Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File:                     YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier:          ZxGKPtJ8hLIXBL3vlZZeFPi2gqM87UuI5ps3XNki1Sg=
Subject key identifier:   DF:A6:9B:C5:98:4F:2B:B6:24:0C:A7:6C:29:F4:3D:BB:28:6E:FE:2F
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer:       /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial:       01903404A66413FA45FAF884837134E375D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number:          07B3
Signing time:             Thu 20 Jun 2024 05:00:38 +0000
Manifest this update:     Thu 20 Jun 2024 05:00:38 +0000
Manifest next update:     Fri 21 Jun 2024 05:00:38 +0000
Files and hashes:         1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: hYVz7JCszbey7aqjWNfAANgUXe+im0Ta+RxMFv+oRY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:04:a6:64:13:fa:45:fa:f8:84:83:71:34:e3:75:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
        Validity
            Not Before: Jun 20 05:00:38 2024 GMT
            Not After : Jun 21 05:00:38 2024 GMT
        Subject: CN=dfa69bc5984f2bb6240ca76c29f43dbb286efe2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:c8:1c:f5:b4:f8:0b:57:78:ea:58:ff:b9:
                    d8:be:9f:94:86:6e:7c:d3:96:03:64:b0:e9:04:ba:
                    f0:e2:b2:20:d2:49:46:77:63:a9:5e:39:47:96:4a:
                    79:80:02:70:84:79:ae:8a:71:f8:fc:19:4c:54:d5:
                    ee:84:a9:b7:20:34:4c:2e:2e:16:73:e8:9c:09:4c:
                    84:7d:f8:3a:56:2b:c4:29:41:f2:7e:0a:50:c5:fd:
                    29:2b:72:c8:f6:8c:b0:bf:68:7a:4d:44:0c:53:8a:
                    76:80:88:38:95:3b:63:31:34:8c:12:64:75:31:cf:
                    0f:82:22:02:71:fc:66:5c:64:78:34:8f:65:85:e6:
                    3c:d3:d3:30:a5:dc:6e:d7:ec:8e:2a:60:99:8a:95:
                    28:cc:0a:6d:86:0b:2c:f9:37:9d:93:cf:13:c6:19:
                    db:2a:b2:0b:fa:f5:af:7f:0b:4b:57:0f:92:55:6d:
                    c2:cc:35:72:e0:e1:e2:01:c5:55:e9:a1:a2:09:41:
                    3c:e6:cb:c9:f5:fa:ae:87:f1:93:cb:aa:4e:c1:dc:
                    b3:96:55:38:4c:5c:80:20:9e:ec:1b:dd:26:76:22:
                    67:62:17:6c:1f:98:1b:66:fd:18:8c:4c:2d:3a:ba:
                    78:e7:58:c6:c9:48:5d:0d:a2:c2:c7:61:12:f8:c4:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:9B:C5:98:4F:2B:B6:24:0C:A7:6C:29:F4:3D:BB:28:6E:FE:2F
            X509v3 Authority Key Identifier:
                keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3a:dc:41:fa:23:bb:ca:26:88:7a:76:e1:89:c4:c2:76:3a:
         ad:86:7d:e7:20:4f:73:06:b6:a2:05:0e:35:c3:9c:5a:03:2b:
         b6:1e:7a:e7:7d:8f:a0:2e:49:02:3c:d0:37:c3:ea:5f:d7:b1:
         2b:ab:3f:c9:39:bc:73:d9:14:07:c7:ff:3f:22:e0:fb:e2:78:
         3c:be:77:7b:7f:0a:fe:f3:68:90:6a:aa:6e:fc:b6:b3:c6:43:
         de:57:d8:b2:52:ce:2c:c8:ff:ca:4d:80:86:f8:b1:d8:f8:0d:
         2a:78:c4:3c:64:a6:1a:fe:80:d7:11:8b:35:6a:0d:d8:e7:83:
         7c:2c:03:e1:81:43:a8:10:7b:37:13:52:5f:d6:fa:7a:ad:13:
         0d:8c:eb:e7:97:81:0c:99:e1:00:f9:77:66:a0:6c:02:ee:10:
         4f:d1:01:07:d9:10:3b:f3:d3:7d:24:7d:25:ff:f0:97:48:06:
         4d:45:87:c5:33:ef:58:54:34:1b:43:ea:3d:1b:8f:02:9c:01:
         92:f4:fc:47:0f:61:bc:20:9c:d3:ef:fc:c5:f9:f9:a8:b8:85:
         91:27:cc:d2:15:6c:b2:a2:cb:f1:bb:52:c5:4f:2b:11:12:c3:
         35:06:fe:eb:91:b8:cf:ed:8f:bf:c8:20:06:00:13:08:e9:cd:
         be:d8:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:28:46 2024 by rpki-client on console-ams.rpki-client.org