Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File:                     DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier:          dDgttiEtq2tamy8ubmdsc41J5rFg4nmqqWSm9WmmO6s=
Subject key identifier:   EA:D7:AB:15:59:42:41:EE:A3:6C:00:B0:8E:84:91:9B:23:E0:52:C6
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer:       /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial:       019040AE0C7A29AAE8FF09567E0B6B6BF551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number:          0369
Signing time:             Sat 22 Jun 2024 16:01:06 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:06 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:06 +0000
Files and hashes:         1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: hEJX1bUlZRlt+Dt7r7VodnpbUTp7ah1poTOhcbb3j1g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:0c:7a:29:aa:e8:ff:09:56:7e:0b:6b:6b:f5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
        Validity
            Not Before: Jun 22 16:01:06 2024 GMT
            Not After : Jun 23 16:01:06 2024 GMT
        Subject: CN=ead7ab15594241eea36c00b08e84919b23e052c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:2c:3d:de:da:38:e0:6f:87:86:fb:b7:13:
                    62:0f:fc:4c:07:1f:08:de:24:3a:21:4a:49:93:5a:
                    14:61:ed:20:6a:d8:8e:6a:9e:4f:06:c7:1b:2a:c1:
                    84:9e:01:2d:23:71:35:c3:4b:07:7e:c1:e4:48:dd:
                    16:26:f2:52:ff:1f:9b:0f:c0:76:3d:9f:b9:70:58:
                    9e:89:36:55:ff:c1:b5:fc:a0:0c:00:8d:a9:76:a9:
                    a2:b6:fd:12:ae:73:87:7e:2d:ab:b9:ad:d0:4b:20:
                    d9:5b:4d:be:2b:3d:74:57:8a:1b:42:6b:69:f3:c9:
                    74:c9:56:dd:0f:2c:69:cb:00:b1:3e:8e:8c:c7:da:
                    14:75:7b:17:82:d1:78:23:40:13:f0:66:e4:dd:ba:
                    20:ca:d7:82:f1:3a:83:6c:c0:2b:83:94:46:fe:bd:
                    17:c4:5c:f7:7a:00:bc:a1:dd:4f:b0:d6:e4:c2:d5:
                    ce:e9:31:42:ff:82:3b:fd:ef:91:a5:40:92:78:57:
                    41:88:ec:f3:51:16:64:25:62:03:74:4c:86:28:54:
                    cf:1b:62:16:ff:cc:4d:77:28:0f:bc:af:b1:03:65:
                    f4:7a:c5:8a:4d:a4:2e:b9:19:5b:56:df:99:80:ea:
                    34:f9:a6:63:41:63:58:9f:fc:7a:77:c8:39:74:6c:
                    f9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D7:AB:15:59:42:41:EE:A3:6C:00:B0:8E:84:91:9B:23:E0:52:C6
            X509v3 Authority Key Identifier:
                keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:57:74:d4:c2:4e:78:15:ea:7d:a6:a7:cc:18:2c:0e:60:60:
         2a:fa:dc:c7:c2:4c:cf:ad:76:e3:12:60:a9:1e:9c:23:3f:c5:
         f9:9f:49:c7:d0:69:82:5e:0d:6f:71:bb:3a:9f:dc:8d:bb:9a:
         b6:ed:74:10:5d:47:a7:38:0d:d3:15:0f:cd:b0:bc:44:9d:ea:
         ab:27:ec:e1:6e:32:12:6a:cb:76:9f:2b:73:e6:22:fc:72:a3:
         a6:52:ba:50:a0:63:f6:21:13:9f:8a:35:74:2c:e0:82:c6:ec:
         ff:7c:b9:05:fb:7f:23:e6:0d:2f:62:d6:7e:4a:4d:81:5c:d3:
         ff:b9:53:e1:0b:48:50:00:79:d4:5e:7f:5f:43:ef:ee:38:a3:
         c6:a2:d2:94:f8:4d:83:d6:be:c5:bc:75:24:14:fd:26:d6:01:
         a2:f4:61:de:54:59:52:73:bc:56:da:42:70:ae:50:1a:e5:3c:
         78:a8:90:f3:bb:4b:9b:90:ae:1e:7d:f6:bd:ba:8a:bf:d5:a8:
         66:53:47:eb:92:b6:b5:78:b6:99:5b:a9:30:60:ef:03:86:fe:
         0b:e5:8c:d8:a1:94:61:5d:b9:43:43:84:5a:04:92:e7:f6:64:
         08:d6:00:89:e8:53:75:ee:97:5b:94:71:83:c0:fa:86:75:52:
         fc:b0:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:29:00 2024 by rpki-client on console-ams.rpki-client.org