Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
File:                     dggs9uV3xDJnGZEkoogbNzLO9AQ.mft (raw, json)
Hash identifier:          k5GDmzcuF4Z/MWNoSAjL6TpGE5iZS3aSa2/g++K4IpU=
Subject key identifier:   48:76:03:A2:36:87:41:6E:CB:74:84:11:E5:2F:E7:22:97:8A:08:5A
Authority key identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
Certificate issuer:       /CN=76082cf6e577c43267199124a2881b3732cef404
Certificate serial:       01901E5918C6E1AE3B7874642096B97C2FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 00:01:13 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:13 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:13 +0000
Files and hashes:         1: dggs9uV3xDJnGZEkoogbNzLO9AQ.crl (hash: pRxYgmAVKrHP0TKe/EqYxJKkYzUkCo0lNN0+AYWOw9s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:18:c6:e1:ae:3b:78:74:64:20:96:b9:7c:2f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76082cf6e577c43267199124a2881b3732cef404
        Validity
            Not Before: Jun 16 00:01:13 2024 GMT
            Not After : Jun 17 00:01:13 2024 GMT
        Subject: CN=487603a23687416ecb748411e52fe722978a085a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:9c:9c:c2:d1:59:8e:90:31:3a:a8:3d:55:
                    29:81:49:c3:aa:63:70:5f:b1:aa:8b:06:ae:73:95:
                    8a:02:fb:d4:7c:db:18:7c:4c:bc:bc:9a:34:e1:15:
                    ad:a2:fa:85:1d:67:c5:b0:21:c7:b6:c9:74:39:3c:
                    03:3f:63:f7:7e:c4:8e:60:67:7b:f8:8a:19:c3:36:
                    8f:cd:a1:dc:c8:17:16:d5:2d:8a:58:08:25:46:8b:
                    b9:d0:45:82:60:2b:d9:0c:54:fc:2e:0b:0b:07:aa:
                    9a:6d:de:f6:18:0d:7c:f2:0d:cb:bd:d0:07:f7:57:
                    37:5a:a3:52:f5:bd:b5:e7:1a:e1:3a:bb:34:bc:04:
                    26:4a:44:b2:a1:1d:c5:d0:62:46:ae:20:75:d0:ea:
                    ca:95:2f:a9:53:f5:79:53:33:0b:32:a2:55:37:3a:
                    11:03:ec:8f:8f:fc:55:47:e3:fc:e4:c5:40:45:e4:
                    4c:c0:79:6b:51:8e:43:ba:72:a9:22:a5:15:64:8b:
                    f8:06:cd:e1:83:04:67:90:1d:f3:a0:54:cd:85:18:
                    9c:82:20:20:bd:31:9b:d6:c8:8f:73:84:1b:10:45:
                    27:af:9f:fc:f3:24:85:ef:fa:0b:38:96:da:82:93:
                    60:3f:69:e9:f4:55:04:6d:4f:48:70:62:58:48:63:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:76:03:A2:36:87:41:6E:CB:74:84:11:E5:2F:E7:22:97:8A:08:5A
            X509v3 Authority Key Identifier:
                keyid:76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:43:e7:97:87:6a:c9:b6:b3:ab:35:5a:aa:32:14:91:7c:69:
         9d:4e:28:4f:e0:39:79:36:a8:fd:0e:68:34:7c:00:e4:35:f9:
         a5:31:ae:39:94:bf:8c:22:b9:ad:ff:c4:72:b2:17:c5:63:38:
         f2:0c:d3:c6:74:ff:32:fd:46:d5:9a:ab:58:8c:fc:32:12:27:
         1c:a9:8e:99:d9:6a:95:25:92:e6:c6:13:e6:3b:c1:90:96:15:
         5e:70:ae:bd:9a:1a:73:e2:bb:2e:2a:83:9f:23:fb:19:22:49:
         b1:81:f7:9e:32:5e:ea:f1:f0:a9:00:81:81:1d:c1:89:ee:ef:
         5d:f2:06:49:df:fc:dd:95:ce:3e:b1:be:2b:4f:0f:76:98:19:
         91:05:d0:2f:19:33:d1:81:f8:ce:06:79:4a:20:ee:26:0e:37:
         f5:fe:7c:ed:c0:71:08:b2:10:46:53:56:d6:16:bc:fc:0c:2b:
         4c:26:3d:08:0c:22:2a:51:10:6b:9c:7d:ef:74:45:0b:13:6d:
         95:14:0f:c2:6a:33:aa:62:d7:f6:30:37:fd:42:be:d2:12:54:
         35:8d:37:f0:b3:7e:32:7e:37:81:39:80:69:85:1b:ab:b7:44:
         d7:37:b3:dd:fd:53:86:23:99:3f:79:3a:c8:12:7c:3c:20:f7:
         2b:6a:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:01:45 2024 by rpki-client on console-ams.rpki-client.org