Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File:                     dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier:          33RN/Rih4AVwGShZjd4fqapsiEiW8LHFSnO1R/gYWus=
Subject key identifier:   4C:B9:31:2B:77:BE:07:B0:EC:56:61:57:13:62:D5:08:EE:0F:F7:1F
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer:       /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial:       019038F486D044CBBAC87CC5C57C10847A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number:          11D0
Signing time:             Fri 21 Jun 2024 04:01:07 +0000
Manifest this update:     Fri 21 Jun 2024 04:01:07 +0000
Manifest next update:     Sat 22 Jun 2024 04:01:07 +0000
Files and hashes:         1: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: 1yTn8QapCQIN5KOmISSycYqN3X+2G2M5yyVNVm2xVvI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:f4:86:d0:44:cb:ba:c8:7c:c5:c5:7c:10:84:7a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
        Validity
            Not Before: Jun 21 04:01:07 2024 GMT
            Not After : Jun 22 04:01:07 2024 GMT
        Subject: CN=4cb9312b77be07b0ec5661571362d508ee0ff71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:ea:70:63:2a:7d:16:cc:ec:64:8d:88:57:
                    60:33:0d:d8:51:11:b3:53:1f:aa:73:8a:11:be:2e:
                    79:83:32:e8:bc:cb:5b:87:68:3a:15:f9:23:37:17:
                    48:1a:38:ac:71:9d:a3:0e:a1:2e:ec:b2:7b:f0:ec:
                    6a:91:ed:fa:35:3c:d1:81:e3:7f:5d:80:bb:3d:fa:
                    a6:f6:62:6a:9c:41:c4:f9:5a:55:53:60:7c:76:ae:
                    8b:b2:e5:e7:03:7f:32:64:c4:88:49:de:3c:d3:b8:
                    04:19:92:14:d4:c0:47:aa:e0:f5:2f:6b:d4:5f:44:
                    5a:24:54:ed:84:24:19:89:64:83:19:1f:2f:72:3e:
                    a1:e5:b6:f5:c9:6b:8d:88:5c:7a:24:9e:88:89:9b:
                    e9:03:15:c3:b1:15:0c:ba:ae:0f:ac:f2:87:bb:92:
                    37:1c:b9:d8:be:70:38:1a:be:ef:ed:1f:91:82:ea:
                    10:11:3d:89:5b:7a:f8:62:da:f2:05:07:09:d2:c8:
                    4b:da:e3:65:a5:27:d2:d5:2e:9d:2f:44:08:63:0b:
                    ff:de:28:62:82:bb:6c:8b:f1:e7:65:9d:d4:a6:bf:
                    9a:59:cb:c7:e9:f9:ed:78:8d:ed:f2:f1:f4:31:14:
                    40:59:4f:bc:da:c8:4d:e7:03:c7:c3:72:dc:08:aa:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B9:31:2B:77:BE:07:B0:EC:56:61:57:13:62:D5:08:EE:0F:F7:1F
            X509v3 Authority Key Identifier:
                keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:04:89:e9:71:cf:16:8f:67:8a:21:d2:50:bd:11:2b:6c:
         c3:98:a1:89:f1:a0:b2:c8:6e:68:a6:d8:40:42:c3:2e:b1:eb:
         e4:fc:90:99:44:72:a4:fd:83:df:30:88:51:20:fe:98:93:cb:
         f9:24:82:b5:f5:5d:06:3e:39:76:67:c9:1e:a6:d1:fe:bf:ee:
         b7:ec:fd:10:1f:87:1c:a4:63:c9:5c:e4:c0:07:d4:aa:de:45:
         16:c1:12:ee:bb:6b:fe:d4:b3:f0:fd:d1:02:76:2f:53:08:72:
         4b:61:2a:9a:3f:5d:25:fd:92:87:13:27:81:61:ad:a1:d6:b6:
         fb:b4:8e:b3:f9:d5:9b:09:fd:93:e0:de:b2:b9:8a:6c:60:95:
         43:d2:e1:42:dd:92:d5:65:52:47:74:6c:7a:a4:38:34:91:d2:
         71:c1:c8:b4:bd:cc:3e:c2:b9:8b:72:71:ae:24:54:4a:65:92:
         19:29:8a:52:e1:cd:8d:29:a2:21:e8:7e:0a:0f:c6:da:9c:06:
         a5:cc:d1:66:33:e6:3e:e4:60:c8:54:82:3d:f9:8d:8d:13:4a:
         6b:1b:58:ab:d1:56:21:c0:65:14:fb:a5:a2:5b:b2:03:f2:20:
         2a:5a:d2:ee:d2:4b:18:ab:17:74:08:90:2f:79:43:b8:6c:5e:
         75:33:5f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:28:49 2024 by rpki-client on console-fra.rpki-client.org