Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File:                     1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier:          oYiz5Fkex/fISc7a6DL5/HHVZKZHuAKU3P+hqbLoxkQ=
Subject key identifier:   1B:74:B0:D9:96:A2:C3:BF:72:D8:1E:2A:02:2E:BD:61:2D:8E:B4:4D
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer:       /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial:       01901DEC439B66EE0213168E2EB23758444B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:02:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:21 +0000
Files and hashes:         1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: DGK5hQh1Afoc08cvTtooIELCJKoHmCsjge0U68QyJ0g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:43:9b:66:ee:02:13:16:8e:2e:b2:37:58:44:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
        Validity
            Not Before: Jun 15 22:02:21 2024 GMT
            Not After : Jun 16 22:02:21 2024 GMT
        Subject: CN=1b74b0d996a2c3bf72d81e2a022ebd612d8eb44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:98:c2:8a:ef:79:65:e1:c5:b4:52:b4:c0:7b:
                    87:2b:ad:89:2b:77:59:24:65:1a:f7:a3:36:a1:dc:
                    cd:cf:68:30:ee:63:54:a0:04:55:69:db:bb:a1:03:
                    96:f8:5d:8f:26:0c:a2:cb:6b:be:43:be:1f:86:15:
                    99:ca:37:01:9f:fe:4e:ca:65:fb:71:ae:a5:8b:fa:
                    57:8e:15:ea:f7:62:f6:17:23:ec:50:87:1f:6f:c3:
                    81:eb:c1:d1:b9:a4:68:77:1f:11:d7:e3:e3:34:18:
                    48:e6:df:9d:4a:b6:c0:99:e7:78:d1:78:33:f7:92:
                    26:3f:37:d8:14:24:f1:78:af:f8:fa:80:e3:78:3c:
                    7e:4d:47:54:5d:f9:1e:52:20:cd:9a:e3:ef:54:dc:
                    a1:3e:1a:d9:cd:c5:c5:26:88:58:d8:b1:a1:9e:de:
                    1a:57:4c:27:5f:12:8e:ca:97:bf:8c:51:43:44:56:
                    65:ed:fe:65:fa:5d:9f:99:66:59:fb:01:fc:a3:d8:
                    fd:72:53:f3:d7:ac:2e:a3:3f:23:25:74:e2:85:64:
                    6c:88:6e:0f:b8:33:47:de:8c:3f:cc:19:43:65:97:
                    ec:a7:8d:b3:ce:de:d0:d8:c1:48:64:61:ee:47:52:
                    3a:75:28:af:7d:21:a3:f7:c0:5b:8c:00:89:4e:66:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:74:B0:D9:96:A2:C3:BF:72:D8:1E:2A:02:2E:BD:61:2D:8E:B4:4D
            X509v3 Authority Key Identifier:
                keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4e:90:f3:d7:1d:24:c6:79:d0:3f:3c:2e:d9:46:76:ec:ed:
         a4:bc:bf:58:42:77:31:7c:f4:85:25:ae:47:ca:93:20:2a:46:
         df:9f:5a:44:49:95:65:77:65:8f:f3:74:46:83:ac:3d:59:0e:
         1f:e0:d0:a6:2a:68:75:f8:18:c6:f7:f1:29:ce:fb:c1:aa:7c:
         27:75:36:2f:fe:42:6c:af:90:70:11:85:93:0e:6d:1a:c2:f7:
         3b:da:a7:3c:df:55:de:15:66:05:d4:0d:40:3e:15:2b:76:ed:
         3b:6a:62:bb:20:61:00:e8:5e:be:af:3b:8e:0a:68:de:59:4e:
         aa:21:76:2c:a5:ab:33:0d:f3:58:94:56:0d:be:58:74:5d:ea:
         ff:5b:7c:d9:4f:39:28:34:d2:2e:3a:03:e3:84:91:4d:05:69:
         9a:12:d1:a2:04:10:8b:c8:9a:13:ba:bd:6a:16:1a:e7:04:0c:
         91:5b:fe:16:7f:b9:74:57:07:75:91:a2:02:9f:0b:e5:65:05:
         b3:f0:dc:73:44:51:4f:71:82:2e:d8:fe:e1:89:c2:a9:39:6a:
         0f:be:64:38:e3:9c:cb:48:e3:07:3b:06:6e:05:a5:71:2f:b7:
         2c:76:63:c5:7d:b8:fb:a0:f8:e3:f2:78:4f:32:b3:16:4f:5d:
         4c:49:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:01:47 2024 by rpki-client on console-ams.rpki-client.org