Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
File:                     rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft (raw, json)
Hash identifier:          2DC3/yKa3sEC+ObFMaxfVFSoSHhwrTxwym1Dd0Z2xQg=
Subject key identifier:   FE:36:06:58:B9:07:17:EF:BB:8A:F6:AE:4A:94:2D:39:8A:7B:F3:A9
Authority key identifier: AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
Certificate issuer:       /CN=af1bc3295ac305f85960e0401b00f487a94ab394
Certificate serial:       01901EC6AD838EFB13BCB2CD0FBF6A5E1292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
Manifest number:          0DE1
Signing time:             Sun 16 Jun 2024 02:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:55 +0000
Files and hashes:         1: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl (hash: ng5VHXkq9cswyLN5PpxY//vkTfNT8tIoMkC4A8ZQoxc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:ad:83:8e:fb:13:bc:b2:cd:0f:bf:6a:5e:12:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af1bc3295ac305f85960e0401b00f487a94ab394
        Validity
            Not Before: Jun 16 02:00:55 2024 GMT
            Not After : Jun 17 02:00:55 2024 GMT
        Subject: CN=fe360658b90717efbb8af6ae4a942d398a7bf3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:00:52:44:51:27:24:4b:35:45:e1:6a:eb:
                    4b:57:6e:d4:cb:6f:3d:c9:6a:f7:35:e4:0d:4d:59:
                    dd:e8:cc:93:2c:a1:5c:cc:7d:f0:db:20:43:9d:aa:
                    83:0c:97:df:8a:12:87:06:83:32:cf:25:b9:16:87:
                    51:45:7f:75:fd:60:83:a8:39:c7:73:53:80:9a:fa:
                    99:f8:16:47:5d:be:dc:64:f1:d1:d3:6f:a6:ca:49:
                    81:4f:39:64:a7:4b:51:0d:80:2e:0a:da:e5:b4:6a:
                    1b:51:2e:75:3b:7d:00:80:28:4e:f0:c0:99:77:c9:
                    d4:cb:58:c8:e5:cc:a6:f4:fc:26:66:48:d8:d7:9c:
                    a3:c4:db:23:5e:bf:66:f8:b7:71:c8:7d:1a:f2:cc:
                    39:f9:f7:bd:df:87:51:3f:70:b4:fb:82:d1:a6:a9:
                    07:8c:84:02:33:2c:27:28:d2:5a:0b:06:81:cf:59:
                    9d:b5:19:57:ae:d9:33:c0:c8:89:87:ff:2b:76:ce:
                    d6:cd:fb:ac:91:0b:7e:fa:12:21:c7:7f:24:12:bc:
                    58:24:62:02:47:dc:8c:86:31:e0:80:6e:36:17:f2:
                    cb:1c:c2:11:80:21:6c:9e:6d:b3:4d:61:33:99:3c:
                    5f:ff:43:35:4d:5c:85:e0:c5:b8:d5:67:f2:f8:71:
                    02:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:06:58:B9:07:17:EF:BB:8A:F6:AE:4A:94:2D:39:8A:7B:F3:A9
            X509v3 Authority Key Identifier:
                keyid:AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:3e:a8:d3:29:a6:ba:91:2c:0c:30:b7:fd:02:6b:b6:a3:
         62:a0:d7:5f:0e:71:13:60:3b:f8:35:cc:f7:7b:8b:2f:a8:13:
         05:47:51:97:ee:9e:de:38:25:7c:17:64:d9:7e:8d:b3:0c:ca:
         0a:7f:1c:54:e6:70:51:1b:d0:57:16:0a:14:9c:0f:1f:cd:b9:
         69:22:10:a1:b7:8a:bc:89:3a:0a:cf:5a:b5:8c:e0:b3:64:3d:
         99:32:2e:3f:23:1b:1f:70:0f:47:ec:82:c3:22:b2:7f:f0:37:
         69:6b:62:f8:80:d2:e9:f3:f7:b7:dc:bc:52:93:18:09:c1:b2:
         08:cc:f2:0a:1b:73:58:3a:a8:38:e8:4e:ee:08:46:25:e1:8f:
         30:7a:bb:2a:27:87:ee:a6:12:f3:59:87:d2:be:43:85:8e:a1:
         7a:cd:91:a9:33:68:60:3c:7f:d6:1f:6a:33:70:14:71:f6:c0:
         2a:c9:52:68:82:e5:f6:84:98:45:f4:59:d7:8f:b1:9a:9b:56:
         c4:86:e4:16:5c:c1:24:d2:cd:96:92:71:42:c6:b1:71:f1:0a:
         a3:69:52:1f:8c:71:0e:96:ce:88:0f:b5:3f:78:c3:e6:9b:85:
         24:0e:23:dd:63:a4:e9:35:11:a9:c7:81:d2:74:31:59:c9:e2:
         df:8d:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:50:55 2024 by rpki-client on console-ams.rpki-client.org