Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File:                     DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier:          4XuUwz/2YBB4hQY57KtYOGEwDuExRxxYZM4rUyKj6U4=
Subject key identifier:   A1:D9:7B:56:97:C9:15:A2:13:CC:E6:58:22:BD:A3:9B:5F:2E:B2:D7
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer:       /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial:       01901DEC701501DD92C7E469B88CA874C74C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number:          0EFE
Signing time:             Sat 15 Jun 2024 22:02:32 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:32 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:32 +0000
Files and hashes:         1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: qJBOsP4/rSzaaqOi40aqhEK4n/38FQtBbunde0TY4Lk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:70:15:01:dd:92:c7:e4:69:b8:8c:a8:74:c7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
        Validity
            Not Before: Jun 15 22:02:32 2024 GMT
            Not After : Jun 16 22:02:32 2024 GMT
        Subject: CN=a1d97b5697c915a213cce65822bda39b5f2eb2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:5a:0a:ba:74:bd:87:8e:e8:ac:f8:0d:41:
                    b1:9d:ca:5b:2d:b1:98:05:c0:49:55:54:ca:26:1a:
                    d8:42:37:5a:4a:a7:0f:ce:66:70:be:18:a9:a3:4d:
                    ef:61:0f:e2:07:5e:a5:5f:9f:d1:fa:be:7c:ed:99:
                    0c:48:d3:cc:c4:1c:3b:ca:22:2f:98:2b:55:3f:e6:
                    ae:f0:63:d7:19:39:15:60:91:60:06:03:35:b0:5b:
                    dc:52:cd:0e:b1:92:f2:fc:e0:76:b8:4b:8f:79:90:
                    6c:e9:9f:73:ca:3c:88:56:9c:85:b5:77:9d:1f:bf:
                    b1:53:8c:26:88:2f:d4:7e:b8:f3:1a:12:70:45:4e:
                    12:a4:a3:ce:bc:30:ee:95:1a:d0:cd:28:98:b7:64:
                    a5:43:ce:2c:e5:f8:0d:b8:b2:89:71:cc:be:8f:21:
                    7b:dc:f1:13:98:07:9b:83:ac:03:ca:c5:f4:d8:e4:
                    3a:ea:3d:7f:5b:cd:71:14:a2:2b:5e:e5:b9:a6:28:
                    8d:cf:f3:16:a5:d9:c3:d2:7c:0e:3b:8c:4e:4f:d9:
                    ec:9f:cf:84:9f:81:1c:e1:13:66:d5:9c:75:41:1b:
                    1a:b1:a5:37:62:e6:f7:c7:8c:c1:ee:e6:86:6e:ad:
                    1f:ef:64:17:08:c2:cc:c9:e6:75:0c:86:e6:3d:1e:
                    a5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D9:7B:56:97:C9:15:A2:13:CC:E6:58:22:BD:A3:9B:5F:2E:B2:D7
            X509v3 Authority Key Identifier:
                keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:cb:e7:7b:db:9a:75:e3:99:68:b7:43:be:3a:cd:a1:1c:97:
         2c:6d:1d:93:44:36:e4:76:85:6a:66:5f:b3:c9:5d:19:06:6d:
         4d:4f:36:05:0e:22:ab:ac:ca:d6:82:6d:89:0d:c8:dd:10:a6:
         ef:92:6d:a7:2e:1a:6c:de:04:3a:ee:06:3e:78:72:ee:f4:30:
         29:2b:9d:e4:f9:06:6f:d4:16:d2:21:99:18:13:54:eb:e1:9d:
         3d:f8:08:bc:07:39:11:a7:34:e6:83:89:11:d3:dd:98:8b:18:
         1c:4f:10:90:07:fa:a3:5e:2a:41:d8:77:0f:b0:06:51:54:b3:
         a6:8a:ab:4c:c7:d5:ab:07:af:7b:2f:fe:fa:f3:a6:8f:f1:c7:
         0a:92:80:3f:b7:d1:7a:91:f7:3b:07:a2:1a:d5:d4:91:bf:71:
         f5:b6:49:db:93:3f:0a:7e:f0:52:6c:5b:a0:4c:3e:d9:7e:ba:
         5b:80:e8:b4:4e:bf:63:e0:2e:c8:c0:43:24:94:6f:74:f2:0b:
         c2:7f:9e:76:d9:e2:b1:c9:3e:6d:f7:67:7c:16:48:a8:00:3c:
         df:f7:30:06:83:8e:72:0f:80:f5:e7:1c:f3:59:36:d2:65:05:
         fc:3a:03:bc:2e:75:e5:ea:bc:96:77:65:aa:99:48:59:2c:69:
         94:97:b3:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7HAVAd2Sx+RpuIyodMdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZGM1MDliNGRiMzUyMDNhYjYxNmY0NzgxZjg1ZGQ1ODYw
NDQzZDgwHhcNMjQwNjE1MjIwMjMyWhcNMjQwNjE2MjIwMjMyWjAzMTEwLwYDVQQD
EyhhMWQ5N2I1Njk3YzkxNWEyMTNjY2U2NTgyMmJkYTM5YjVmMmViMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq05aCrp0vYeO6Kz4DUGxncpbLbGY
BcBJVVTKJhrYQjdaSqcPzmZwvhipo03vYQ/iB16lX5/R+r587ZkMSNPMxBw7yiIv
mCtVP+au8GPXGTkVYJFgBgM1sFvcUs0OsZLy/OB2uEuPeZBs6Z9zyjyIVpyFtXed
H7+xU4wmiC/UfrjzGhJwRU4SpKPOvDDulRrQzSiYt2SlQ84s5fgNuLKJccy+jyF7
3PETmAebg6wDysX02OQ66j1/W81xFKIrXuW5piiNz/MWpdnD0nwOO4xOT9nsn8+E
n4Ec4RNm1Zx1QRsasaU3Yub3x4zB7uaGbq0f72QXCMLMyeZ1DIbmPR6lQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHZe1aXyRWiE8zmWCK9o5tfLrLXMB8GA1UdIwQY
MBaAFA3cUJtNs1IDq2FvR4H4XdWGBEPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGR4UW0wMnpVZ09yWVc5SGdmaGQxWVlFUTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xOTE0ODEtZGJiNy00MDMyLTljNGYt
ODdlNTc1N2I5N2UzLzEvRGR4UW0wMnpVZ09yWVc5SGdmaGQxWVlFUTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xOTE0ODEtZGJiNy00MDMyLTljNGYtODdlNTc1N2I5N2Uz
LzEvRGR4UW0wMnpVZ09yWVc5SGdmaGQxWVlFUTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcvne9ua
deOZaLdDvjrNoRyXLG0dk0Q25HaFamZfs8ldGQZtTU82BQ4iq6zK1oJtiQ3I3RCm
75Jtpy4abN4EOu4GPnhy7vQwKSud5PkGb9QW0iGZGBNU6+GdPfgIvAc5Eac05oOJ
EdPdmIsYHE8QkAf6o14qQdh3D7AGUVSzpoqrTMfVqwevey/++vOmj/HHCpKAP7fR
epH3OweiGtXUkb9x9bZJ25M/Cn7wUmxboEw+2X66W4DotE6/Y+AuyMBDJJRvdPIL
wn+edtnisck+bfdnfBZIqAA83/cwBoOOcg+A9ecc81k20mUF/DoDvC515eq8lndl
qplIWSxplJezRA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:21 2024 by rpki-client on console-ams.rpki-client.org