Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
File:                     Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft (raw, json)
Hash identifier:          xWtopRsdXLNLdfrAS42zCfuVQ0EH+Mrm1nfID3SeOsg=
Subject key identifier:   A5:32:FE:D1:5F:C0:47:78:0A:F2:D0:9C:E8:80:A5:D5:73:AB:F0:A3
Authority key identifier: 0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53
Certificate issuer:       /CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
Certificate serial:       01901DEBB3B273A67FEC3B24AFAEA0F764A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
Manifest number:          0299
Signing time:             Sat 15 Jun 2024 22:01:44 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:44 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:44 +0000
Files and hashes:         1: Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl (hash: gdd0R5ii7ecTTpdxeIK+qItVd3ru0/SXSm8g6rWhg1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:b3:b2:73:a6:7f:ec:3b:24:af:ae:a0:f7:64:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
        Validity
            Not Before: Jun 15 22:01:44 2024 GMT
            Not After : Jun 16 22:01:44 2024 GMT
        Subject: CN=a532fed15fc047780af2d09ce880a5d573abf0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0a:35:ed:15:57:77:fc:5c:74:38:d3:93:f1:
                    d5:81:6e:33:55:02:b2:a3:c9:c6:79:20:fc:eb:1f:
                    90:8d:83:46:1e:3c:da:84:eb:5e:af:13:ff:32:84:
                    fd:62:44:b4:2e:c7:e5:2b:71:15:c1:dd:eb:ee:b2:
                    34:54:b3:1d:76:57:c6:1d:94:5c:6c:32:3a:bc:b0:
                    73:63:15:5a:d2:f1:64:ba:23:2c:ee:c4:7d:11:a3:
                    47:7d:1f:61:2a:90:68:ed:be:11:10:a1:a0:2b:dc:
                    a5:12:dc:61:94:53:17:ab:e0:b2:90:25:b3:21:a7:
                    27:2d:4a:70:ff:f6:06:89:c3:76:50:88:71:95:e7:
                    80:d2:0a:65:27:8d:f4:90:ff:36:9c:c2:50:12:f4:
                    bb:b4:2b:cb:0a:68:e4:17:12:df:a0:b4:d8:b1:48:
                    aa:f8:f9:80:8e:c8:6a:45:ce:ae:85:2c:e6:9a:34:
                    d6:c6:dd:ce:43:8c:19:93:af:86:26:3b:8d:b4:77:
                    d6:79:56:1c:c4:06:4e:d8:58:11:49:42:0b:79:2f:
                    bf:1d:66:06:16:84:2d:4b:7a:f7:d3:cc:6f:a1:32:
                    c7:bd:eb:1d:63:a2:26:36:f8:21:23:ca:fa:3e:35:
                    53:b4:7b:e5:5a:f8:4f:3c:8e:39:80:90:a3:86:91:
                    34:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:32:FE:D1:5F:C0:47:78:0A:F2:D0:9C:E8:80:A5:D5:73:AB:F0:A3
            X509v3 Authority Key Identifier:
                keyid:0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:bb:6b:cb:b5:ce:41:5b:5f:7e:e3:8a:79:7d:33:21:16:61:
         72:3a:31:b5:49:47:88:07:30:79:31:d6:ac:a2:a4:33:c8:9a:
         a6:ab:cd:60:f5:14:c7:d4:9d:92:44:5f:05:80:b1:21:64:05:
         5a:38:c1:08:cf:36:83:9d:6f:31:27:6a:74:57:fa:6d:45:1b:
         86:ff:9c:6e:fe:7b:8f:d1:51:bd:ec:b0:06:94:bd:d1:d1:0e:
         96:8c:c0:63:ed:a8:de:7c:44:3f:40:b6:c3:cf:9c:e2:81:29:
         5a:f5:97:cf:13:5d:c8:70:19:13:dd:7c:a6:77:80:f6:00:ba:
         c0:99:e5:97:13:d8:b4:c2:4d:98:72:96:27:2e:c7:3e:e4:5b:
         c7:8e:f8:30:4c:85:99:8c:76:10:0b:93:fe:20:34:21:35:bb:
         fe:ff:46:55:74:b9:5d:8d:c5:3a:0b:95:3b:a8:0c:60:30:7d:
         50:4b:df:22:c4:c3:ef:f9:af:15:f2:a5:85:54:27:35:9a:a4:
         b4:d3:b2:49:ef:78:28:37:33:21:70:1b:6f:02:66:71:a9:19:
         9d:71:56:d7:57:9d:f1:0c:6e:d3:db:69:2e:2b:b6:c6:ff:5d:
         df:9b:18:a6:ba:37:ae:50:64:3f:7e:80:2a:10:68:5b:2d:a0:
         27:1d:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:52 2024 by rpki-client on console-ams.rpki-client.org