Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
File:                     cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft (raw, json)
Hash identifier:          YpXF7tcaXSomroo1ITaB9frhtrD90OS83fleZHGSAD8=
Subject key identifier:   F5:96:CA:BE:29:9F:EF:70:FE:94:78:28:13:20:DC:43:CB:44:8F:49
Authority key identifier: 72:32:A0:4F:C1:9D:91:B5:0D:56:83:67:93:23:5E:CE:32:AC:28:34
Certificate issuer:       /CN=7232a04fc19d91b50d56836793235ece32ac2834
Certificate serial:       0190448D046C0CC818AD2AD32485A7D8F9F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjKgT8GdkbUNVoNnkyNezjKsKDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
Manifest number:          054D
Signing time:             Sun 23 Jun 2024 10:03:30 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:30 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:30 +0000
Files and hashes:         1: cjKgT8GdkbUNVoNnkyNezjKsKDQ.crl (hash: 3ey34rtXsDbpjoNqXZWB6RckcPAxuLT39tYnGBzydyw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cjKgT8GdkbUNVoNnkyNezjKsKDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8d:04:6c:0c:c8:18:ad:2a:d3:24:85:a7:d8:f9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7232a04fc19d91b50d56836793235ece32ac2834
        Validity
            Not Before: Jun 23 10:03:30 2024 GMT
            Not After : Jun 24 10:03:30 2024 GMT
        Subject: CN=f596cabe299fef70fe9478281320dc43cb448f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d0:f3:7c:01:9f:2e:35:fa:66:35:38:2a:2d:
                    1c:6b:32:6b:d8:6e:66:11:54:47:68:82:8c:70:08:
                    aa:a7:72:2d:4c:6e:56:74:b5:fc:40:89:d7:ff:54:
                    be:b9:f9:be:4d:d5:6a:cb:d2:61:6e:19:f9:c2:65:
                    a1:76:87:31:a6:92:cd:22:1b:80:d7:9a:0a:7c:91:
                    85:88:33:c8:dc:79:c7:74:4f:9d:3f:b0:8b:ae:6a:
                    2e:a5:9a:2d:2b:79:74:08:b5:ae:ee:2b:7e:41:7d:
                    b5:0f:77:8e:7b:97:a1:de:bb:a7:bc:cb:f3:26:29:
                    e6:02:45:2a:73:8b:84:b6:87:7b:45:28:87:d9:7e:
                    cd:ae:69:5c:ae:0e:a2:81:da:96:5d:6a:4d:c9:03:
                    bc:81:c8:5b:a7:3a:0b:64:71:a3:be:6f:6b:9f:e6:
                    d2:ef:37:5d:f2:30:20:1c:a5:08:e1:29:9a:06:33:
                    de:d1:b8:65:da:e7:c9:84:7f:19:1b:fc:4d:97:65:
                    03:91:41:b8:b8:86:a6:0a:95:88:1f:71:6e:76:46:
                    fe:61:7d:15:4c:f6:8d:ed:6d:a7:f8:dc:7d:38:26:
                    cb:1b:7b:32:17:c5:cc:74:b0:33:38:0f:2c:f5:a6:
                    1a:24:a5:a1:8b:50:0c:24:c8:89:3e:1c:68:ac:ae:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:96:CA:BE:29:9F:EF:70:FE:94:78:28:13:20:DC:43:CB:44:8F:49
            X509v3 Authority Key Identifier:
                keyid:72:32:A0:4F:C1:9D:91:B5:0D:56:83:67:93:23:5E:CE:32:AC:28:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjKgT8GdkbUNVoNnkyNezjKsKDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:00:b1:56:24:8d:28:d7:59:8d:71:8a:eb:4f:b5:39:23:63:
         77:b4:e3:bf:c0:6d:dd:03:bd:1b:e1:2d:43:7f:f7:c6:02:b0:
         e2:17:60:47:63:10:df:0c:64:50:21:8d:f1:ef:4c:03:29:a7:
         70:16:4e:1e:d8:51:b2:1a:b7:bd:19:cc:8a:3a:6c:6e:b5:c9:
         ed:0a:52:a6:d0:b0:83:dc:bc:12:bb:33:d1:a8:18:e7:04:86:
         6d:42:89:5d:40:26:a6:69:ea:c4:a0:a3:2a:f7:16:d0:1f:54:
         dc:39:c3:a3:07:54:f4:6e:95:9a:dd:d0:f0:2b:e0:20:5d:74:
         90:84:fb:43:73:d2:cb:67:4f:89:62:2e:fb:b3:f4:67:e2:c1:
         2e:8e:1e:be:4b:fd:c4:f7:8d:7e:50:48:57:ce:32:f6:c1:be:
         8c:57:48:1f:b0:36:8e:f0:79:02:b6:c8:0c:29:58:b8:e5:20:
         4d:bc:79:df:cd:67:e9:ed:9e:6b:19:b2:eb:dd:cd:8f:d3:7c:
         8b:1f:da:95:5a:c4:a8:4c:fa:d7:72:af:d8:0d:55:1b:d0:77:
         95:4f:33:b5:3e:ea:d2:08:36:ee:d7:e8:24:98:6a:4b:09:65:
         80:04:2f:87:ce:36:6c:dd:3f:c6:c7:5b:11:2e:9b:97:5a:4b:
         6f:fd:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:26:29 2024 by rpki-client on console-ams.rpki-client.org