Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File:                     1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier:          0WuckJpdyDaANMBHiUK+rx8ZJUqMOfocFin2r5R826Y=
Subject key identifier:   1C:B0:66:87:6C:C9:F8:1D:96:70:AB:87:F7:ED:09:B0:26:15:9D:8C
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer:       /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial:       01901BFF2EEA1DE2BB4508A6CCBF3DC48B8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number:          0ABC
Signing time:             Sat 15 Jun 2024 13:03:46 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:46 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:46 +0000
Files and hashes:         1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: hCXtjZjVoMdmxxdVJm3lKNxT7hWqhwyEYaSuGc1k1a4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:2e:ea:1d:e2:bb:45:08:a6:cc:bf:3d:c4:8b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
        Validity
            Not Before: Jun 15 13:03:46 2024 GMT
            Not After : Jun 16 13:03:46 2024 GMT
        Subject: CN=1cb066876cc9f81d9670ab87f7ed09b026159d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e1:34:0f:c1:e7:92:02:6c:df:f8:54:aa:ea:
                    3e:fa:62:e3:b7:68:6d:2c:95:8f:1d:82:4b:d4:94:
                    08:b7:d3:02:38:e1:2f:8e:2a:fb:68:0c:cd:a6:2b:
                    37:ab:9e:22:74:e5:e3:20:70:83:f9:2a:1e:5c:1b:
                    eb:40:da:54:65:aa:95:92:0e:81:df:1e:f0:ca:a7:
                    74:d9:32:eb:15:18:80:54:69:98:c8:82:50:0c:a6:
                    2c:73:d5:a0:01:a4:be:c0:65:fb:e0:1f:88:2c:c6:
                    01:3c:71:69:e3:9d:5f:3b:76:34:2f:ff:35:ea:3d:
                    1c:21:43:b5:2d:62:1e:9d:4d:97:2a:e0:68:d1:ac:
                    94:79:16:fc:04:5e:42:26:4c:2b:b7:18:e6:68:a1:
                    6b:0a:b4:76:23:64:76:ca:9f:94:ee:b5:c3:da:6f:
                    5f:df:83:38:63:c3:ff:cd:bd:3e:57:54:c8:b6:27:
                    f5:ba:01:a1:c0:ec:31:5b:8d:91:d6:c8:44:44:fe:
                    61:35:04:11:e8:88:a5:3e:4c:75:60:6e:b3:32:2d:
                    b1:b8:0a:c1:70:bc:ac:5e:82:15:bd:b3:20:7e:72:
                    1a:99:85:e1:23:8e:7a:bf:49:a8:ee:e7:be:8a:e7:
                    b4:8d:61:55:0a:ec:ac:e7:ec:d1:7d:63:e7:ac:da:
                    16:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B0:66:87:6C:C9:F8:1D:96:70:AB:87:F7:ED:09:B0:26:15:9D:8C
            X509v3 Authority Key Identifier:
                keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:95:2c:fa:64:a6:03:ee:66:2b:c4:39:b1:ac:ad:96:78:
         96:38:69:90:36:e1:b9:ba:67:85:2f:71:e6:38:00:0c:3d:23:
         7e:62:e4:0b:f5:63:93:c7:b6:10:15:82:3b:cf:1a:92:ba:e4:
         bd:d3:9b:5b:93:9a:07:fa:e7:f3:5e:ea:12:f9:ef:5a:a5:0c:
         32:22:bd:d8:d5:fa:b2:d4:04:64:c1:6f:63:b0:2f:a5:71:ae:
         6c:98:e8:6c:e6:66:36:75:17:93:5c:c1:2f:e9:40:4f:4c:5e:
         89:5b:37:fd:71:cb:53:1b:8a:52:b3:38:f3:ed:91:c6:c4:79:
         5b:05:0f:22:eb:52:17:df:ca:0f:74:ce:97:2a:a5:f2:b6:5c:
         eb:b4:e5:a8:7e:6e:83:a3:6a:25:ac:f5:5a:34:5d:d4:21:e9:
         c2:03:0f:55:42:fc:82:3c:76:f0:c5:42:36:80:db:8e:6d:3d:
         c0:76:c4:f5:5a:ad:ce:cb:57:80:f0:61:e3:3b:16:c4:d7:78:
         66:2f:25:50:d2:41:58:8d:5d:a5:73:c3:da:73:75:1e:dc:75:
         b2:20:e7:af:d4:2c:80:90:dc:25:ac:d6:25:57:72:73:db:18:
         77:a8:a7:b0:0b:c7:c0:46:ab:ea:6a:09:8b:93:29:cf:07:be:
         f6:48:11:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:28:23 2024 by rpki-client on console-fra.rpki-client.org