Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File:                     JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier:          HFjSFUzvrhGnOU+rL9BIfmkiA9XzUmYo4jhEThAE7rw=
Subject key identifier:   94:CA:03:FA:14:44:B3:74:5D:60:F7:83:12:FD:B2:FA:17:5D:C0:C0
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer:       /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial:       01901DEB91A085E867EEC5DB65A652554E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number:          1038
Signing time:             Sat 15 Jun 2024 22:01:35 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:35 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:35 +0000
Files and hashes:         1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: i4AuQxLbeIUnbg3wzEgq1Q5bLb7V3Sk5hkm98laium0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:91:a0:85:e8:67:ee:c5:db:65:a6:52:55:4e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
        Validity
            Not Before: Jun 15 22:01:35 2024 GMT
            Not After : Jun 16 22:01:35 2024 GMT
        Subject: CN=94ca03fa1444b3745d60f78312fdb2fa175dc0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:e2:e5:22:a9:b3:c3:f2:d5:5e:a3:db:ee:
                    40:97:7b:22:39:a1:55:77:bc:e1:2e:6a:dc:4d:b0:
                    98:39:cc:00:54:48:1b:18:f8:7c:24:7a:15:e5:36:
                    ef:45:93:80:0f:48:4f:db:80:84:a9:18:b1:19:86:
                    9b:c4:fb:4f:c7:63:6e:21:a7:da:38:5b:83:c2:5f:
                    14:a0:df:86:8a:d9:91:db:4e:9e:63:54:b5:c4:a0:
                    3f:f0:f9:8f:a8:e3:ae:46:24:99:99:94:5e:aa:2e:
                    98:16:65:40:4e:81:26:75:08:a7:0e:08:30:23:de:
                    6b:55:8e:f3:66:bd:8f:2a:3b:e8:83:0a:19:53:ff:
                    57:e9:4f:f2:06:c6:cb:5e:bc:10:4c:9b:a0:ee:e4:
                    24:b0:d7:b7:39:1d:61:73:a5:56:fb:6e:37:78:1f:
                    80:31:8a:c3:ed:eb:48:d1:f2:68:07:52:7c:67:42:
                    6f:88:63:f0:f6:7e:00:39:f0:de:27:7e:71:e1:42:
                    ff:a7:53:43:f4:5c:92:36:3f:07:f1:a3:3d:1c:b0:
                    fc:9c:33:32:e8:97:2a:29:8e:39:c2:3b:b8:15:7d:
                    ea:bd:e5:70:67:c6:ca:9a:ce:38:84:1b:7a:bb:91:
                    91:bc:b6:98:84:26:7e:61:55:91:8a:c0:23:58:f6:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CA:03:FA:14:44:B3:74:5D:60:F7:83:12:FD:B2:FA:17:5D:C0:C0
            X509v3 Authority Key Identifier:
                keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:63:f1:bf:91:15:e9:5f:ca:fd:ef:32:dc:6f:7f:20:2e:a2:
         9b:43:de:71:9e:11:cd:10:52:ca:55:34:aa:5f:e3:9a:e4:87:
         3b:7d:ce:82:a0:10:42:9f:5b:90:81:68:65:32:ac:a5:e0:9d:
         73:de:1f:17:85:c0:3e:81:a0:bd:04:27:34:0a:e0:2d:7a:b3:
         4a:15:2b:92:e8:f1:b6:40:92:03:a8:11:98:47:b0:a9:9c:5e:
         7f:61:65:bd:0c:ad:bb:4a:c8:96:f0:d2:0f:24:25:26:19:a5:
         4c:ee:7d:45:8c:ed:f2:51:94:be:43:54:9c:d6:cf:24:8b:43:
         5c:57:89:68:56:02:a1:4d:88:fc:a1:01:d7:ed:20:87:db:5d:
         3e:71:c8:f9:5e:6f:0d:16:60:27:51:8c:53:98:0a:1b:0f:11:
         3e:8b:ec:2d:8a:06:d1:0d:06:eb:77:15:e0:b9:8b:11:56:75:
         58:cd:3f:e4:07:85:d7:9d:14:9f:c1:bb:18:30:c0:c3:5b:2a:
         53:1d:50:3f:d5:26:2f:4d:5c:b4:1b:d5:15:38:4b:97:66:13:
         10:c1:e6:65:82:a5:c5:05:8c:a1:96:91:92:8f:2d:1f:bf:80:
         de:37:0c:98:d8:d2:fb:dd:1c:91:8c:a7:ed:b8:c6:7c:96:24:
         7c:33:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:44:24 2024 by rpki-client on console-ams.rpki-client.org