Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
File:                     cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json)
Hash identifier:          i5tHA3zvhYbB6KqJGAxC8erl9a4VJZFudm36xTF7olc=
Subject key identifier:   74:20:C2:32:DC:12:47:1C:02:34:8E:E6:81:DE:5B:CC:02:8A:B0:39
Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
Certificate issuer:       /CN=70379a6713e79e598d9feaa66dca169188e0218d
Certificate serial:       01901D462F8F4592E0F4660318723B71EE7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
Manifest number:          09CA
Signing time:             Sat 15 Jun 2024 19:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:57 +0000
Files and hashes:         1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: 0A2mAG/BB5Wnk+vky8fXJvN4ZChMFvO1NB85fWVUNdU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:2f:8f:45:92:e0:f4:66:03:18:72:3b:71:ee:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d
        Validity
            Not Before: Jun 15 19:00:57 2024 GMT
            Not After : Jun 16 19:00:57 2024 GMT
        Subject: CN=7420c232dc12471c02348ee681de5bcc028ab039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:0a:1c:5c:02:9d:e8:78:3b:b4:85:84:7a:
                    ab:b7:48:8d:13:ee:a0:6e:b9:07:75:b2:73:82:cc:
                    a9:12:d3:e9:ef:1b:0c:ad:d0:fd:4b:1f:95:cd:98:
                    02:45:86:11:bc:1c:81:91:55:b3:69:cc:e1:ae:9b:
                    24:a5:f1:f3:25:49:d6:41:d3:c9:f8:51:67:11:65:
                    e9:d9:46:4f:a8:17:e1:7d:4f:de:c8:10:b7:88:3b:
                    3a:46:2e:49:f2:be:4e:c8:16:9a:46:75:64:ca:cd:
                    72:be:67:f9:b3:6b:af:75:ba:21:49:71:a7:ae:e6:
                    63:66:cc:4c:cc:42:9f:26:8f:37:d1:95:36:a1:95:
                    0b:71:4e:c2:d0:a7:c4:d9:41:ee:2c:6f:cd:72:50:
                    d4:ae:5e:48:16:da:9c:c0:b1:d4:36:c3:3a:e6:e8:
                    5f:84:ae:08:72:fa:78:07:4a:92:4b:55:b0:0f:11:
                    d6:32:7f:ea:7b:7f:c2:77:36:a7:dd:bf:a2:21:01:
                    7d:6d:ca:fd:11:bc:db:fe:51:2d:dd:3e:43:d6:83:
                    a7:50:1d:97:1f:fa:18:24:5e:93:37:63:37:fe:95:
                    34:f3:cd:4a:1f:d1:a0:4e:3b:8f:ad:2f:ca:d3:41:
                    39:a9:14:9e:c1:f7:7d:cb:be:26:68:fd:08:72:7a:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:20:C2:32:DC:12:47:1C:02:34:8E:E6:81:DE:5B:CC:02:8A:B0:39
            X509v3 Authority Key Identifier:
                keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:60:2c:1f:53:bb:8d:bf:4b:2d:67:7b:1c:c9:d1:99:33:
         80:70:4b:cd:e4:ba:da:c3:c3:3f:84:15:29:43:72:20:43:96:
         33:e3:9d:32:6f:49:2a:73:0a:c9:eb:f3:37:de:18:1b:6c:af:
         cc:11:78:49:e8:7e:92:48:17:7e:e5:e4:2e:f4:72:cb:c8:ad:
         62:25:1f:09:f8:24:c3:6a:27:16:20:39:6a:e0:0b:40:77:ce:
         4b:9f:55:e7:1e:05:af:b9:55:30:bb:93:5a:06:87:b5:c9:83:
         92:2c:8a:dd:e2:dd:04:37:a1:b2:19:1d:88:9d:35:22:b9:63:
         de:eb:06:7e:f5:9c:20:74:4c:be:c8:18:16:36:c4:b1:f4:8b:
         b7:b6:80:6d:b3:2d:b8:24:e6:22:1d:77:0c:34:99:11:a1:fd:
         c0:8d:b3:da:f1:79:80:fa:75:57:1e:15:8a:14:fa:7e:c9:d1:
         1c:cb:20:ab:8b:ab:20:8d:eb:55:cc:44:cf:03:b2:97:99:65:
         ad:c0:d0:d5:7f:be:2d:82:07:33:24:ab:4a:00:88:b9:37:c6:
         76:73:ad:97:67:50:5b:fb:16:53:9c:c1:80:c6:14:02:33:c2:
         f5:ff:68:26:fa:8b:77:15:96:69:74:db:4a:b1:20:a2:64:74:
         04:66:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:44:39 2024 by rpki-client on console-fra.rpki-client.org