Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File:                     1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier:          Z+NM44u3qnB9a1dRNyRdAJ8hTYPqWBKlWfBaCTcKzNY=
Subject key identifier:   C3:ED:03:A7:F1:CF:A5:63:84:03:1B:59:C1:43:38:7F:E2:BA:7A:42
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer:       /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial:       019040AF93F2E7CE5E62DF979103F2F5EA11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number:          0507
Signing time:             Sat 22 Jun 2024 16:02:46 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:46 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:46 +0000
Files and hashes:         1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: pbPkhVHQ+L1OhYrU4NuPeIUEoUCrfwyJSXw8aVdatyg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:93:f2:e7:ce:5e:62:df:97:91:03:f2:f5:ea:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
        Validity
            Not Before: Jun 22 16:02:46 2024 GMT
            Not After : Jun 23 16:02:46 2024 GMT
        Subject: CN=c3ed03a7f1cfa56384031b59c143387fe2ba7a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:ba:9c:ef:1d:58:5d:e1:ef:2e:ff:4c:38:
                    71:6f:9b:3c:58:4c:f2:b1:4e:c2:51:94:fb:3a:ab:
                    04:20:80:9b:db:2f:98:15:47:f9:ae:ea:58:e9:12:
                    de:1c:59:68:4f:51:42:e4:1d:fa:ed:f8:e5:4a:d2:
                    e6:19:00:45:0a:aa:7f:f7:36:97:a9:29:8a:0b:a0:
                    5f:ac:f1:d3:96:ad:ba:d7:a0:d6:4f:e0:82:61:b7:
                    c9:83:7f:a5:48:52:83:26:73:da:cc:e6:86:69:27:
                    4b:6f:55:82:22:9c:59:6e:7f:b0:b6:e0:9d:4f:45:
                    2a:32:bb:9f:11:5d:35:a3:75:02:6b:64:5b:05:40:
                    51:58:17:f6:14:02:1b:e3:43:79:be:6e:aa:25:15:
                    56:94:23:4c:70:24:bc:f9:e1:d4:e8:be:d0:e2:7f:
                    47:a4:95:8f:26:90:b8:7e:aa:e8:27:d0:64:27:7a:
                    4f:00:29:89:5a:61:6f:da:f9:b4:3d:0a:48:9c:e7:
                    bb:0a:7c:da:fc:c0:5b:b6:74:6b:c0:6c:89:dd:5f:
                    a7:54:11:28:60:13:73:f0:79:10:d1:a3:48:e8:4a:
                    06:f4:5f:a5:39:fd:9e:0b:a0:15:0c:42:47:b6:d6:
                    10:62:d4:8c:eb:f6:cc:24:7a:d9:c5:8e:7d:04:d0:
                    63:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:ED:03:A7:F1:CF:A5:63:84:03:1B:59:C1:43:38:7F:E2:BA:7A:42
            X509v3 Authority Key Identifier:
                keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:03:93:52:29:22:85:89:50:12:0f:a7:a1:d0:24:1b:a9:a3:
         ee:38:a6:f3:87:e2:ac:c8:c0:9a:f3:a1:53:7d:8d:23:72:cd:
         e2:50:c5:e2:dd:19:2e:10:26:d6:18:2d:76:bc:c1:3f:ac:3f:
         0f:41:49:2a:e8:91:d9:db:23:c3:c0:83:90:5b:3b:2e:ec:b3:
         67:66:c2:58:3c:04:1b:58:f2:11:40:4b:0c:67:ed:b0:c8:e7:
         2d:ab:d1:ef:cb:21:0e:ad:15:3b:41:50:5d:87:01:a7:a9:94:
         eb:de:21:95:70:29:c4:dd:b9:23:9e:50:d5:5b:c7:b9:7c:a3:
         28:b9:cf:c3:d7:7d:e6:0c:0e:51:00:52:66:48:9d:8a:d7:d5:
         1e:0a:16:f6:37:c6:45:b0:5c:c9:40:27:21:be:d6:a7:d4:54:
         dd:be:18:56:ce:1c:dc:64:f4:38:1c:fe:90:8b:03:b4:19:8d:
         1c:9c:6b:28:9c:f5:1d:55:cf:c7:5d:67:6c:f5:f3:d6:9d:4d:
         fd:27:e7:23:4f:e5:26:a9:42:3a:89:75:54:8c:f2:a2:88:d4:
         84:91:3a:49:7a:b8:06:fe:8a:83:75:2d:b1:41:de:76:6c:ac:
         15:79:09:ab:42:9e:31:ea:e9:72:29:b9:cc:54:eb:59:a2:a5:
         22:48:c2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:49:08 2024 by rpki-client on console-ams.rpki-client.org