Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File:                     dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier:          ZcKuPfTtikGeZptSdFkARt+2LEaZavuUzMUJRHL7N+Q=
Subject key identifier:   6C:45:D5:2A:B3:C1:8D:08:0E:C7:F1:99:72:DC:CC:91:69:2E:D4:39
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer:       /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial:       01901DED252C1B2F57E54CF04B21C3A166D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:03:19 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:19 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:19 +0000
Files and hashes:         1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: TI/3/XPspG0Bi0ES6lDorqxx2G3WQbdgb/ro7BaUmlA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:25:2c:1b:2f:57:e5:4c:f0:4b:21:c3:a1:66:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
        Validity
            Not Before: Jun 15 22:03:19 2024 GMT
            Not After : Jun 16 22:03:19 2024 GMT
        Subject: CN=6c45d52ab3c18d080ec7f19972dccc91692ed439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:70:1d:b2:ba:03:65:51:f9:14:c1:fb:f4:
                    e3:32:a9:ed:ec:08:84:72:fd:47:72:ec:1d:36:73:
                    0c:1c:13:9b:a8:31:14:0b:9e:50:6c:9f:7b:48:75:
                    03:17:10:b5:62:e9:86:da:ca:81:03:dd:56:ce:1b:
                    2b:29:47:99:64:03:3b:bd:c8:2f:34:55:43:62:86:
                    8f:72:14:03:1c:0f:14:81:32:ad:8b:e0:5b:0a:13:
                    49:f5:81:44:20:35:0b:61:95:df:96:ca:d7:2f:45:
                    c2:6c:e6:ba:c7:f7:e9:68:f7:24:96:dd:6a:1b:9a:
                    46:06:e5:6a:83:49:10:c9:8a:d7:ee:de:8b:d2:44:
                    28:56:36:17:b2:65:93:82:39:48:45:7a:7a:b2:b8:
                    24:bc:99:07:c6:e9:09:42:e3:f8:50:74:e2:6e:c4:
                    81:01:04:3f:6d:59:42:16:50:29:6c:cb:ff:f4:23:
                    be:6c:df:85:37:e8:a9:38:51:ed:c4:44:dc:e2:1a:
                    5d:a0:9b:1f:73:8c:3e:48:04:25:91:78:26:d8:9f:
                    a0:6d:20:66:9e:32:b2:1b:36:c8:a1:b6:45:ac:19:
                    d2:8a:20:13:b8:64:55:80:0b:07:68:98:71:0f:31:
                    0e:e3:e2:de:d4:08:08:53:f6:ce:2b:d3:9b:e0:99:
                    ee:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:45:D5:2A:B3:C1:8D:08:0E:C7:F1:99:72:DC:CC:91:69:2E:D4:39
            X509v3 Authority Key Identifier:
                keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ea:a9:cb:05:e5:d6:b3:76:68:57:1c:e7:cf:41:d3:13:0f:
         f1:a4:c2:29:7a:e2:6c:ff:85:c8:34:db:d7:18:43:2e:7e:39:
         5b:96:84:fe:46:3b:aa:16:dd:03:41:3b:f5:43:f8:37:19:4f:
         ad:2c:c7:fd:3f:12:16:8e:07:44:3b:e0:b0:ce:99:87:52:cd:
         6a:bf:25:00:ee:d0:c5:be:ea:85:11:28:52:71:48:db:dd:13:
         79:8f:9d:6e:bc:e8:07:6d:3d:49:d5:07:2c:85:55:4c:e9:41:
         bd:de:ea:fb:dd:9c:b9:89:27:c3:68:5c:0a:3a:c2:52:a1:09:
         92:03:a1:0f:d9:07:d8:8e:8f:76:a7:93:f1:1c:4d:fc:cb:1b:
         50:d3:fa:62:fa:f3:eb:7f:fa:b9:d8:1f:3b:a3:c2:05:e9:af:
         68:af:30:8f:3d:69:68:f7:63:54:51:31:f3:de:22:d7:4c:9e:
         69:5e:96:a4:5b:80:73:95:1b:ba:bb:12:e7:33:4d:ef:a9:ec:
         8f:26:e1:b9:8e:2a:1b:e8:f6:1c:0d:f6:13:5d:1b:4e:72:87:
         f7:3d:1b:ce:b7:65:a3:85:a5:39:0d:01:f6:5f:23:4b:51:3e:
         f9:40:90:d6:5c:0c:9e:df:60:4a:33:0a:43:77:a0:ec:25:2c:
         00:63:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:59:47 2024 by rpki-client on console-fra.rpki-client.org