Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
File:                     h16pmc28YATHGlRwyg7HrnOCCPo.mft (raw, json)
Hash identifier:          Pswcfq9Vdls0c4s9LcpEU4ZXLsA+SEf9ZrKQYxDjB9M=
Subject key identifier:   CF:A4:86:AD:0B:16:A6:71:2D:AA:EF:81:C2:B2:41:56:52:93:FD:79
Authority key identifier: 87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA
Certificate issuer:       /CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa
Certificate serial:       019235806508EDA9880B192CD4C9AB068C6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
Manifest number:          023C
Signing time:             Fri 27 Sep 2024 22:00:59 +0000
Manifest this update:     Fri 27 Sep 2024 22:00:59 +0000
Manifest next update:     Sat 28 Sep 2024 22:00:59 +0000
Files and hashes:         1: h16pmc28YATHGlRwyg7HrnOCCPo.crl (hash: uvDSCYEBx+dab6y9Qa8bRAqZrAU4niTE6iOdCqVpkUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:80:65:08:ed:a9:88:0b:19:2c:d4:c9:ab:06:8c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa
        Validity
            Not Before: Sep 27 22:00:59 2024 GMT
            Not After : Sep 28 22:00:59 2024 GMT
        Subject: CN=cfa486ad0b16a6712daaef81c2b241565293fd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:47:9a:4a:f7:bf:ed:92:32:b2:d9:3d:37:
                    a4:c4:89:0b:00:69:27:41:e0:19:1e:23:e1:c9:87:
                    e3:1e:b8:fc:1d:64:5c:32:b4:3b:5f:ef:c1:89:25:
                    b2:bb:ea:17:9d:cf:22:a6:57:c3:9a:d1:ac:43:65:
                    3d:c2:6d:d1:40:bb:21:07:90:bb:6e:6e:85:fc:71:
                    9a:37:50:57:fa:00:bc:28:a2:3a:f1:bf:1e:4c:0f:
                    c8:1a:b3:5c:00:34:62:46:4e:1e:52:32:66:9e:92:
                    10:fe:3d:61:1a:f1:1b:94:0a:65:f3:07:6b:9f:d9:
                    8c:a0:c8:75:d0:5e:34:1c:a8:4b:30:08:8c:f2:ba:
                    78:56:70:a6:85:ce:fd:a0:1a:0d:be:31:f1:39:73:
                    17:e3:37:73:a3:f2:5d:81:be:93:8d:0b:7e:8d:f1:
                    52:00:3f:6b:4e:a4:1c:81:3d:9b:34:7a:6e:fd:48:
                    97:08:7d:de:e7:f6:2e:0c:4b:8f:57:fe:ba:fd:8d:
                    9e:8e:5f:54:0d:6a:aa:e0:e3:3c:52:2c:1c:18:a2:
                    66:b3:a4:0c:8b:33:b0:95:00:07:d6:bb:a3:e0:2e:
                    00:16:d3:b4:20:8c:d2:21:97:40:63:17:74:6e:1b:
                    fb:ec:a8:d3:8c:8e:14:14:13:4f:c7:7b:30:36:a8:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A4:86:AD:0B:16:A6:71:2D:AA:EF:81:C2:B2:41:56:52:93:FD:79
            X509v3 Authority Key Identifier:
                keyid:87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:28:b3:55:d3:54:2b:59:e3:b5:e9:60:0b:6c:c9:74:02:
         38:cd:6d:14:f3:f1:2b:d8:42:37:e6:3e:c3:9d:77:09:d1:e5:
         d3:1c:1d:1f:7d:91:0f:78:cf:87:54:23:fb:e4:a0:69:29:1b:
         48:22:ac:4f:af:45:c4:41:71:3d:b3:b6:22:38:36:05:08:63:
         e1:cf:4b:cb:20:c4:64:f5:3d:46:2e:df:14:20:88:4e:27:e5:
         83:fc:a8:72:fb:6c:ab:c2:11:7b:d8:f2:f4:34:53:31:5a:c8:
         58:73:e8:69:91:cb:88:4d:5f:c1:1b:2e:93:c9:77:f3:72:df:
         76:ca:22:ce:c2:9a:40:6c:52:02:5e:5a:4a:75:4f:40:3c:ed:
         80:f1:03:d0:23:d4:95:a1:b6:b5:9a:d9:05:44:81:ab:54:ea:
         43:52:3f:e1:62:c2:dd:85:3c:57:61:77:72:ec:f5:0b:43:b0:
         5d:5a:cd:89:11:20:7b:47:bf:ef:f3:29:31:e2:7b:c5:b9:7d:
         bb:33:7d:cd:54:6c:0f:9c:12:36:a6:27:c0:92:fc:71:23:58:
         af:12:f9:89:2d:0d:ec:47:bb:33:c3:ad:90:89:38:0e:79:f1:
         79:c1:dc:b2:45:a4:08:a5:fb:90:86:15:3c:78:aa:46:0a:e0:
         e5:38:e4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:52:25 2024 by rpki-client on console-ams.rpki-client.org