Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.mft
File:                     zQbdjPIzQHYuDYKSxHYHRQHwRr0.mft (raw, json)
Hash identifier:          /qARg8YXRtC0GP55fE6XoGUa+RZwuSSqJg0HS/N39Dc=
Subject key identifier:   DC:9E:86:68:92:9E:21:F1:B8:7C:7B:8B:1C:37:EC:69:17:47:49:8B
Authority key identifier: CD:06:DD:8C:F2:33:40:76:2E:0D:82:92:C4:76:07:45:01:F0:46:BD
Certificate issuer:       /CN=cd06dd8cf23340762e0d8292c476074501f046bd
Certificate serial:       01901EC6EE3FDF90CF50724CC45ABD493104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQbdjPIzQHYuDYKSxHYHRQHwRr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.mft
Manifest number:          0CBD
Signing time:             Sun 16 Jun 2024 02:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:11 +0000
Files and hashes:         1: zQbdjPIzQHYuDYKSxHYHRQHwRr0.crl (hash: H+OTperjwKDD284chyAqr1//YkiJew+xWVB8PGpLYVc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zQbdjPIzQHYuDYKSxHYHRQHwRr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:ee:3f:df:90:cf:50:72:4c:c4:5a:bd:49:31:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd06dd8cf23340762e0d8292c476074501f046bd
        Validity
            Not Before: Jun 16 02:01:11 2024 GMT
            Not After : Jun 17 02:01:11 2024 GMT
        Subject: CN=dc9e8668929e21f1b87c7b8b1c37ec691747498b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:14:87:4b:5e:0d:85:c7:dd:dc:5f:3e:a7:
                    d3:0f:1c:ff:8d:9d:1f:31:8a:5b:36:b1:a2:ea:2e:
                    de:65:00:50:04:01:16:a0:f5:d0:c7:c7:06:24:65:
                    a8:ec:a2:69:60:90:ad:df:fc:d9:6e:64:bf:d3:6e:
                    80:88:68:56:19:b8:91:3a:bc:6f:81:03:e1:ec:be:
                    e5:39:ba:6a:f8:66:a6:e8:fc:41:f5:9b:63:bc:9a:
                    a6:7b:cb:10:19:60:07:dc:ab:32:62:f5:de:0b:db:
                    03:89:33:d6:09:f7:d2:ea:2a:54:fe:e3:20:e8:38:
                    8f:c2:70:3b:71:f9:a3:d1:f3:8b:83:b1:9f:cf:50:
                    fa:5a:87:3b:22:37:6b:a6:fe:6c:f9:83:47:eb:7e:
                    97:15:6c:69:df:30:b3:09:07:97:d8:ed:d1:96:d2:
                    fa:07:8c:a3:16:86:0f:b4:4e:83:95:10:75:59:b6:
                    24:6e:ce:e4:72:8d:1f:07:e9:99:68:0c:8e:9a:e1:
                    eb:7a:a6:51:6b:16:3a:6a:bc:63:9c:74:47:3d:23:
                    ce:10:03:7d:cc:d3:62:f6:ab:aa:52:28:5f:13:d1:
                    ed:85:09:2f:a8:b1:5f:92:4f:7d:8b:ff:82:35:ba:
                    58:23:82:f5:c4:11:64:d4:d9:42:d7:06:49:9c:a5:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9E:86:68:92:9E:21:F1:B8:7C:7B:8B:1C:37:EC:69:17:47:49:8B
            X509v3 Authority Key Identifier:
                keyid:CD:06:DD:8C:F2:33:40:76:2E:0D:82:92:C4:76:07:45:01:F0:46:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQbdjPIzQHYuDYKSxHYHRQHwRr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6b19e8-a7b2-4e2e-9dea-08d7825a42e3/1/zQbdjPIzQHYuDYKSxHYHRQHwRr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ab:d2:4f:d8:aa:26:af:59:d5:06:fc:90:25:0f:28:3a:ec:
         9f:c7:dc:3e:19:25:6c:e7:8e:2f:09:36:2f:fc:2b:de:bf:4b:
         ee:e9:59:42:81:22:72:c7:e9:2f:eb:b8:ef:99:da:a6:d5:8c:
         86:2b:3e:22:c6:c8:cf:fe:f0:93:1c:ba:bf:b2:4a:2c:91:cf:
         85:81:cf:8d:5b:66:f7:c7:26:ad:d5:5e:2e:86:2c:f9:01:af:
         8f:f1:c0:37:7f:79:01:6d:6f:3a:33:35:97:8d:8e:b5:a7:fc:
         a8:10:e2:4a:24:81:b1:55:6a:0e:77:28:53:2c:50:ec:64:c9:
         8b:a0:f0:66:8b:ac:ed:52:ae:78:9c:63:8d:d5:dd:5e:da:44:
         f1:d1:2f:94:f1:6d:d9:94:8a:02:fa:8e:d3:b3:d4:dc:19:03:
         9e:eb:14:7c:49:11:5e:cf:91:47:a5:2a:04:6b:4d:11:32:6e:
         78:6d:03:a5:6f:65:5f:01:45:6f:9b:7d:bc:fe:66:b6:02:0a:
         7e:6c:79:77:64:ea:3e:12:ac:1b:b5:74:37:80:77:c7:70:25:
         72:94:7d:e6:24:93:19:32:4a:fe:f5:82:5c:26:d1:76:4d:70:
         f4:10:a7:a5:86:37:7c:be:fd:d9:7a:31:4d:d7:ba:b7:20:ac:
         be:2a:9f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:40 2024 by rpki-client on console-ams.rpki-client.org