Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
File:                     X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json)
Hash identifier:          JoTmdj8CrZyxI3T9kSIrXCWIka2qOfjXfX05LMGmmCI=
Subject key identifier:   23:7C:A8:CC:B8:9F:52:83:79:04:1B:B9:6F:66:FE:C1:DB:82:70:54
Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Certificate issuer:       /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Certificate serial:       01901D464E52F46F3822583C1DF21CB0C129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
Manifest number:          0984
Signing time:             Sat 15 Jun 2024 19:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:05 +0000
Files and hashes:         1: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: /mSdh8SDjl0qnq/1rjlBwdO/uL+SMlhyYj9D+COyz3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:4e:52:f4:6f:38:22:58:3c:1d:f2:1c:b0:c1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
        Validity
            Not Before: Jun 15 19:01:05 2024 GMT
            Not After : Jun 16 19:01:05 2024 GMT
        Subject: CN=237ca8ccb89f528379041bb96f66fec1db827054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:98:67:81:31:fe:73:61:da:54:52:a0:12:
                    6d:be:49:99:59:80:b0:4e:6d:79:28:e9:31:12:17:
                    47:ba:0f:9c:bf:17:d8:24:da:cb:09:c4:37:ad:73:
                    47:c5:18:94:ce:cc:bf:9a:64:d7:86:89:e3:07:c3:
                    64:65:a0:1b:95:65:e6:75:5b:4c:96:c4:d4:e4:3c:
                    8f:f6:6d:35:f3:5a:78:f0:dd:a5:79:23:7a:89:31:
                    a7:ea:ef:36:68:3d:9f:a4:e3:5b:be:6e:8b:3c:96:
                    a8:61:6a:74:eb:33:a6:a1:a1:34:cc:b2:f4:de:9c:
                    56:fd:0b:55:8f:5b:c8:9d:87:a3:bc:b9:1e:5b:cd:
                    7e:87:64:ce:c2:4b:d2:89:42:3b:f7:ad:57:b8:46:
                    07:ac:35:f6:9e:01:aa:ad:72:60:d2:40:09:05:e1:
                    e1:0b:00:e2:06:45:65:b2:66:99:2a:36:75:fb:72:
                    07:0f:3c:5c:2b:90:25:3e:66:49:8e:d1:43:27:2a:
                    da:5a:a7:f4:d4:9b:1b:98:67:c9:cc:01:32:36:38:
                    46:c3:6f:a0:6a:5a:1f:1a:21:a4:dc:14:91:9b:f1:
                    30:75:6e:5b:73:89:db:60:4e:41:99:df:a3:16:5b:
                    d1:7c:ea:88:cc:20:db:f0:62:d2:af:ec:1a:52:4f:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7C:A8:CC:B8:9F:52:83:79:04:1B:B9:6F:66:FE:C1:DB:82:70:54
            X509v3 Authority Key Identifier:
                keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d7:e3:44:bc:62:3e:c5:3f:cc:7d:fe:0c:25:37:2e:4f:34:
         54:30:9f:97:6a:38:14:b5:19:fc:95:83:82:c3:80:71:aa:14:
         ae:c8:a9:11:96:1c:ab:e4:49:1b:cb:b6:9b:d3:a2:0b:55:39:
         a5:43:5d:c0:92:66:51:75:f2:68:d7:96:ea:d5:8a:5d:aa:cc:
         d2:f1:d1:5a:92:b2:9b:12:9e:79:ca:3e:45:8c:5b:43:23:4e:
         a9:3d:99:71:7f:b6:3c:e1:7d:fc:b4:43:7c:43:09:8d:b2:71:
         8d:62:75:20:4b:66:31:d5:57:71:8b:0c:50:97:80:3d:fd:50:
         dc:cb:11:2b:9b:1d:e2:60:0c:6a:c0:dc:c0:17:1d:26:c8:8d:
         48:77:ff:d2:22:d6:9d:c5:2b:02:10:c0:4d:8f:63:8a:25:25:
         5a:df:96:5b:f3:0f:2e:fd:11:e3:6a:3f:ca:7f:56:9c:b2:ee:
         a7:ee:30:3a:65:3c:18:2d:29:87:26:c1:8d:21:9d:27:59:0f:
         c3:e8:2e:4b:75:80:0e:76:a6:8a:60:f6:80:3a:65:f2:73:42:
         88:e6:ad:66:60:e9:7f:66:9a:f6:51:0c:95:fb:8e:33:cf:2b:
         a8:bd:0c:0f:98:58:3f:a5:97:35:75:cd:ed:b9:a4:94:78:52:
         f3:5a:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:55:02 2024 by rpki-client on console-ams.rpki-client.org