Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File:                     ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier:          OVZE+1hkYDA5r2LS1V0aCCgS6SHG204OVDqNwot6ils=
Subject key identifier:   D5:A8:01:D2:68:4B:76:D8:8E:B8:FA:17:F7:DB:02:50:CB:38:69:1A
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer:       /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial:       01901D468F6704DF82FCF8D8843834FE2E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number:          0941
Signing time:             Sat 15 Jun 2024 19:01:21 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:21 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:21 +0000
Files and hashes:         1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: NkQVnKm8OTzncYHd+Exbx7EOSzKF226YbRfa10pixWM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:8f:67:04:df:82:fc:f8:d8:84:38:34:fe:2e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
        Validity
            Not Before: Jun 15 19:01:21 2024 GMT
            Not After : Jun 16 19:01:21 2024 GMT
        Subject: CN=d5a801d2684b76d88eb8fa17f7db0250cb38691a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:6b:f3:e9:9e:05:a6:30:1c:f0:4a:9c:1e:
                    4d:6d:c1:68:fb:f2:1f:8b:ba:c9:d2:84:1a:2b:cf:
                    5a:5c:d6:5a:78:e1:e9:9d:1a:5f:40:47:55:e9:0f:
                    6a:67:c3:d3:f8:47:8e:39:e5:85:85:c0:14:ae:83:
                    bf:e0:ad:84:a1:e1:70:32:c8:50:e1:25:c7:00:30:
                    91:c9:af:28:a4:0b:a6:f7:78:9b:9e:df:67:08:d8:
                    61:f9:7b:45:f9:4d:3f:30:d3:ed:f0:09:72:7c:c8:
                    df:67:e5:9b:5b:25:33:74:75:c2:b2:1a:05:d2:d7:
                    c8:92:a4:93:d5:81:a9:f8:ec:7e:9c:8f:c7:cf:54:
                    56:c1:cb:3b:bc:17:03:fb:51:18:50:b4:c8:36:6f:
                    fe:9b:ae:94:0d:cb:79:86:2f:4c:0b:cc:c6:f3:c8:
                    ba:54:d2:02:6d:8a:ac:9b:cd:49:2c:09:18:ac:6d:
                    dd:f7:e5:fd:30:d4:08:92:6b:55:58:13:86:71:92:
                    66:e7:61:ee:d6:b9:51:ff:71:6b:44:65:ea:be:2d:
                    f6:a0:97:89:73:4c:fd:eb:36:cb:7b:06:70:b8:bc:
                    cf:53:0a:29:d1:f9:44:d9:88:e5:22:e4:5a:64:fb:
                    94:f5:c5:52:b1:38:64:3e:27:d9:e6:ad:0a:7d:e6:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A8:01:D2:68:4B:76:D8:8E:B8:FA:17:F7:DB:02:50:CB:38:69:1A
            X509v3 Authority Key Identifier:
                keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:5e:fb:b0:47:14:00:87:ed:9d:79:b8:24:81:a6:e3:69:
         57:eb:3d:d0:72:3c:50:19:db:e0:ab:80:2a:69:a1:78:cb:ae:
         bf:cb:f9:47:e1:56:d3:80:11:b7:17:1a:15:7b:65:6f:ee:3b:
         09:c6:28:22:21:de:d5:84:89:d1:3b:06:9f:00:d9:ab:37:65:
         12:21:6d:b9:df:72:24:78:a5:0d:00:10:b9:fa:94:43:19:c5:
         4d:f0:d0:e3:69:74:cc:03:e8:9e:0c:0d:c2:6d:e4:a0:43:2f:
         7b:e1:41:af:93:e9:a1:bb:d0:9a:15:23:ca:3d:79:f7:7a:1c:
         67:74:07:1f:67:4b:22:94:12:21:11:24:6e:0d:53:c3:66:ea:
         43:96:3e:b6:54:94:65:70:55:ca:79:e3:17:1c:e9:e3:28:6c:
         f8:36:aa:69:20:a5:a9:d8:01:e8:58:ae:3c:ca:96:6f:ce:39:
         bf:34:c0:ee:4f:da:69:83:35:60:70:6b:87:e1:a4:6a:ad:47:
         ef:42:f3:70:b8:dc:7d:9a:b7:1c:ce:ea:f9:ea:9d:12:e5:c4:
         57:18:8e:3f:b5:17:04:c0:77:91:08:fc:b6:88:cd:4c:fd:96:
         77:ae:77:ec:b3:34:f4:5d:bc:6f:2a:f0:83:43:27:f3:ea:dd:
         ab:48:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:31:01 2024 by rpki-client on console-ams.rpki-client.org