Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File:                     rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier:          nmuj2NG4R+UBuPA8Ka8UzV9UUw6FnP51mO0K57wXAM4=
Subject key identifier:   91:E3:A5:56:61:DA:31:7C:8E:F6:2A:AE:70:5C:41:DD:49:33:EB:9D
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer:       /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial:       01901DEB6A2593F7775EAD1950519F176E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number:          0157
Signing time:             Sat 15 Jun 2024 22:01:25 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:25 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:25 +0000
Files and hashes:         1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: e8P3U+dJXH5l/O0pTd0p6sko/dTt1cb30bj60NG+XZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:6a:25:93:f7:77:5e:ad:19:50:51:9f:17:6e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
        Validity
            Not Before: Jun 15 22:01:25 2024 GMT
            Not After : Jun 16 22:01:25 2024 GMT
        Subject: CN=91e3a55661da317c8ef62aae705c41dd4933eb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:16:8b:de:d8:e6:0d:a7:f1:70:c4:d0:70:
                    2d:34:c3:41:16:d3:d7:d8:3f:bd:c0:86:7d:ce:aa:
                    0f:73:eb:50:d1:aa:8e:3f:4b:c8:3f:a0:84:66:7f:
                    05:3c:58:b8:4f:68:2b:26:1c:ac:8f:f7:2a:7d:98:
                    c5:c4:d6:85:00:ac:34:3c:e3:d7:9f:53:39:21:a2:
                    42:c7:3b:06:65:ab:b0:de:b9:53:b1:63:37:69:a8:
                    20:9d:30:4b:98:b0:b7:ae:1a:5a:97:b8:b4:12:28:
                    94:c1:b7:00:78:24:60:6c:14:02:02:f6:94:a2:ed:
                    39:5a:a0:68:47:d7:ec:83:1f:34:ac:ed:61:cc:0a:
                    d9:0f:c2:6d:8b:30:31:e8:07:0e:d8:a4:6a:8f:29:
                    9f:56:59:f3:01:5f:29:92:84:39:84:00:e5:fb:c9:
                    16:32:87:b7:51:99:c1:59:dc:bb:51:47:c7:80:1d:
                    24:60:2f:e7:a5:bd:f0:f3:4b:1a:f0:94:5d:53:c0:
                    85:43:67:76:04:28:36:7f:e1:0a:4e:93:39:7b:e4:
                    7f:95:25:32:2e:1a:97:e6:b5:b9:1a:3c:90:0e:d0:
                    53:f5:c7:2e:37:87:4e:b4:2e:50:12:e7:08:3c:b9:
                    0d:4a:5d:c3:85:2f:66:8c:05:3c:e6:f5:13:f7:bd:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E3:A5:56:61:DA:31:7C:8E:F6:2A:AE:70:5C:41:DD:49:33:EB:9D
            X509v3 Authority Key Identifier:
                keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:77:f9:51:82:88:f8:90:fe:b1:ed:3c:91:2f:20:6b:0f:f4:
         6e:45:1c:84:38:61:a9:94:9c:67:85:5c:79:4f:b0:fb:93:03:
         78:b4:f4:91:92:ed:af:11:48:fb:80:4f:8d:a8:64:0f:04:90:
         12:73:77:3f:53:fe:dd:c5:57:ed:be:70:54:04:0b:03:d6:1f:
         c6:77:c6:60:be:bd:44:98:60:3b:03:fb:f2:d5:8c:a1:ec:b9:
         97:3a:3c:d7:2b:2d:aa:2a:3d:03:62:2d:00:d5:44:35:88:d5:
         bc:55:69:d5:44:5b:3e:f6:c6:2b:1a:96:04:24:13:6c:86:ba:
         c6:8d:5e:21:e7:c6:fd:40:f4:46:9a:ec:5a:a3:d5:4f:4a:df:
         19:fa:64:90:e9:50:3c:cd:e9:26:43:d1:47:4e:59:7e:3c:af:
         f3:5b:bd:2f:4d:4b:3a:70:bf:c0:65:dd:e9:af:56:82:1f:26:
         f2:bc:d2:e1:f5:31:81:e1:04:82:54:d9:bd:d8:cc:a0:8a:29:
         bd:f4:b2:c4:9c:53:f9:0d:2c:48:7f:30:71:80:3b:5c:be:0a:
         91:36:46:22:bb:6b:4e:02:35:42:22:c1:f0:95:62:f5:01:7b:
         98:c3:dd:3b:eb:af:75:3d:b3:d2:d2:01:9f:6d:cd:fe:70:6e:
         de:f0:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:35 2024 by rpki-client on console-ams.rpki-client.org