Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.mft
File:                     rsV6nHwbEbPrKr2sjNVdWfx4gQc.mft (raw, json)
Hash identifier:          7OFuT+uoE45GeIIGsdZkb/NcIgtpYijavYjg4fwu13k=
Subject key identifier:   FE:14:4A:1A:1C:54:BE:9B:A9:45:74:5D:D8:C1:85:C2:D7:1B:F7:31
Authority key identifier: AE:C5:7A:9C:7C:1B:11:B3:EB:2A:BD:AC:8C:D5:5D:59:FC:78:81:07
Certificate issuer:       /CN=aec57a9c7c1b11b3eb2abdac8cd55d59fc788107
Certificate serial:       01907A9ED0411E517A547E68FF0C8F576373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsV6nHwbEbPrKr2sjNVdWfx4gQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.mft
Manifest number:          02B2
Signing time:             Wed 03 Jul 2024 22:02:26 +0000
Manifest this update:     Wed 03 Jul 2024 22:02:26 +0000
Manifest next update:     Thu 04 Jul 2024 22:02:26 +0000
Files and hashes:         1: rsV6nHwbEbPrKr2sjNVdWfx4gQc.crl (hash: LuGdWjBtfaaX4BsHZZ+HSPuFKEMWSmxyiuLxgF1lU6M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsV6nHwbEbPrKr2sjNVdWfx4gQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jul 2024 18:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:7a:9e:d0:41:1e:51:7a:54:7e:68:ff:0c:8f:57:63:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec57a9c7c1b11b3eb2abdac8cd55d59fc788107
        Validity
            Not Before: Jul  3 22:02:26 2024 GMT
            Not After : Jul  4 22:02:26 2024 GMT
        Subject: CN=fe144a1a1c54be9ba945745dd8c185c2d71bf731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:8d:58:d8:9a:ad:da:6a:71:19:49:12:41:
                    9d:7c:47:9b:7f:bc:f4:8b:da:7c:47:c4:b9:a2:f4:
                    87:6f:6e:09:c1:bb:51:aa:4b:78:23:8f:bb:53:b0:
                    62:0d:7c:a7:db:d0:78:e6:60:53:69:f1:73:d1:f2:
                    fa:94:30:a4:f2:65:9b:ba:26:3c:e1:0b:a3:f6:3d:
                    ee:59:d2:b8:4a:14:96:b1:37:28:3c:2a:e6:7d:09:
                    31:69:a8:82:57:92:d9:55:e5:98:77:cb:d2:28:34:
                    2b:df:5c:f0:1c:90:e8:71:3f:ad:da:51:7e:f7:dc:
                    1e:c2:64:50:8f:a3:68:6c:1f:0b:e6:1b:c2:86:60:
                    f0:64:95:a9:a0:91:35:e1:26:f9:5d:e3:2c:49:84:
                    43:35:31:cf:53:5c:e0:30:2c:05:17:e4:a1:1e:ad:
                    dc:bf:26:e5:bc:57:4f:a8:f5:8d:bf:7d:ed:4f:68:
                    c5:ca:87:b8:11:40:c2:41:f0:67:de:f4:9c:f4:8d:
                    ae:a5:d2:97:6a:56:f6:58:3a:eb:66:00:a1:28:2f:
                    d7:8b:df:b0:ad:6c:79:06:0c:ce:1d:a0:df:92:a7:
                    fc:c7:43:54:ee:5b:87:7c:10:94:e9:32:93:29:23:
                    21:ff:27:1f:cd:d9:50:ec:11:95:5e:31:cd:0b:eb:
                    74:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:14:4A:1A:1C:54:BE:9B:A9:45:74:5D:D8:C1:85:C2:D7:1B:F7:31
            X509v3 Authority Key Identifier:
                keyid:AE:C5:7A:9C:7C:1B:11:B3:EB:2A:BD:AC:8C:D5:5D:59:FC:78:81:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsV6nHwbEbPrKr2sjNVdWfx4gQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c5601b-ab01-42d9-9aee-3a104f6de376/1/rsV6nHwbEbPrKr2sjNVdWfx4gQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:22:c4:12:ec:9f:61:85:c3:f1:f9:6f:a1:9b:33:72:d0:54:
         98:2e:12:ac:04:78:9c:1f:24:46:ce:9d:d0:d4:75:8d:43:81:
         e6:5e:89:82:6a:77:36:12:a5:cb:20:79:9d:95:91:f4:e8:04:
         ca:a4:2a:70:81:83:32:f3:ca:26:10:22:2a:31:34:b1:d9:27:
         62:b1:c7:3e:e6:88:e0:2a:4a:f4:77:5b:f0:f3:fc:8e:9f:ae:
         77:95:a5:04:60:51:f9:7c:a5:d2:af:69:3e:8a:07:b4:0e:99:
         ca:56:5b:b1:7b:fb:24:51:a3:35:2c:40:b4:42:ec:74:cd:fd:
         8e:a9:3e:40:ad:57:16:0a:6c:0b:1b:a9:22:a9:1c:1a:e2:a6:
         c5:5f:1c:64:c5:ff:b2:44:4d:19:11:eb:cc:09:ff:cf:1d:19:
         86:19:30:fe:8d:9e:c2:93:86:31:7e:9e:a2:86:53:ea:e9:c6:
         83:47:b8:96:09:d5:b6:14:3a:44:76:a0:00:cb:05:a6:98:aa:
         62:ce:d7:23:8d:db:93:fa:51:fb:39:5b:de:87:d5:a2:91:e7:
         58:b3:cd:ef:bc:5b:80:25:fc:f8:98:9c:83:02:3e:b4:02:81:
         8e:a4:2d:32:a5:ef:e5:03:39:78:ae:8c:d9:a5:ab:99:88:fb:
         7d:13:b9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 03:40:44 2024 by rpki-client on console.sobornost.net