Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File:                     oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier:          5Mk8RYB/mYB5TiaceX2DHJN0mCcJeezcLVpR88j4OPM=
Subject key identifier:   5B:80:14:33:D4:AB:57:0E:83:CC:90:7F:4D:46:26:D1:C4:73:16:41
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer:       /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial:       0190411BE45FFCDFAB73D4E988EEC9D51C19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number:          03E4
Signing time:             Sat 22 Jun 2024 18:01:05 +0000
Manifest this update:     Sat 22 Jun 2024 18:01:05 +0000
Manifest next update:     Sun 23 Jun 2024 18:01:05 +0000
Files and hashes:         1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: 2gAupM/8f1ViyL2+RNpXlXgz64iiaVbe3BEbIvIg5Nc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:e4:5f:fc:df:ab:73:d4:e9:88:ee:c9:d5:1c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
        Validity
            Not Before: Jun 22 18:01:05 2024 GMT
            Not After : Jun 23 18:01:05 2024 GMT
        Subject: CN=5b801433d4ab570e83cc907f4d4626d1c4731641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:70:a7:87:3f:26:4c:9a:36:25:8f:46:f2:a3:
                    dd:11:56:1d:83:5c:1f:1f:d8:2c:5e:c9:46:4e:9f:
                    b1:33:c0:a6:ff:92:9d:a5:46:0a:05:be:c3:e6:46:
                    58:b9:10:77:93:de:4c:d9:8b:a5:5b:33:ce:ff:11:
                    5e:04:98:1d:01:6a:fd:ed:9b:9c:e6:0d:67:b0:7f:
                    42:61:3c:dd:3e:a4:3a:76:4f:b0:ce:fd:91:b6:f2:
                    77:62:35:53:8d:23:ad:cf:b3:69:6c:e5:38:d6:7d:
                    22:d0:fe:d9:c7:8c:3b:03:2d:86:a9:28:ce:cd:f5:
                    4b:a4:ac:d5:29:d0:34:32:32:ef:76:47:00:e7:fa:
                    fd:ee:94:27:68:fd:ed:81:66:64:c0:df:04:e6:25:
                    b4:96:7e:8d:1d:f6:71:6a:53:b2:48:41:6a:72:c1:
                    5d:cb:5e:04:57:7f:b4:89:38:8d:27:dd:8e:a4:e0:
                    28:74:15:28:93:d0:1f:82:03:51:5c:55:9b:41:fd:
                    b5:c4:5e:cb:d4:cd:4b:91:f3:8b:a5:85:59:fd:06:
                    b1:05:96:83:61:60:b7:8c:59:7d:31:84:af:ca:94:
                    5b:e5:26:d8:96:ab:66:53:a3:e4:74:46:a7:c7:ba:
                    26:4a:41:56:d8:8b:07:04:49:f3:ab:d9:d7:c5:95:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:80:14:33:D4:AB:57:0E:83:CC:90:7F:4D:46:26:D1:C4:73:16:41
            X509v3 Authority Key Identifier:
                keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4d:10:67:79:dd:d8:bb:59:8b:76:66:6a:67:bb:27:f4:d1:
         e9:8a:5b:1e:7b:2a:d2:5a:c5:9d:73:bb:8b:0f:1e:af:34:ca:
         8d:4a:cd:9e:3f:08:d4:f4:b3:9b:66:15:f9:d8:3d:0e:0c:12:
         e5:73:4c:40:5d:ef:95:0d:a2:c8:a4:bb:ab:2e:97:51:a1:6e:
         55:8e:01:07:b1:4a:a8:9e:15:ea:ec:20:75:61:69:c2:d6:a0:
         8c:a7:55:ab:f0:b4:e1:e7:a0:83:c6:6e:b0:65:dc:ea:1b:71:
         a5:65:55:c6:0d:90:c3:7e:d1:59:ee:ff:f9:28:b1:6b:a4:08:
         54:9e:65:56:b9:49:e4:d4:00:91:d2:73:97:85:5a:35:75:2b:
         06:95:dc:4e:77:45:af:7a:fb:84:3d:38:3c:ed:64:4b:ba:a8:
         7b:bb:67:ed:c9:71:0a:63:51:a9:0a:4a:af:7a:67:0d:d8:eb:
         ba:59:68:95:c5:1f:34:e1:df:f6:54:2f:eb:30:13:af:cd:81:
         1a:a4:5c:ac:96:a3:b6:42:f4:11:72:bc:6a:a5:af:a6:26:da:
         2a:a2:e2:ab:a4:b5:7e:e4:0b:2d:e4:7d:aa:cd:90:1a:ad:a3:
         80:6b:a9:28:2b:2a:a5:01:57:93:4f:b8:e7:9e:f6:68:5b:8e:
         f2:2c:9f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:29:54 2024 by rpki-client on console-ams.rpki-client.org