Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File:                     dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier:          UHAuLye709i1QJh2Zkpp8DzoOJwwBzrHqXF0UVjEHIk=
Subject key identifier:   92:0E:F5:E0:27:27:C2:4A:C4:C9:2B:81:6C:B1:E1:2B:3A:76:1D:A3
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer:       /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial:       01901BFEA4CDC5643D888AED1F325448B0F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 13:03:11 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:11 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:11 +0000
Files and hashes:         1: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: PWNkx9JKmq+q8DGMzoRegkcW95W+rrhCe31Vej9cChE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:a4:cd:c5:64:3d:88:8a:ed:1f:32:54:48:b0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
        Validity
            Not Before: Jun 15 13:03:11 2024 GMT
            Not After : Jun 16 13:03:11 2024 GMT
        Subject: CN=920ef5e02727c24ac4c92b816cb1e12b3a761da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:e0:7f:c2:46:82:89:20:39:04:db:1d:4a:
                    c6:a9:89:fa:8d:63:cd:6f:36:f3:e2:8b:f9:11:e3:
                    3f:83:6c:bd:12:b2:1a:5a:49:b3:3c:f9:05:ff:e2:
                    ba:48:bf:47:26:e1:1f:f2:3a:8a:90:49:74:76:b1:
                    aa:0f:27:f8:ca:5d:fc:53:ef:9c:88:42:54:34:4f:
                    31:a5:9a:bf:10:f4:ed:31:e0:ae:1a:8c:2c:e2:28:
                    71:54:b6:f1:75:a0:46:d1:20:58:df:a0:bb:1c:26:
                    ea:8e:a7:1f:e6:e3:c6:ca:cf:5c:89:ae:01:1e:ab:
                    25:93:32:b4:86:2f:9e:cc:a2:fe:79:06:81:10:03:
                    ab:5a:79:e9:bb:9d:9d:a7:1c:0b:a3:e8:b2:40:ce:
                    42:23:77:98:1e:ab:af:b3:79:61:55:9a:fe:7c:59:
                    56:bf:34:2f:2e:be:b8:90:1b:65:d7:8e:45:2f:b1:
                    d6:57:8d:86:64:24:9d:74:33:13:43:24:68:c0:5a:
                    5b:bf:44:c7:e6:c9:7c:fb:c8:06:54:5e:70:3d:d3:
                    3a:89:bf:8d:19:7d:0a:36:43:5a:74:f4:18:bf:4c:
                    50:3d:89:cf:af:da:6b:f5:8b:31:76:e5:4d:31:84:
                    e0:ed:58:37:7e:f1:b5:14:d7:94:8d:70:6f:bc:ad:
                    18:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0E:F5:E0:27:27:C2:4A:C4:C9:2B:81:6C:B1:E1:2B:3A:76:1D:A3
            X509v3 Authority Key Identifier:
                keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:66:12:fb:72:3c:ca:93:69:31:39:64:ea:6e:4f:dd:86:43:
         fb:49:7b:fe:81:73:38:c6:97:4c:24:a0:8c:48:7c:36:ea:88:
         d3:e9:7c:6f:4e:dc:cf:d6:fb:f7:03:5d:d1:76:2d:d6:d8:16:
         72:ed:d6:85:3c:c7:c5:cf:18:37:a6:20:c9:e9:e7:7a:24:30:
         73:0d:cc:93:05:b6:b5:54:e8:04:10:c6:ff:6c:85:0e:c0:db:
         c5:d5:3d:ff:3d:78:60:d8:02:1b:26:1c:6b:3f:e1:e0:1e:d2:
         d7:ff:6a:e7:d4:1f:b5:65:cf:b4:76:f3:45:5d:4c:f2:a2:0c:
         a1:e2:66:81:d8:db:5a:6d:84:67:3e:49:56:96:41:9b:05:b9:
         23:c8:82:d6:d9:f5:20:b0:2f:f2:ea:1d:b1:c9:c6:d1:05:64:
         a1:e1:86:4e:8d:e6:f5:49:01:cb:6f:68:da:d4:fa:db:17:b3:
         d1:8b:f1:b7:ff:2f:42:17:7e:d5:44:a6:8f:c8:66:0e:2d:f4:
         ed:3a:49:69:76:bb:de:de:08:e5:e0:ba:67:6a:d5:b8:aa:53:
         63:17:96:a1:aa:ec:3f:4a:69:5f:73:7e:b1:3a:95:07:77:1d:
         d4:96:ab:c7:20:ef:ad:60:e2:f8:ad:95:33:e0:1a:38:d6:1c:
         10:bc:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:28:30 2024 by rpki-client on console-ams.rpki-client.org