Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File:                     MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier:          699kG4gwFoD9NAHuYcr+xxGEPMLCyrXQ2Yccncmx6sY=
Subject key identifier:   78:6C:F1:EC:1D:34:30:28:B8:C6:3D:26:5A:C4:A3:63:B1:7F:FF:B8
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer:       /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial:       0190448C3C5282ADA7B50819107789D834CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number:          03D5
Signing time:             Sun 23 Jun 2024 10:02:39 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:39 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:39 +0000
Files and hashes:         1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: MrYir9DI6WMVcZVtZ3BI2XcnbNBK6+cURwgs0Tctql4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:3c:52:82:ad:a7:b5:08:19:10:77:89:d8:34:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
        Validity
            Not Before: Jun 23 10:02:39 2024 GMT
            Not After : Jun 24 10:02:39 2024 GMT
        Subject: CN=786cf1ec1d343028b8c63d265ac4a363b17fffb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:66:a6:ef:14:15:c8:c6:f0:78:e2:66:5f:
                    6d:34:cb:3e:d4:bc:b5:e2:31:19:18:d7:d5:1b:71:
                    f8:bc:81:70:df:d6:9f:88:38:fb:75:c0:2c:23:5c:
                    29:d0:a1:d8:b1:e6:cf:a9:2b:2e:22:0e:93:15:e0:
                    bc:58:98:aa:60:01:ab:85:1c:3f:67:01:4b:7a:f8:
                    3b:12:7a:e9:ec:90:de:8d:b6:d4:5a:bc:53:e2:e8:
                    87:54:40:59:45:42:5d:ab:51:7a:e9:83:0d:18:94:
                    9a:98:f7:14:ba:87:9d:38:27:6a:f4:44:5c:4c:f9:
                    01:ba:55:19:34:fb:dc:f6:9b:ad:42:72:6e:c3:13:
                    82:6e:bc:3f:c1:5b:b4:44:5d:cc:51:26:b5:00:fc:
                    1d:2a:44:2b:3c:ff:00:2f:eb:a5:79:98:66:dd:cc:
                    6f:21:a0:52:eb:b0:79:bf:6c:8a:7c:75:0e:8e:7b:
                    14:e8:ff:47:c3:56:88:b8:93:c4:5c:e4:ff:6b:fe:
                    73:c3:b2:83:04:06:2f:11:5b:08:e1:c0:9b:f4:25:
                    56:1a:5d:5e:32:63:51:cd:0c:d8:a5:a8:1e:a8:82:
                    b0:8a:e3:71:80:3d:d4:5a:03:ac:85:32:fd:e0:8a:
                    07:cc:ba:1a:db:61:d0:3e:0d:2a:ef:8f:c3:26:77:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6C:F1:EC:1D:34:30:28:B8:C6:3D:26:5A:C4:A3:63:B1:7F:FF:B8
            X509v3 Authority Key Identifier:
                keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:47:31:65:4e:c7:ce:23:3c:26:a7:59:a3:7d:c1:a8:56:39:
         a6:20:3f:e1:84:3f:68:3c:50:6a:04:0b:be:da:87:0a:b9:09:
         44:04:48:1a:85:19:59:97:7b:b6:07:1d:bd:f4:1a:a0:d3:ba:
         c5:42:dc:1b:04:43:c3:41:d7:c0:40:4b:56:34:d7:98:51:bb:
         5d:12:d0:35:65:31:9c:3e:e3:82:c6:70:4d:e4:27:f9:dc:d8:
         ca:4b:e5:c9:6c:b3:eb:e2:81:7d:84:ab:5d:2c:c6:4e:d0:ec:
         bc:0e:89:7b:73:c4:ff:b6:a2:b4:41:00:8c:0b:a3:0f:ff:8f:
         57:31:14:ea:53:f0:81:23:dd:0f:1b:d0:40:bb:cf:0c:03:e7:
         55:44:6d:b3:58:9c:98:33:6d:a7:09:3d:14:16:2a:18:33:af:
         22:9e:c5:19:15:42:94:40:61:f7:03:f5:36:df:8d:e8:52:96:
         91:d4:c3:0d:22:e7:da:99:ba:0e:95:36:a4:80:a7:81:42:dd:
         9c:ab:7f:1f:28:16:15:b9:cf:ae:92:cf:64:c8:97:21:7e:a2:
         26:60:5a:21:65:ce:af:95:46:b0:51:79:f8:17:42:71:7e:c6:
         6b:cb:2a:2f:23:09:36:d8:f9:aa:09:ee:08:a8:4c:a3:ff:be:
         3c:2f:bf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:46:58 2024 by rpki-client on console-ams.rpki-client.org