Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File:                     ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier:          HexTMGX5YbrvUGsP5T8ebwIOYWWed9nRg489R63rQtQ=
Subject key identifier:   72:62:98:AA:F3:2C:1A:EC:E8:6F:9F:9C:F8:DD:48:B5:55:2D:01:C9
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer:       /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial:       01903472BADB69E53C72827B1E4A2E88F62F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number:          094D
Signing time:             Thu 20 Jun 2024 07:00:52 +0000
Manifest this update:     Thu 20 Jun 2024 07:00:52 +0000
Manifest next update:     Fri 21 Jun 2024 07:00:52 +0000
Files and hashes:         1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: vgBNItD7GO1QNy9/exJjPjin5mc5m38xruBKaxFTvQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:72:ba:db:69:e5:3c:72:82:7b:1e:4a:2e:88:f6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
        Validity
            Not Before: Jun 20 07:00:52 2024 GMT
            Not After : Jun 21 07:00:52 2024 GMT
        Subject: CN=726298aaf32c1aece86f9f9cf8dd48b5552d01c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2d:bf:5a:fa:04:1a:31:6d:da:3a:c0:98:30:
                    73:fb:c9:3e:d1:8e:8e:a4:ef:a9:66:8d:1d:df:04:
                    23:41:19:64:3d:2b:5b:f0:5b:93:b2:01:db:37:3f:
                    ef:b8:1d:e6:82:ab:f6:90:f8:62:4b:60:c4:b7:49:
                    8a:32:e5:93:ac:f3:0b:3a:af:e3:5f:06:1a:cf:58:
                    f8:75:1d:b4:35:f2:aa:6d:d8:98:49:58:d0:83:6a:
                    15:4a:c5:14:7d:d6:0e:5c:48:06:16:a9:af:9d:0e:
                    46:43:03:34:05:07:f7:98:69:53:69:e9:65:f2:e3:
                    09:72:68:3e:e6:59:1b:80:fa:cf:d5:f2:1f:8f:19:
                    ed:62:bb:91:de:1c:0d:06:5c:1e:31:5e:0e:d9:9f:
                    c7:e4:69:8b:df:6e:b4:60:e8:6f:0e:7d:39:12:ce:
                    3f:b8:35:b8:21:31:2e:6d:6b:98:a4:b7:1f:3d:97:
                    3c:23:5a:57:90:11:79:95:65:c5:af:19:ab:bf:aa:
                    3d:e9:13:88:2c:90:c4:19:8c:d1:6f:af:b4:a2:c7:
                    22:c7:b1:de:e8:bd:1f:d9:2f:0f:c0:b9:4b:73:ea:
                    63:73:a4:78:19:7a:e4:a6:66:b8:65:5e:4f:af:46:
                    b5:f0:9a:ba:76:87:66:25:04:ef:ee:5b:78:2c:77:
                    92:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:62:98:AA:F3:2C:1A:EC:E8:6F:9F:9C:F8:DD:48:B5:55:2D:01:C9
            X509v3 Authority Key Identifier:
                keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:65:5b:b6:0a:18:d7:33:af:f1:f5:3b:03:58:8d:f7:e8:62:
         a2:2f:e1:92:6b:fe:09:42:14:37:a7:10:c1:bd:3d:27:34:46:
         f5:2c:6c:3e:65:7a:4d:c1:ba:fa:f3:ec:5b:45:93:9c:29:05:
         e6:3e:1d:42:18:b2:ca:a9:48:d0:ae:c7:31:7a:3f:54:98:96:
         d1:e1:64:f2:8c:f8:df:c5:72:c1:d1:24:26:e8:0f:ee:d6:56:
         de:69:8e:9f:6c:6e:89:31:7d:74:81:40:f2:2b:fa:92:ab:99:
         aa:58:c1:d0:47:7c:d4:9e:5d:20:24:64:11:d7:f5:14:f2:30:
         13:a5:c6:b8:45:ef:f8:e1:d6:7b:8e:cd:e4:a7:8c:bd:c0:9f:
         1b:63:35:58:80:18:e3:c2:bf:a9:24:97:1a:54:6c:a9:51:51:
         22:cc:c3:42:84:2f:20:12:0f:60:a3:be:96:3c:ef:a1:56:ac:
         dd:eb:c8:24:8a:10:6f:78:dd:9f:f8:09:57:12:dd:02:0c:e9:
         93:49:50:05:c4:59:02:50:08:29:91:18:3f:db:4e:4b:ff:06:
         95:46:e2:88:38:9d:28:8d:7d:a7:23:6c:f3:31:df:9a:c5:c6:
         d3:73:e4:80:08:f2:87:88:93:33:1d:b2:2f:d5:93:84:dd:a7:
         46:07:24:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:44:16 2024 by rpki-client on console-fra.rpki-client.org