Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
File:                     XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft (raw, json)
Hash identifier:          sqaG0GP6ZRBGp/CZxsUZXPL2wY/VPv7yXMa/+hdKjLc=
Subject key identifier:   B1:42:0B:0E:66:B2:47:33:46:AD:C6:1C:A8:43:BD:92:CD:B0:17:DE
Authority key identifier: 5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
Certificate issuer:       /CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Certificate serial:       0190448AA3BF3A422290E7F2583EB959B2B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
Manifest number:          11D6
Signing time:             Sun 23 Jun 2024 10:00:54 +0000
Manifest this update:     Sun 23 Jun 2024 10:00:54 +0000
Manifest next update:     Mon 24 Jun 2024 10:00:54 +0000
Files and hashes:         1: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl (hash: sdw4wj0/bzqf0Mz7O9Mlzp7X7MeEGh8/jFTQL5qCnjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:a3:bf:3a:42:22:90:e7:f2:58:3e:b9:59:b2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
        Validity
            Not Before: Jun 23 10:00:54 2024 GMT
            Not After : Jun 24 10:00:54 2024 GMT
        Subject: CN=b1420b0e66b2473346adc61ca843bd92cdb017de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:18:68:27:94:10:43:ac:37:b8:51:9e:63:
                    38:4a:4d:1f:a2:5f:7c:23:7f:53:67:6a:ec:95:90:
                    63:f3:02:ab:7f:31:a5:57:28:5e:25:a2:44:1f:1a:
                    15:fd:69:46:a1:ed:9a:be:34:65:94:99:b2:79:86:
                    e4:13:43:b2:c7:42:7c:f7:c3:95:1c:89:d4:03:bb:
                    29:7e:5a:d0:64:2d:a2:20:9c:2c:5d:c1:4a:d8:0c:
                    90:1d:db:ba:78:5a:e6:2c:f5:be:ea:ef:0e:c4:fe:
                    9b:47:a6:b3:21:45:ca:80:3f:60:c8:8a:c1:8a:2c:
                    65:fa:a8:1a:a0:b5:e6:62:ae:56:be:7d:df:c0:b0:
                    9c:31:95:e3:28:06:8f:31:4d:8f:2e:64:51:d0:c0:
                    e3:11:3b:e7:82:41:ce:c2:a1:1a:04:09:73:b1:95:
                    b9:dd:81:5c:fc:c3:9f:e2:e1:be:e2:3c:5b:1d:ac:
                    b9:10:b4:34:d1:bd:4a:77:b2:60:0c:99:bb:85:62:
                    4b:4a:6f:28:6a:06:87:bc:95:14:f0:dc:a4:a9:05:
                    dd:cc:86:10:a9:cb:d0:55:1c:68:48:3c:c1:54:20:
                    2b:bd:c3:a3:61:2a:bc:3c:37:a1:db:e9:80:71:52:
                    49:10:5b:4f:d3:5d:34:75:76:97:4e:ba:ad:83:ef:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:42:0B:0E:66:B2:47:33:46:AD:C6:1C:A8:43:BD:92:CD:B0:17:DE
            X509v3 Authority Key Identifier:
                keyid:5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:85:09:85:fc:0c:25:83:62:dd:d8:23:65:13:5c:f9:44:e4:
         7b:de:46:f3:a7:4e:77:a2:de:3c:9c:1d:ba:a7:6c:b4:cf:ae:
         a9:3c:8b:58:a8:34:50:18:a7:bc:ee:da:fa:af:ad:c5:e4:bf:
         4b:a3:b7:09:a2:9f:d8:25:58:c5:a3:d3:4e:71:03:5f:89:73:
         50:d3:0e:81:53:f1:78:9c:d2:73:d2:17:dc:38:f0:db:1e:0d:
         54:3a:81:06:5d:13:55:9e:6a:9f:f3:20:32:1d:05:ca:4f:3f:
         b7:d4:29:13:ec:1f:cf:9b:48:d0:99:1b:4f:63:21:30:74:7b:
         ca:3e:4b:a9:d2:9f:2f:30:e3:73:fa:9d:ae:68:d4:48:97:d0:
         56:88:b2:62:10:9a:3f:bf:31:fe:a5:03:88:a2:43:68:53:c5:
         80:7d:20:b0:70:16:e9:6f:ca:8e:f9:f2:c2:4a:f8:82:a9:08:
         a9:13:a1:db:ea:00:df:cc:71:57:cd:76:76:53:86:e2:ca:99:
         38:76:54:55:f4:bf:c7:36:0f:6e:2b:05:6c:e8:09:9f:71:d6:
         b4:dc:6a:62:99:df:90:bb:5f:00:e3:b0:a5:6b:64:e0:3c:43:
         35:d1:7b:b3:64:19:73:80:81:24:84:0b:64:30:3f:ea:ee:1c:
         7e:12:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:31:23 2024 by rpki-client on console-fra.rpki-client.org