Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
File:                     HjaTxfrT8hak_3rIbO6yOwBDg10.mft (raw, json)
Hash identifier:          UpvH3Dlt95lUFh4oqW0tP2dJbjPIUwzpbBC1HtQrHNo=
Subject key identifier:   1C:88:CA:BE:24:C7:79:F0:53:CB:6B:8C:6A:D4:AB:48:C0:15:7C:A8
Authority key identifier: 1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
Certificate issuer:       /CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Certificate serial:       01901D45ED38ECF3350E298F692B9004204A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
Manifest number:          0691
Signing time:             Sat 15 Jun 2024 19:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:40 +0000
Files and hashes:         1: HjaTxfrT8hak_3rIbO6yOwBDg10.crl (hash: VIuOLL1O1i58ZKn4vNEfbBasoxS6j/ztb9/K1+tT/vk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:ed:38:ec:f3:35:0e:29:8f:69:2b:90:04:20:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
        Validity
            Not Before: Jun 15 19:00:40 2024 GMT
            Not After : Jun 16 19:00:40 2024 GMT
        Subject: CN=1c88cabe24c779f053cb6b8c6ad4ab48c0157ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:01:67:f3:8c:17:e4:0d:07:4c:8d:43:27:
                    7d:12:63:b3:11:a8:8c:1d:6f:a6:2d:a7:15:c7:ed:
                    3f:eb:e7:a2:25:d5:04:a3:33:af:be:45:70:2f:dd:
                    69:01:33:55:76:91:60:b2:3c:4f:f7:00:df:a8:a7:
                    d0:dd:90:bf:50:4a:4a:b7:2a:89:26:cf:30:e2:75:
                    2d:1a:52:d4:9e:80:2b:9b:e7:e6:8c:05:05:68:27:
                    ba:0a:36:01:bf:25:9b:ac:f3:3c:5b:9c:15:aa:48:
                    aa:e3:d3:42:bf:ff:a3:e9:bc:63:cb:0c:0f:48:bf:
                    64:a9:70:6f:7c:f5:50:43:93:38:30:b6:d5:a1:45:
                    66:0d:1d:ba:81:36:76:33:7d:bc:0c:bb:f6:03:90:
                    bd:b0:c5:3e:93:ca:cd:81:a5:4e:d4:1d:7a:5e:09:
                    90:94:ee:4a:ff:a7:ae:40:f8:63:99:7e:27:46:fe:
                    80:a6:8e:46:91:5c:a2:dc:13:b2:08:39:92:2e:2d:
                    75:cb:c3:de:51:db:60:5b:cf:e3:3b:f5:eb:b6:59:
                    12:ba:2e:67:e7:d5:ae:d1:6c:b8:e2:18:19:ae:5e:
                    c0:0d:e4:61:32:0c:e3:f9:86:b4:d3:6b:7b:0b:40:
                    86:83:6e:45:0d:61:13:67:76:0b:fd:36:04:c1:98:
                    83:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:88:CA:BE:24:C7:79:F0:53:CB:6B:8C:6A:D4:AB:48:C0:15:7C:A8
            X509v3 Authority Key Identifier:
                keyid:1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5e:d8:2b:ff:06:57:b5:92:73:f4:88:22:ae:b1:3d:5f:52:
         28:29:dc:54:f5:dc:d0:28:1f:c4:84:9a:17:12:b4:da:cc:40:
         fe:a3:b5:8a:21:5a:fc:5a:58:cf:e7:3d:01:4d:53:4c:a8:b2:
         90:21:95:c1:6e:8b:a0:60:92:46:1f:af:e2:54:0b:6c:ee:16:
         63:0b:2a:64:a4:83:fe:d4:ca:76:6f:61:01:42:1a:a9:7d:36:
         2c:32:e7:92:38:8f:b2:ae:53:57:55:0a:71:7b:a2:00:f9:7c:
         c5:d4:04:16:4a:e7:b0:c9:2f:ee:25:c6:bf:7f:09:e1:61:38:
         5a:3e:e1:e0:13:b7:67:68:ff:8d:f1:d1:f9:7d:63:a1:dc:63:
         c8:0f:59:a6:59:27:14:84:a3:9a:34:90:e9:af:05:8a:6c:6f:
         a1:b7:82:e6:45:e7:d3:a4:bf:00:55:dc:48:45:c0:07:a4:d2:
         13:d6:75:b8:00:c7:7a:4b:b7:5f:84:41:b6:e3:82:78:b0:19:
         ec:f2:f8:0c:a5:f3:1f:0f:f6:d7:73:77:a9:ce:04:85:79:ee:
         b1:4d:91:8f:84:3f:20:74:8c:5e:ce:98:de:cf:9f:97:f5:2e:
         2b:cd:c1:0b:19:61:32:d3:87:d8:7f:c3:d0:14:7a:2f:f6:78:
         a2:22:4c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:07:06 2024 by rpki-client on console-ams.rpki-client.org