Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File:                     dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier:          K05kq/1+PSUFwhgU3+Eylr+q8JhOTM3H2V3Fyhd+CD8=
Subject key identifier:   0D:06:C3:C3:90:F4:52:A7:60:59:F3:23:6A:8A:2B:73:25:74:CF:59
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer:       /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial:       01901DEBFDA51EEE7EAD13918C38195FA492
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number:          0438
Signing time:             Sat 15 Jun 2024 22:02:03 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:03 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:03 +0000
Files and hashes:         1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: IrevT4gzg1KEZQxbqfCRvbcxrtUtC2E2XeaacrzZ8QI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:fd:a5:1e:ee:7e:ad:13:91:8c:38:19:5f:a4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
        Validity
            Not Before: Jun 15 22:02:03 2024 GMT
            Not After : Jun 16 22:02:03 2024 GMT
        Subject: CN=0d06c3c390f452a76059f3236a8a2b732574cf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:34:17:b4:58:04:8d:77:ca:fd:94:0b:b8:19:
                    fc:46:c5:31:0b:01:8c:e3:15:0a:60:d4:0e:9a:46:
                    ea:6e:72:ac:5a:23:1c:6b:58:6a:00:23:83:a2:3b:
                    f1:a8:24:79:18:c1:06:25:70:b3:8b:cb:f9:25:dc:
                    24:79:f6:12:25:a6:59:22:3a:87:14:d3:70:45:1e:
                    c8:89:8b:64:98:1b:4c:50:a5:a3:da:54:47:49:c1:
                    24:74:92:ab:2c:19:bd:ec:22:15:b6:38:12:3c:3d:
                    a7:ce:2f:e0:f5:62:1a:f7:29:5b:79:a8:96:41:c3:
                    e4:da:b1:55:3f:7c:09:65:d7:14:e5:cb:f0:36:7d:
                    7c:a2:42:bc:ff:45:14:5f:00:c4:03:01:d0:59:9d:
                    7b:de:3d:a8:fd:5a:83:fd:02:32:b2:f5:ed:3e:4f:
                    4b:71:c7:73:d0:77:60:32:1e:5f:2d:65:35:11:36:
                    dc:b0:e3:d7:04:54:40:af:6b:8b:36:b5:b6:1e:e5:
                    bd:44:fa:73:f8:f0:22:1f:94:9e:35:aa:06:81:8c:
                    b6:b6:5d:95:c4:a0:a9:f6:26:cc:e1:72:8a:05:9e:
                    16:c6:cd:d0:68:7e:d5:e9:e3:7f:7c:83:fb:3b:65:
                    99:47:4d:31:69:89:53:40:ec:ef:40:f6:2d:f6:c4:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:06:C3:C3:90:F4:52:A7:60:59:F3:23:6A:8A:2B:73:25:74:CF:59
            X509v3 Authority Key Identifier:
                keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:45:9e:59:ae:43:8a:4a:52:2f:4d:de:45:ec:03:30:5b:68:
         85:c2:12:55:f1:17:82:69:80:92:c2:07:79:d4:87:0e:d7:bf:
         2d:ad:12:96:ae:aa:20:c9:26:a1:8b:c6:4b:1d:68:4a:84:fa:
         5a:8c:cb:a0:a4:eb:40:c6:b0:de:cb:6d:50:0e:89:af:6d:4a:
         e6:0b:1c:d4:cd:f3:9d:1f:ea:aa:a3:7d:00:e5:54:41:e8:63:
         d0:0b:32:4f:8e:ff:7f:89:4e:d3:c5:7e:b0:24:59:7e:01:96:
         ea:4c:d2:22:67:4b:56:8f:33:db:43:f7:91:19:93:9d:12:bb:
         8c:fc:ce:d6:97:49:02:97:95:21:42:a2:6d:aa:28:4f:78:e6:
         95:f1:b0:f0:fa:ef:a6:0e:e5:69:6a:01:cd:14:f5:b1:26:d8:
         54:50:13:3c:6a:d0:41:e2:bd:21:15:01:97:be:40:e6:62:6c:
         4f:0b:1c:34:6e:39:ba:11:6f:e6:2b:d0:d0:d5:ee:75:bc:27:
         ac:a6:0d:3f:19:e5:3e:5b:4e:fe:a9:7a:a8:b4:19:89:ec:4f:
         26:f2:4c:27:1e:e1:7f:11:4a:59:0b:45:d7:3b:8a:f4:84:07:
         32:76:29:67:9b:e4:e3:16:fe:a7:a1:bd:ef:20:2f:69:b8:d5:
         ad:0b:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:56:34 2024 by rpki-client on console-ams.rpki-client.org