Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft
File:                     oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft (raw, json)
Hash identifier:          RSzXzeb6vc9Z7afTdu1tnelAlDhuHBkMNUK2RpeHe/Q=
Subject key identifier:   C4:14:1D:EE:71:0C:C8:97:1F:98:81:C1:27:7E:44:F0:60:CF:38:C2
Authority key identifier: A3:2B:6A:FB:18:B7:2F:2B:FF:27:A6:D6:2C:A7:7D:DE:F7:53:7D:0D
Certificate issuer:       /CN=a32b6afb18b72f2bff27a6d62ca77ddef7537d0d
Certificate serial:       0190490BE9C1BC96CC3B99F235BEF10F0443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oytq-xi3Lyv_J6bWLKd93vdTfQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft
Manifest number:          0C62
Signing time:             Mon 24 Jun 2024 07:00:35 +0000
Manifest this update:     Mon 24 Jun 2024 07:00:35 +0000
Manifest next update:     Tue 25 Jun 2024 07:00:35 +0000
Files and hashes:         1: oytq-xi3Lyv_J6bWLKd93vdTfQ0.crl (hash: IcnE3vk78yrALQLxHtZ6/uKhJvGMuxgPCIczBTX6R5E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oytq-xi3Lyv_J6bWLKd93vdTfQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 07:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:0b:e9:c1:bc:96:cc:3b:99:f2:35:be:f1:0f:04:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32b6afb18b72f2bff27a6d62ca77ddef7537d0d
        Validity
            Not Before: Jun 24 07:00:35 2024 GMT
            Not After : Jun 25 07:00:35 2024 GMT
        Subject: CN=c4141dee710cc8971f9881c1277e44f060cf38c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:04:e8:f8:9d:aa:54:70:6a:64:16:54:8f:
                    3b:5d:3e:69:f0:94:dd:97:3b:a0:c3:3a:c2:a4:ab:
                    cb:8a:93:24:e6:96:de:e1:00:40:f2:5c:8f:8e:93:
                    80:5f:bb:6d:db:46:be:26:a4:ae:db:11:c3:e6:d9:
                    95:39:ac:77:54:23:1f:b3:24:7b:97:5d:a9:a9:57:
                    b6:c1:5a:3a:d6:89:54:e3:32:e9:2c:02:aa:5b:97:
                    44:a5:54:50:76:d3:4f:dc:43:39:7c:f4:b3:74:7b:
                    c9:df:e1:ba:38:fc:05:7d:04:f4:1c:07:55:8b:0e:
                    2e:67:3e:57:ff:20:04:3a:60:b0:f1:1e:e4:42:fc:
                    45:e5:45:6f:97:76:ce:88:4b:1d:e1:ca:e0:38:99:
                    48:23:6b:50:11:c3:e5:88:4a:78:85:7b:c8:35:40:
                    ca:02:7c:d2:53:e3:f6:3a:0e:87:ae:d8:e1:49:d9:
                    b4:a7:0b:a8:b2:bc:39:ed:f9:3c:f0:e1:48:9e:39:
                    01:21:dd:fc:76:f5:a0:0f:b3:85:00:e3:de:47:a7:
                    44:58:f9:40:40:fd:8a:ab:86:f8:4a:1f:7f:b2:7f:
                    00:e1:45:3e:a8:d8:e6:74:16:7d:c6:b0:e9:47:4c:
                    32:b6:e9:5b:f7:06:97:90:27:ba:d7:fb:79:54:50:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:14:1D:EE:71:0C:C8:97:1F:98:81:C1:27:7E:44:F0:60:CF:38:C2
            X509v3 Authority Key Identifier:
                keyid:A3:2B:6A:FB:18:B7:2F:2B:FF:27:A6:D6:2C:A7:7D:DE:F7:53:7D:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oytq-xi3Lyv_J6bWLKd93vdTfQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:75:10:6d:81:b4:8f:09:d1:aa:24:60:76:74:36:af:6e:52:
         65:73:8b:08:58:7d:1f:5c:9b:75:94:2d:25:66:8b:e3:bd:90:
         2d:56:72:2b:3b:45:9f:e4:94:90:31:ab:93:01:5a:ff:91:a9:
         b1:c2:d5:66:82:c1:38:25:15:1a:ce:71:12:bb:a1:cb:af:cc:
         73:bc:a2:e1:76:be:f8:f6:01:c1:61:02:b2:83:1a:64:20:30:
         07:5b:dd:bb:10:49:6e:66:fa:cb:88:9c:06:f5:f9:74:cc:f3:
         78:71:aa:6a:81:39:66:12:89:2f:64:84:ea:94:90:21:8a:a5:
         cb:6f:9f:07:5b:08:eb:d2:de:f6:f8:be:7b:ef:0a:c6:59:67:
         9f:52:ec:41:da:49:89:53:a1:a5:84:f9:f0:81:60:af:30:db:
         f8:1c:b8:cc:ed:28:ed:4c:f1:c4:c0:fa:37:20:4b:14:76:79:
         ee:39:54:4e:7b:37:be:6f:ae:a2:dd:29:af:f3:b8:47:88:2c:
         1e:e8:1a:7a:82:2e:d6:0d:7e:ef:fe:e7:10:37:95:63:0f:a7:
         9c:6e:aa:7e:a9:aa:56:7a:24:90:cc:d8:07:ca:98:7d:75:ad:
         09:ae:57:86:9e:89:10:0f:25:bc:f3:3f:59:3e:12:06:0c:02:
         d4:81:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:40:50 2024 by rpki-client on console-fra.rpki-client.org