Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File:                     JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier:          A1mO3dlT9595jPu++Jg3bkEa8LOJps1/nuVrI2mmvzQ=
Subject key identifier:   2D:E9:A6:C1:83:8D:C1:B3:1B:F1:87:A7:EE:7A:6E:19:70:74:A0:51
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer:       /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial:       0190343C19D0B29A5A9BFDDF65D054F9FC7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number:          0133
Signing time:             Thu 20 Jun 2024 06:01:12 +0000
Manifest this update:     Thu 20 Jun 2024 06:01:12 +0000
Manifest next update:     Fri 21 Jun 2024 06:01:12 +0000
Files and hashes:         1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: JEhhgjv8GNkv3l1QgH+owuv8o9+EwwSgBLjHRUl90Mg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:3c:19:d0:b2:9a:5a:9b:fd:df:65:d0:54:f9:fc:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
        Validity
            Not Before: Jun 20 06:01:12 2024 GMT
            Not After : Jun 21 06:01:12 2024 GMT
        Subject: CN=2de9a6c1838dc1b31bf187a7ee7a6e197074a051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:42:10:91:63:6c:aa:e3:28:fb:c5:ef:74:
                    39:28:ec:ea:2e:4a:c5:73:82:50:0d:c1:24:26:d1:
                    a1:f2:73:aa:48:9b:ae:dc:41:24:34:4f:ce:e2:cf:
                    5a:03:af:71:e0:47:57:97:3c:2b:d6:06:a9:4d:99:
                    3f:6f:5d:25:e8:4c:8a:d1:40:1e:03:e3:05:51:84:
                    32:b5:19:36:30:3f:db:29:6b:d2:58:b8:b2:b6:51:
                    cf:b3:b0:68:e4:ae:e8:e4:0d:81:b9:fe:b2:54:2a:
                    7c:63:a2:b3:f7:a7:fa:f7:b2:ae:e7:7f:01:b2:83:
                    59:f9:9c:3b:75:81:e7:1b:32:bc:6f:b4:b3:11:a4:
                    f1:b8:87:e1:b4:8b:a9:bb:49:38:5e:fb:50:9b:b1:
                    ff:5f:f5:04:34:27:df:60:d5:76:21:8a:97:34:a7:
                    29:41:c9:79:6c:52:13:b6:89:f3:8c:86:39:5d:67:
                    c3:f1:ff:a4:77:b3:d8:19:fb:f8:c2:6b:7d:3f:79:
                    8b:d0:2b:09:2d:73:8f:2f:4e:95:6c:f7:a5:2b:34:
                    19:0c:47:05:43:dd:82:e6:61:fc:b4:64:d5:39:ee:
                    1d:9a:0b:88:84:8e:c3:c2:37:59:ff:2e:9c:e5:45:
                    ad:6b:71:85:a4:bf:5d:1a:5c:a7:62:65:13:37:73:
                    dc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E9:A6:C1:83:8D:C1:B3:1B:F1:87:A7:EE:7A:6E:19:70:74:A0:51
            X509v3 Authority Key Identifier:
                keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d7:b0:2f:6c:c3:ea:87:a5:51:b3:3a:ee:02:81:04:f9:2c:
         61:e5:96:17:e1:15:be:1b:36:20:4b:4b:07:c2:bf:ba:c2:41:
         fe:94:49:02:2d:70:9a:11:2b:ee:04:2e:3f:a3:8e:5a:3a:73:
         c6:ab:b0:84:70:f6:70:3a:97:b4:c4:c9:4d:dd:f8:69:e4:2d:
         80:79:7d:59:76:a9:12:7a:34:82:41:5f:66:62:f8:ca:c1:1f:
         e1:52:53:93:2d:8a:00:67:7a:80:3e:8e:46:9e:be:38:74:a0:
         d3:81:28:cb:6b:e7:c1:a7:68:ae:f0:04:ff:dd:14:15:06:db:
         3b:1c:cd:1c:7a:6e:2d:f3:56:48:c4:1b:82:e6:d5:2c:0c:d0:
         fd:33:16:34:78:ae:c5:3f:2b:bc:a8:9d:ca:c0:a6:a4:c3:3b:
         85:12:6d:4e:72:f6:2d:77:32:73:f8:fa:60:c6:83:7f:ac:34:
         54:64:88:17:85:ff:fa:b5:27:48:38:a0:3f:32:a3:1a:ee:10:
         00:93:91:94:02:11:c1:cf:f3:0f:72:c4:97:23:03:7a:0b:57:
         23:81:be:d2:8b:43:65:59:b2:5d:70:e6:7a:8f:b9:e5:cb:40:
         17:54:79:74:d6:81:b9:3c:20:ae:8f:83:b9:ff:6b:45:20:6d:
         c8:df:25:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:24:43 2024 by rpki-client on console-fra.rpki-client.org