Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File:                     Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier:          L7oDgpAKCZqPKnQnpdz5MeOW3MUtWzqp3a++cGHb3l0=
Subject key identifier:   05:1B:D6:53:7B:EE:D0:D7:E0:45:DE:9D:43:C4:DF:A5:16:9A:13:FF
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer:       /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial:       01901DEBD38C048B29320C67D52928B4C51B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number:          0204
Signing time:             Sat 15 Jun 2024 22:01:52 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:52 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:52 +0000
Files and hashes:         1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: mXYVQH5YONk/LgEXfhONGxNLFVXkmxxJZLbIAUqziMM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:d3:8c:04:8b:29:32:0c:67:d5:29:28:b4:c5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
        Validity
            Not Before: Jun 15 22:01:52 2024 GMT
            Not After : Jun 16 22:01:52 2024 GMT
        Subject: CN=051bd6537beed0d7e045de9d43c4dfa5169a13ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:ea:62:59:96:91:10:08:43:9d:19:a6:8b:
                    1a:6b:4b:22:41:37:f6:c3:30:63:31:59:9a:df:13:
                    0f:f6:57:f0:e9:28:9e:72:8e:2f:52:8d:d7:4f:f6:
                    9d:23:48:74:a0:60:27:08:5b:2e:12:3e:b4:aa:2d:
                    27:27:14:44:9c:b6:5e:b7:71:13:61:c2:e3:e3:bd:
                    fb:6d:8b:c3:98:ae:cf:86:14:1a:4f:02:c9:24:98:
                    90:7a:b9:c5:64:14:be:eb:3b:8e:0a:1c:bd:e2:9b:
                    55:57:91:bd:24:73:cb:cc:2b:3f:ea:d0:a1:99:56:
                    57:e4:89:fb:84:c6:53:72:34:a4:31:3e:12:f5:2d:
                    21:83:53:0f:1f:53:f5:33:0b:7a:bd:ab:19:e0:90:
                    da:70:9c:80:9e:da:e5:6e:c4:88:ee:9d:fc:91:c4:
                    51:bf:f2:99:8d:41:a5:87:88:93:94:93:9e:b9:b0:
                    1c:b5:05:e7:08:99:a4:b7:f6:e3:a9:ae:20:4c:6b:
                    58:ed:a6:a1:63:b4:44:36:5b:51:c0:d5:8d:56:30:
                    4a:41:1a:f0:98:64:0a:7d:a2:8a:94:37:55:42:87:
                    26:d5:6c:b6:31:9a:13:98:93:42:ee:d4:57:ee:08:
                    ed:9c:69:4d:ea:f2:52:ef:fb:b7:6a:f5:40:e1:bc:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1B:D6:53:7B:EE:D0:D7:E0:45:DE:9D:43:C4:DF:A5:16:9A:13:FF
            X509v3 Authority Key Identifier:
                keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:74:61:d4:1b:c0:79:b3:54:fb:20:55:0b:2e:06:3c:f2:66:
         64:41:01:83:e8:a6:1b:53:51:e5:4f:3f:4c:da:c8:90:47:33:
         4b:56:cd:1c:93:65:eb:ba:e8:0c:ac:86:cf:91:11:32:2a:87:
         58:6a:b9:1d:f1:66:7f:e3:ff:b5:86:49:4c:51:a9:34:b7:73:
         2d:70:63:2e:c1:c3:54:1b:a0:2e:30:f5:46:71:67:05:8e:07:
         95:95:d5:ee:d8:36:b3:94:9e:31:c5:48:37:b7:d7:ee:e0:7d:
         ce:ca:d8:cc:ed:8f:e2:50:23:11:29:2c:91:e0:aa:91:62:5e:
         11:51:ac:10:7b:85:23:22:d1:08:80:f6:66:e0:d3:84:c6:9d:
         e6:cd:e6:92:f1:ca:c0:4e:40:91:db:dd:99:a4:54:59:22:13:
         94:56:15:7e:7e:ee:aa:24:05:53:ed:b5:97:a1:91:68:15:86:
         c6:a9:39:92:f7:91:11:56:23:30:21:cb:e3:c5:76:3d:66:db:
         2c:ae:c6:d5:e6:d6:0e:0b:95:72:67:73:29:1e:c4:ae:60:f0:
         0b:e6:59:c0:23:31:69:95:fc:33:25:1a:ae:bf:82:68:d6:69:
         bf:10:c8:08:31:13:a5:fe:fd:e6:8a:ee:7d:8d:4e:bc:fd:4a:
         73:93:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:31:46 2024 by rpki-client on console-ams.rpki-client.org