Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
File:                     pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft (raw, json)
Hash identifier:          bb2Re5XSARKxmdlw077fOpOWsq3BjRg7pljSiGRzb/s=
Subject key identifier:   9B:44:8A:BA:1D:A7:04:F8:CA:14:3E:63:C0:51:51:18:80:EB:4F:A2
Authority key identifier: A5:8E:FD:10:8D:4C:5B:0F:4F:9A:88:AE:53:BB:7F:EC:9D:59:4B:92
Certificate issuer:       /CN=a58efd108d4c5b0f4f9a88ae53bb7fec9d594b92
Certificate serial:       0190448BD3FC72C256024BD8737D2D150AFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pY79EI1MWw9PmoiuU7t_7J1ZS5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
Manifest number:          0CD7
Signing time:             Sun 23 Jun 2024 10:02:12 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:12 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:12 +0000
Files and hashes:         1: pY79EI1MWw9PmoiuU7t_7J1ZS5I.crl (hash: UFPE5OGTcGyq5RWBk/suJnIi7NXRumADhkYzzsAMe1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pY79EI1MWw9PmoiuU7t_7J1ZS5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:d3:fc:72:c2:56:02:4b:d8:73:7d:2d:15:0a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58efd108d4c5b0f4f9a88ae53bb7fec9d594b92
        Validity
            Not Before: Jun 23 10:02:12 2024 GMT
            Not After : Jun 24 10:02:12 2024 GMT
        Subject: CN=9b448aba1da704f8ca143e63c051511880eb4fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c0:ef:2d:5f:48:59:94:ac:a8:c3:fa:a9:66:
                    ca:b5:91:b8:9b:67:44:1d:22:18:75:01:b1:cb:b9:
                    30:ef:63:b8:55:8f:fb:e8:a2:7d:5b:00:03:39:78:
                    6f:16:55:7d:4b:a7:1a:72:b0:9f:8f:5a:7c:a9:82:
                    0f:f4:6d:7a:da:eb:ea:d2:09:fb:19:a8:a4:9e:7b:
                    8f:a5:42:bc:ed:33:b6:52:d0:a8:1c:ba:ff:8c:b8:
                    22:e0:e3:c3:ea:96:b9:39:7c:a5:9d:fc:9a:fe:36:
                    f5:5b:e5:bd:d6:12:c1:bd:e2:b5:e5:19:2e:44:19:
                    ee:8b:8a:52:c6:f3:d4:47:f4:fe:c2:98:13:c7:3c:
                    b2:1c:78:d9:81:a5:95:c9:01:34:a2:71:41:6b:0b:
                    fa:cd:88:9c:c3:4e:22:3c:71:91:cd:3e:84:41:ff:
                    8e:7c:b9:b4:58:f3:8b:fc:31:14:df:45:07:92:95:
                    e8:6d:ee:f5:12:48:5b:34:ad:c2:8b:64:cb:f1:f3:
                    94:ca:5e:aa:ed:b0:12:6d:5f:00:7a:66:58:55:de:
                    c1:e0:2f:0a:e5:ea:31:0c:b3:cb:5d:42:9d:0c:b8:
                    56:17:53:6e:f4:89:5d:88:1a:59:0d:48:c9:38:3c:
                    de:30:2e:14:89:1b:f4:4d:1c:96:b2:6a:a0:3d:02:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:44:8A:BA:1D:A7:04:F8:CA:14:3E:63:C0:51:51:18:80:EB:4F:A2
            X509v3 Authority Key Identifier:
                keyid:A5:8E:FD:10:8D:4C:5B:0F:4F:9A:88:AE:53:BB:7F:EC:9D:59:4B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY79EI1MWw9PmoiuU7t_7J1ZS5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a3b5b2-6638-4a4b-9b85-15cc5da07826/1/pY79EI1MWw9PmoiuU7t_7J1ZS5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:2a:21:b7:a4:5d:aa:69:d7:26:21:2d:af:04:a0:4b:49:7b:
         85:a3:87:61:69:d6:2b:b0:03:f7:98:b6:6a:1d:5f:11:a4:c6:
         7c:43:c6:ab:c8:ea:9d:53:2e:55:8f:76:66:68:33:53:dc:ff:
         af:4a:f9:1a:bb:8f:07:b6:52:11:d6:76:13:52:4b:1b:96:57:
         e2:af:2b:64:3d:01:ae:b2:3b:92:eb:91:45:b7:5d:aa:4d:01:
         96:bb:1d:a6:0d:81:b6:b1:1c:94:ca:bd:93:c7:17:08:3d:29:
         48:92:ce:07:7a:c8:38:6f:ff:23:75:9b:32:71:d7:b8:63:71:
         25:0a:f2:8e:2d:09:f8:8e:7c:b6:04:cf:9b:8d:c1:2e:26:0e:
         81:1f:fc:a5:d2:9b:22:98:d0:fb:8c:3b:e4:25:92:41:f9:a0:
         fb:52:64:ba:f9:93:f0:3b:d4:7b:88:fd:ab:51:51:c3:1a:66:
         59:4d:f9:f7:c5:0d:95:a9:47:ae:81:54:08:ef:f0:9b:95:f6:
         f0:6c:70:a1:5b:e8:56:8f:d1:b5:a0:a7:90:db:69:fb:d4:4e:
         67:57:a0:a8:ca:42:a3:e8:71:98:19:3c:a6:03:7e:e1:7e:04:
         d1:67:13:7d:37:74:4c:46:23:c0:de:6d:7d:51:bb:a2:40:b5:
         0a:bc:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:32:16 2024 by rpki-client on console-ams.rpki-client.org