5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:44 2024 by rpki-client on console-ams.rpki-client.org