Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File:                     dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier:          cpArVEDw6JqTy8NFjkrV3pqkcuTnZAocJWhmwxOu5r0=
Subject key identifier:   40:26:49:54:82:59:3D:63:7A:65:AE:90:27:84:27:A5:9C:21:0E:E7
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer:       /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial:       019040AFD347A68A1B014104B48E5C3A6FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number:          044A
Signing time:             Sat 22 Jun 2024 16:03:03 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:03 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:03 +0000
Files and hashes:         1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: MBTFo0ZMnXEse2BGDYwk3Xaw/7HAHis88SKO5f3ONbo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:d3:47:a6:8a:1b:01:41:04:b4:8e:5c:3a:6f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
        Validity
            Not Before: Jun 22 16:03:03 2024 GMT
            Not After : Jun 23 16:03:03 2024 GMT
        Subject: CN=4026495482593d637a65ae90278427a59c210ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:60:82:a9:ee:a7:fa:25:4f:9b:72:b9:98:
                    45:d0:9b:d9:46:a6:63:b7:6d:9a:d1:ad:49:04:56:
                    0a:d7:d3:6d:c3:1e:86:b1:ce:73:21:59:74:bc:67:
                    d3:d6:cf:80:ca:da:08:ad:50:70:ae:1b:a1:6c:95:
                    4f:fd:3c:ea:43:8d:0e:8d:bf:af:76:f6:7c:35:5e:
                    61:50:4e:42:3e:4f:b5:aa:3c:e3:3e:95:7f:45:20:
                    82:7e:97:59:d3:8b:92:2f:26:97:c4:84:f0:fc:2a:
                    5c:48:9c:58:42:8c:6d:8e:30:2b:67:16:6e:ba:e0:
                    27:19:99:30:8a:bb:e8:97:5d:25:e9:90:08:32:c7:
                    50:d2:60:64:93:26:d1:6c:c3:0d:ee:65:e4:5a:72:
                    1c:0e:94:8e:37:d6:a9:1a:6a:97:67:a5:9d:a5:50:
                    52:0d:41:8c:29:5e:9f:ef:e8:5e:5f:75:60:5a:73:
                    bf:f6:90:c6:c6:dc:94:74:59:3e:d3:9a:b9:a3:ec:
                    5f:e3:6b:8d:74:d2:20:19:af:81:b2:05:f2:72:e8:
                    05:99:8f:e9:55:12:91:59:49:0d:8e:0b:63:ae:0a:
                    1f:04:c1:48:62:35:86:90:1b:ab:df:87:e0:f7:22:
                    94:6a:37:80:5b:42:85:43:72:e3:1a:43:5b:b4:c7:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:26:49:54:82:59:3D:63:7A:65:AE:90:27:84:27:A5:9C:21:0E:E7
            X509v3 Authority Key Identifier:
                keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d5:3c:2a:0c:5e:85:7d:9f:5b:a1:6a:30:4d:c6:7f:3f:96:
         39:3a:8c:2f:4e:cf:22:f1:00:73:61:fd:74:54:70:b5:71:42:
         9f:2a:aa:4c:78:62:8b:d5:f9:fa:a0:e1:00:96:ba:f9:84:70:
         5c:fb:c2:5a:bb:cd:cf:29:f1:f5:f0:e6:08:ff:60:6a:40:80:
         87:20:ad:54:ea:cd:a8:0a:9a:79:ad:45:34:6f:e3:56:89:d8:
         b6:c5:b6:d2:51:dc:a8:17:a6:c1:c0:23:dc:d5:36:d2:df:e4:
         ae:65:57:74:ce:e4:26:d6:e7:1d:52:b2:e8:fc:8d:70:33:8c:
         a3:72:85:5f:9a:a3:fd:59:1b:ca:1d:83:da:70:dc:66:af:5b:
         a7:21:80:d1:35:a0:ba:2f:1d:4f:3c:ce:fc:20:8f:6d:e6:6c:
         bb:eb:7a:c4:51:eb:8c:d9:02:1f:5d:36:aa:bc:f1:8f:6f:f3:
         13:12:c0:09:42:46:2a:d9:4a:a8:a9:50:95:ed:45:b3:eb:67:
         e1:c3:5b:eb:f0:69:48:d4:64:26:66:db:f5:26:d3:41:e8:af:
         18:b6:57:04:a3:47:8a:7d:c8:f5:34:3a:04:15:6c:10:1c:c4:
         1f:40:fb:a0:ea:21:08:b0:5b:8b:3d:6f:32:f9:6c:1b:6b:c5:
         60:36:ca:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBAr9NHpoobAUEEtI5cOm/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MGNhNzIxNGIxNmY1OGM5NWQ2MmRlZjAwNTkxNTg2ZGJk
MjNjYWEwHhcNMjQwNjIyMTYwMzAzWhcNMjQwNjIzMTYwMzAzWjAzMTEwLwYDVQQD
Eyg0MDI2NDk1NDgyNTkzZDYzN2E2NWFlOTAyNzg0MjdhNTljMjEwZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC1ggqnup/olT5tyuZhF0JvZRqZj
t22a0a1JBFYK19Ntwx6Gsc5zIVl0vGfT1s+AytoIrVBwrhuhbJVP/TzqQ40Ojb+v
dvZ8NV5hUE5CPk+1qjzjPpV/RSCCfpdZ04uSLyaXxITw/CpcSJxYQoxtjjArZxZu
uuAnGZkwirvol10l6ZAIMsdQ0mBkkybRbMMN7mXkWnIcDpSON9apGmqXZ6WdpVBS
DUGMKV6f7+heX3VgWnO/9pDGxtyUdFk+05q5o+xf42uNdNIgGa+BsgXycugFmY/p
VRKRWUkNjgtjrgofBMFIYjWGkBur34fg9yKUajeAW0KFQ3LjGkNbtMd0owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAmSVSCWT1jemWukCeEJ6WcIQ7nMB8GA1UdIwQY
MBaAFHYMpyFLFvWMldYt7wBZFYbb0jyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGd5bklVc1c5WXlWMWkzdkFGa1ZodHZTUEtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zNjQ0MTMtYTZkZC00YTM3LTg4OWMt
OGFlYjM4NzUxZjEyLzEvZGd5bklVc1c5WXlWMWkzdkFGa1ZodHZTUEtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zNjQ0MTMtYTZkZC00YTM3LTg4OWMtOGFlYjM4NzUxZjEy
LzEvZGd5bklVc1c5WXlWMWkzdkFGa1ZodHZTUEtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdU8Kgxe
hX2fW6FqME3Gfz+WOTqML07PIvEAc2H9dFRwtXFCnyqqTHhii9X5+qDhAJa6+YRw
XPvCWrvNzynx9fDmCP9gakCAhyCtVOrNqAqaea1FNG/jVonYtsW20lHcqBemwcAj
3NU20t/krmVXdM7kJtbnHVKy6PyNcDOMo3KFX5qj/Vkbyh2D2nDcZq9bpyGA0TWg
ui8dTzzO/CCPbeZsu+t6xFHrjNkCH102qrzxj2/zExLACUJGKtlKqKlQle1Fs+tn
4cNb6/BpSNRkJmbb9SbTQeivGLZXBKNHin3I9TQ6BBVsEBzEH0D7oOohCLBbiz1v
MvlsG2vFYDbKVw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:58:06 2024 by rpki-client on console-fra.rpki-client.org