Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File:                     1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier:          QIsknW6cJPKD2/OuBh5JSkS7ntgxOrHyrThucr9RuJY=
Subject key identifier:   BC:72:C1:0A:D8:93:56:29:54:AB:58:A6:C6:FC:69:30:5B:98:D5:DE
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer:       /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial:       01901E58E0DF4454F1D92E2420DBA5FA83AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number:          0683
Signing time:             Sun 16 Jun 2024 00:00:59 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:59 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:59 +0000
Files and hashes:         1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: QC1eY+VcJxRMDC2mATGrFP71LG3UVlrFHNK7U2NuKhI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:e0:df:44:54:f1:d9:2e:24:20:db:a5:fa:83:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
        Validity
            Not Before: Jun 16 00:00:59 2024 GMT
            Not After : Jun 17 00:00:59 2024 GMT
        Subject: CN=bc72c10ad893562954ab58a6c6fc69305b98d5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:03:2c:c7:93:a2:c5:45:e3:f4:90:59:a0:
                    85:42:3c:ab:1e:de:7b:8b:84:a5:02:fa:2c:ee:25:
                    b3:46:b9:c8:de:ae:a5:f4:3f:90:68:78:05:f6:d2:
                    39:4e:14:fa:ce:ea:fb:e3:ae:0c:5a:22:ff:f3:69:
                    c7:a1:87:e2:ed:ee:a5:da:2c:a3:c0:70:ba:41:e4:
                    5e:99:f4:20:a9:35:d9:31:c5:93:7d:5a:7e:b4:52:
                    6c:af:37:1e:ae:87:62:ef:69:96:80:79:13:88:15:
                    83:0c:51:d8:80:f8:d6:31:ed:19:c7:2d:e6:67:17:
                    d2:3f:d4:e1:81:fd:cb:a8:fe:49:4c:e5:0a:22:28:
                    22:a2:f7:11:f5:01:00:bb:8f:ce:ed:a1:1f:b3:2b:
                    e2:5e:9a:fd:5d:59:a1:23:c7:e7:94:e1:d2:42:fa:
                    b0:3f:bb:be:c4:97:79:e9:72:6f:09:3a:5d:a1:34:
                    f3:0f:b5:11:23:4e:a9:f6:e5:75:7a:35:f1:01:a3:
                    ba:b8:dc:19:3e:e1:54:51:1e:9b:6e:ca:5d:0a:90:
                    e5:2a:ce:42:b7:fe:79:ab:41:62:5a:e0:58:b7:d0:
                    0c:22:94:df:39:7b:c8:d1:88:87:40:36:1c:08:d3:
                    69:0d:22:1f:72:d1:57:06:62:e9:32:20:4b:30:02:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:72:C1:0A:D8:93:56:29:54:AB:58:A6:C6:FC:69:30:5B:98:D5:DE
            X509v3 Authority Key Identifier:
                keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2f:f4:23:94:1b:4e:51:1e:58:5f:77:3f:c4:54:0a:1a:98:
         00:18:31:2c:c1:a6:cf:14:62:c6:44:e6:a0:ff:49:f9:c9:d2:
         20:a6:14:8e:70:c9:b7:62:2d:b2:46:0d:68:f9:c7:72:48:c8:
         f9:36:0c:85:f2:74:3e:95:4e:50:9e:3d:9e:02:1a:2c:d5:b8:
         7c:df:d2:7c:25:50:ed:74:48:fa:3c:6c:23:b7:51:a5:b6:a8:
         cb:49:29:e3:22:89:d2:da:cd:f6:8e:43:bb:bd:fd:78:d9:f5:
         7f:bb:17:a7:72:be:a0:c6:2e:01:56:a8:60:36:e2:80:82:22:
         93:f9:cc:90:36:81:10:4b:2f:87:ed:83:90:fb:4e:85:7c:da:
         ce:f2:fc:c7:f0:8b:ef:a7:33:7c:79:0a:71:a0:58:1f:26:22:
         40:5b:47:cc:e4:96:ea:7f:a9:85:a4:07:36:52:3d:6e:24:66:
         00:a3:fc:61:f2:89:f8:ff:4f:34:72:c7:4e:c6:8c:13:29:79:
         3f:36:f4:76:20:dd:6f:88:fb:f3:a8:ab:57:83:e4:16:ac:64:
         5f:63:48:6f:71:46:f7:8f:c5:a6:5a:53:b4:fc:4e:a7:c5:0d:
         d9:23:78:05:1d:20:03:7b:a0:30:5a:fc:d6:59:d7:df:d4:21:
         88:22:5a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:29 2024 by rpki-client on console-ams.rpki-client.org