Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File:                     gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier:          TTmEcGH6pTKseWTraDIvGR4NY4loX9/S6n3lG6PkEqU=
Subject key identifier:   7D:13:CC:19:7F:80:BE:F8:74:D0:D7:02:36:45:4E:FD:DC:E1:8E:57
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer:       /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial:       01901DECD2D5E2CE21E0DEA3A28930A5E61E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number:          0EFE
Signing time:             Sat 15 Jun 2024 22:02:57 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:57 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:57 +0000
Files and hashes:         1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: bp1jhMpRKlBEmOAPRrr1zv77QNGLrum5Awt6Xg/Uzrk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:d2:d5:e2:ce:21:e0:de:a3:a2:89:30:a5:e6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
        Validity
            Not Before: Jun 15 22:02:57 2024 GMT
            Not After : Jun 16 22:02:57 2024 GMT
        Subject: CN=7d13cc197f80bef874d0d70236454efddce18e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:25:bd:60:17:ee:da:60:35:86:d0:5d:40:
                    8f:e7:8f:6a:8b:6e:dd:59:ae:5e:a8:da:c0:03:67:
                    e5:eb:e7:25:51:e6:0e:d4:4e:d7:af:b4:c7:ba:06:
                    91:1c:76:c0:ac:1c:31:ad:87:b8:b9:23:02:4f:dd:
                    58:32:11:22:54:4d:24:b0:33:2f:35:98:d3:66:8c:
                    6a:a9:ef:2c:36:bd:ae:53:55:6f:38:a7:16:bc:98:
                    8d:b8:bb:de:d7:ff:21:34:4b:c5:97:a1:dc:86:96:
                    34:79:dd:32:a2:d5:61:bd:4b:95:88:66:ca:23:f7:
                    66:05:11:a4:d1:bf:ed:98:92:f4:06:b5:c6:c4:6b:
                    a8:9f:26:f6:3f:64:89:04:7c:97:c9:1c:42:58:32:
                    bb:d9:3b:f3:94:16:7a:c8:5b:20:d6:49:a2:fe:dd:
                    b9:77:f6:35:bb:8d:b6:39:95:e5:f6:da:ce:d6:6f:
                    a9:9b:8c:02:fe:28:f4:33:13:70:2d:fd:2a:f7:6b:
                    c8:76:a3:4c:00:8a:4c:39:a2:7d:51:7f:b8:ef:3c:
                    39:f8:96:a7:f0:57:c4:d8:c7:0f:3f:22:d5:af:95:
                    85:7a:94:95:91:be:6c:e9:59:ad:f0:dc:50:2e:96:
                    15:1e:4e:ac:90:a9:f2:fe:a6:88:95:ac:08:2c:df:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:13:CC:19:7F:80:BE:F8:74:D0:D7:02:36:45:4E:FD:DC:E1:8E:57
            X509v3 Authority Key Identifier:
                keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:26:d1:1d:bc:aa:85:70:1a:e0:0b:cc:9a:8e:cc:1e:53:a7:
         85:2f:b2:70:8b:e5:fd:40:eb:37:a8:80:32:54:11:d8:76:9b:
         89:70:1d:10:3e:55:17:ec:92:a6:2b:21:ec:28:0b:1a:de:7f:
         97:13:bf:7d:17:dc:91:31:1e:8e:d1:0a:dd:a3:82:71:e0:e6:
         06:b7:1b:ba:e8:df:83:99:f4:86:7c:96:de:b6:5a:a8:17:48:
         dd:19:71:ec:02:9c:f9:d1:69:da:f7:c1:e6:29:2f:3e:57:41:
         36:62:0f:82:b6:00:13:4f:c3:03:de:03:93:45:dc:30:e5:dd:
         e0:0e:d5:ff:a8:fb:30:e5:9c:d9:f0:cb:6a:85:8b:9e:1a:43:
         bd:cb:bd:d9:dc:a5:86:57:69:6d:52:c6:ab:db:7d:72:5f:a4:
         9b:9a:a7:a0:ad:7e:02:39:d4:1a:f2:e1:de:35:ab:17:c7:af:
         bc:1a:2b:cd:69:b0:a1:6c:42:81:8a:cc:a6:b7:7d:84:35:24:
         b2:b9:88:7d:fa:db:81:ad:68:72:07:55:06:de:36:4a:76:c7:
         58:7b:58:d9:7e:ad:8a:58:86:c5:c2:fc:a0:f4:fb:a9:de:15:
         f0:f5:17:06:58:d6:51:d1:b2:b9:15:80:cf:a8:3c:e4:53:38:
         68:56:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:19:28 2024 by rpki-client on console-ams.rpki-client.org