Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File:                     dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier:          EoCDJlpupgp4G+rlHCX+eYaUrwVaNo1ic9wUyIsMxR8=
Subject key identifier:   93:E2:87:57:5B:DE:89:4D:E4:6C:8C:A0:4F:C8:89:22:8C:25:86:4A
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer:       /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial:       01901F34F40B77D10309B2FFC9CED4BB7E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number:          1142
Signing time:             Sun 16 Jun 2024 04:01:22 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:22 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:22 +0000
Files and hashes:         1: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: B3tqDZk5qKb/LniNQiWsCNQvo1sUZnPVAcxwWT7nHbA=)
                          2: xJRcbhv7dfDJS_d-ncpsxgHwvFA.roa (hash: 6NEjPSsI31lTaCiZrK50TTkT7i5dQzCSDVmfqwCgzF0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:f4:0b:77:d1:03:09:b2:ff:c9:ce:d4:bb:7e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
        Validity
            Not Before: Jun 16 04:01:22 2024 GMT
            Not After : Jun 17 04:01:22 2024 GMT
        Subject: CN=93e287575bde894de46c8ca04fc889228c25864a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:bc:f3:fb:3d:be:84:5e:2c:15:ad:c6:95:
                    23:3c:ef:92:9f:40:a2:29:ec:7a:78:62:f4:23:f6:
                    2b:77:bd:7a:60:e6:62:23:d7:9b:c9:b8:b3:e8:05:
                    7c:9c:b4:51:f7:4a:38:64:2b:2e:21:b2:85:ee:0c:
                    78:f8:6a:1a:96:1c:ed:94:bf:1d:43:ef:95:dd:84:
                    ed:89:96:cd:c3:0d:4b:d8:9f:12:ea:91:a0:dd:c9:
                    6a:f1:7d:2d:50:70:01:42:99:d5:df:14:ba:bb:e7:
                    8b:38:cc:81:d1:c2:0e:0e:76:bd:a9:c6:09:22:81:
                    c5:b6:b1:2a:c8:0a:a0:38:6f:22:4a:e7:21:8d:ec:
                    fa:89:0f:bf:57:8c:31:be:f2:60:f0:72:b1:70:5a:
                    c3:c1:86:b1:37:aa:77:cb:41:d3:2a:45:fb:b4:ac:
                    a1:7a:eb:6e:d8:82:06:15:ac:a5:6d:33:fe:91:c6:
                    80:d7:3c:12:4f:54:1e:00:0d:ba:28:26:f4:da:82:
                    c8:de:80:73:77:d4:62:91:a2:42:78:ac:9b:ae:f4:
                    e9:75:c5:a1:5d:6b:07:1b:6d:d4:45:e3:d9:ec:c0:
                    67:95:22:f2:21:d1:9b:58:c4:ee:08:06:4f:46:4c:
                    8d:3f:c0:50:be:04:50:89:60:67:a7:ca:96:db:05:
                    43:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E2:87:57:5B:DE:89:4D:E4:6C:8C:A0:4F:C8:89:22:8C:25:86:4A
            X509v3 Authority Key Identifier:
                keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:0f:6e:c8:31:d1:89:ae:c5:77:f2:3e:40:0b:1b:ca:3e:
         bb:17:da:fa:cc:93:89:67:16:b8:35:e6:80:fe:66:3c:cb:b0:
         69:bd:af:b3:25:16:81:2d:d5:7d:d7:22:fb:d5:db:57:ac:27:
         e8:9f:6d:6b:fb:01:c3:c6:97:82:c3:fe:94:2a:04:7e:27:5c:
         e5:9b:b3:bf:d3:89:05:f7:ea:7e:f6:02:cb:f2:e0:94:ac:b0:
         0b:20:06:f7:5e:6f:db:da:ce:20:0a:8d:55:ae:e6:86:29:07:
         4c:b9:7f:99:f3:d1:e7:97:0b:c2:d9:1d:e4:f5:cd:44:08:3f:
         77:2c:5b:61:b8:76:23:f4:56:21:59:39:93:d3:dc:eb:5d:98:
         2b:17:e4:ae:76:a9:74:ff:b6:a9:14:01:ef:31:27:2e:8c:0e:
         6c:42:4f:72:31:d0:d0:ec:60:6a:67:a0:31:47:98:c8:8f:9e:
         19:2f:ee:b8:93:ed:58:27:1f:97:1b:1f:02:c4:1c:98:70:cf:
         4f:cd:2b:c0:dc:ab:55:2d:16:fe:57:b1:96:2c:25:86:39:36:
         02:de:23:9c:ee:d1:33:47:58:6b:92:c0:fc:70:1e:56:5c:20:
         10:08:44:e6:f7:da:41:e6:af:96:55:48:05:86:6a:1d:31:54:
         99:7d:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:10 2024 by rpki-client on console-fra.rpki-client.org