Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File:                     2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier:          0Hai43e8pssQjWriKwAM3CIPmwvQ5D8KdJoE3+2Qqxs=
Subject key identifier:   B9:10:33:AC:4C:10:19:BB:88:74:BA:69:DB:31:8C:B1:48:67:90:17
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer:       /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial:       01901B5810BB1569A689C5BFF9A07DE8D23E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number:          0C90
Signing time:             Sat 15 Jun 2024 10:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 10:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 10:01:14 +0000
Files and hashes:         1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: 6BBaDrVU/b/RmbIM4QxkU0J0JY/jVPPCvUet6oeTnk8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:58:10:bb:15:69:a6:89:c5:bf:f9:a0:7d:e8:d2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
        Validity
            Not Before: Jun 15 10:01:14 2024 GMT
            Not After : Jun 16 10:01:14 2024 GMT
        Subject: CN=b91033ac4c1019bb8874ba69db318cb148679017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:10:89:00:f4:15:01:a4:cb:55:4e:ae:cf:
                    cc:ca:1f:c3:65:02:ad:f9:a8:90:24:90:fe:a8:7a:
                    c4:32:40:82:91:08:12:cf:ab:87:75:4c:2f:b4:64:
                    80:d3:81:6f:0d:ab:8b:88:30:fc:b8:52:0d:ae:84:
                    f4:6d:c9:17:46:12:56:64:b9:3a:90:7f:83:e8:91:
                    9f:98:e0:8e:02:5f:ed:1b:2f:d8:19:15:51:b1:28:
                    f6:61:c2:08:5f:d0:8f:e3:c9:49:a2:de:99:f4:34:
                    a2:20:12:f1:15:ab:d2:67:c2:b1:ff:29:c4:7a:0a:
                    04:b5:5d:bf:e9:7b:a5:f2:40:85:1b:e2:30:be:94:
                    8a:22:5d:ce:6a:e9:11:53:74:b3:58:0b:79:93:dc:
                    3e:19:a3:61:a8:ec:4d:b6:a3:91:03:05:55:43:dc:
                    cc:79:d3:d0:61:da:a0:79:95:f2:a3:a9:5e:51:7a:
                    c8:0f:19:b6:e8:e7:00:9b:0b:b6:e6:99:e5:b7:9e:
                    15:39:d3:8a:03:71:7c:7d:4a:2a:83:38:1a:ae:6e:
                    6e:f0:73:b5:54:32:e0:14:34:21:9c:42:77:65:cc:
                    2c:a3:23:d6:12:f7:f1:b6:b1:64:48:5d:2a:af:22:
                    00:b5:5b:fa:4f:ff:fa:81:bd:20:2d:b9:db:f8:15:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:10:33:AC:4C:10:19:BB:88:74:BA:69:DB:31:8C:B1:48:67:90:17
            X509v3 Authority Key Identifier:
                keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:1e:23:00:5f:d2:fb:92:93:cc:3a:99:b2:66:69:7d:ae:82:
         0d:4f:9c:53:93:6f:95:57:b5:94:b0:31:26:d2:56:86:42:63:
         f9:11:71:5f:c2:8b:f4:2a:e6:40:14:fb:a9:89:46:7a:39:1e:
         64:aa:12:5a:a0:4f:44:db:9d:dd:64:26:79:bf:02:57:bf:77:
         49:11:da:eb:5e:85:fd:8a:2e:43:87:00:b2:ba:09:6d:0e:7f:
         f7:ad:5b:c5:e0:c4:c0:bd:21:bb:ce:18:df:ad:f6:11:ac:e1:
         28:7c:9b:02:d9:3e:36:e3:0d:ea:53:a4:e9:15:63:54:b2:df:
         6a:d8:58:88:d6:f1:67:82:b4:f5:54:ba:39:03:e8:95:b6:d4:
         9c:8a:db:3d:6a:6a:52:09:a4:8f:43:97:41:5a:ff:7d:b5:96:
         83:d4:01:26:0a:a9:ae:da:cb:46:1c:df:ed:94:db:a3:0f:ac:
         5c:d9:c2:24:16:9f:35:74:fa:f1:d5:07:96:36:e8:c8:e5:2b:
         d4:ed:03:81:a4:ea:6a:4b:ad:43:ac:14:6b:0e:0f:7b:36:6b:
         b7:38:5c:1e:37:f1:b8:6e:ac:be:71:cb:04:8a:7a:3e:89:10:
         78:be:19:df:26:83:20:93:e9:92:31:84:63:d6:36:ca:13:79:
         92:fa:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:35:34 2024 by rpki-client on console-fra.rpki-client.org