Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
File:                     yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json)
Hash identifier:          pXRTlr9y0TVPvB8g3I6gF3EfNVV6ba2XSXKuF3yEM2c=
Subject key identifier:   0C:B4:1E:8F:4A:99:0C:42:1B:95:CF:9F:DC:7A:E8:80:1E:DA:92:C0
Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
Certificate issuer:       /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Certificate serial:       01901EC701D2F9504FB343131D4259D4690E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
Manifest number:          1155
Signing time:             Sun 16 Jun 2024 02:01:16 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:16 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:16 +0000
Files and hashes:         1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: 4Au3TOZajaIJZnQIU0WTKPDpGZwfOICXDciTopGGXV0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:01:d2:f9:50:4f:b3:43:13:1d:42:59:d4:69:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
        Validity
            Not Before: Jun 16 02:01:16 2024 GMT
            Not After : Jun 17 02:01:16 2024 GMT
        Subject: CN=0cb41e8f4a990c421b95cf9fdc7ae8801eda92c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:94:95:e7:0c:c9:e1:fb:b5:dc:7c:b1:e9:
                    34:80:6b:d1:79:05:6f:b5:89:f7:1a:95:5a:2e:27:
                    9d:e1:34:10:96:e7:41:b6:be:2e:d6:c2:f4:df:61:
                    bc:96:b5:a0:31:da:ad:34:65:1a:21:f6:b6:b6:72:
                    2e:af:f9:74:85:22:e0:58:90:b3:8d:dc:f3:76:54:
                    76:0e:e7:c1:e6:57:5a:63:d3:fd:6e:53:8e:8e:04:
                    45:b4:e2:1f:f2:b0:89:eb:46:7f:0b:be:b5:a2:88:
                    06:a7:ea:38:0f:a0:17:dd:f4:51:fb:73:30:71:bb:
                    a4:59:e6:26:da:75:18:2f:7b:d1:24:1a:27:7d:e5:
                    44:00:75:cd:0f:34:29:43:91:8b:53:c2:79:03:cd:
                    b6:3c:b4:96:d5:5b:5e:9d:1f:ff:2d:95:d1:bf:0b:
                    5c:29:80:49:3b:75:1a:f0:dd:45:96:c6:37:5c:a3:
                    db:79:44:51:44:2a:9b:28:ea:3a:ee:1e:9f:14:2d:
                    7d:ff:61:f6:23:1a:cf:0b:a7:0c:02:4f:40:9c:1f:
                    1a:0d:45:4a:8f:32:ec:62:bc:dc:f1:80:a0:b8:c3:
                    8d:6c:fd:e0:4d:b7:ab:e6:2d:f4:ad:3c:90:76:1b:
                    15:71:8b:69:67:d8:9f:65:86:24:be:44:47:2a:64:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B4:1E:8F:4A:99:0C:42:1B:95:CF:9F:DC:7A:E8:80:1E:DA:92:C0
            X509v3 Authority Key Identifier:
                keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f0:10:2c:b5:ca:2d:57:86:0c:9b:dd:1e:4e:51:02:9b:4e:
         f6:ae:07:1f:45:bc:f6:97:1e:5c:c3:8c:8f:fc:92:9e:f3:4e:
         ad:a5:d2:df:2e:8b:f4:58:80:da:f7:95:34:a2:10:fb:01:c5:
         f5:ad:02:06:11:d1:ae:f2:2e:44:64:90:14:04:f6:ab:0a:18:
         cf:62:51:a1:f4:46:10:01:1b:66:33:bb:30:1e:72:9f:6b:83:
         1e:da:ee:89:30:56:50:95:f2:b6:79:90:80:55:31:e5:e7:8f:
         47:dc:ba:a8:ec:70:8f:d3:b0:40:7b:57:5d:0a:9e:44:8c:50:
         27:6d:4b:a7:22:f1:50:4b:0e:84:03:5f:16:83:bf:7e:71:9f:
         2d:84:33:fd:4e:d9:ac:87:5b:01:4f:f7:c7:d1:71:fc:b9:32:
         a9:f5:e8:c5:67:48:96:78:75:e3:96:f0:4f:e1:71:fc:a5:08:
         04:6a:a2:11:4d:22:26:6f:82:9e:bc:f7:43:d5:26:3e:6e:27:
         6b:75:e0:d1:0f:c1:08:97:51:c5:ec:0c:99:58:4f:06:af:e4:
         ef:0a:5e:31:b4:ee:83:6c:2b:15:e5:03:90:80:3d:65:ce:4e:
         25:76:7d:a3:ef:5c:57:e7:f7:e2:f8:69:65:32:a7:07:e4:c7:
         fb:2d:28:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:48:02 2024 by rpki-client on console-ams.rpki-client.org