Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
File:                     dtAtj564761YOO-TGIVJb8-vHGE.mft (raw, json)
Hash identifier:          uxbZkPXW//5xS2th1SY507vVr9Q0geCt/jJAY+HyYUs=
Subject key identifier:   68:09:23:7E:0A:69:47:00:7F:3C:E6:2B:01:03:DC:A8:FB:E7:EB:04
Authority key identifier: 76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
Certificate issuer:       /CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Certificate serial:       0190448B809400ACD5B81B995313372515D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
Manifest number:          11D8
Signing time:             Sun 23 Jun 2024 10:01:51 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:51 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:51 +0000
Files and hashes:         1: dtAtj564761YOO-TGIVJb8-vHGE.crl (hash: W7z2XI/LIo/FwwZx5wkDjL7RpQcfTqVk8G3J/XGUl/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:80:94:00:ac:d5:b8:1b:99:53:13:37:25:15:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
        Validity
            Not Before: Jun 23 10:01:51 2024 GMT
            Not After : Jun 24 10:01:51 2024 GMT
        Subject: CN=6809237e0a6947007f3ce62b0103dca8fbe7eb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:4c:47:91:dd:9f:d9:59:cd:99:85:0c:fd:
                    af:6e:a6:06:e0:07:62:a4:71:33:ac:9d:1f:1a:07:
                    e1:95:fc:17:a5:88:c7:87:22:1b:36:0b:9e:16:28:
                    b9:c9:79:8b:21:a2:28:3e:f9:42:bb:5f:cd:34:55:
                    23:d5:ff:57:c0:ba:3f:2a:ed:c5:8a:1f:11:a2:69:
                    55:1b:e2:e8:71:22:1f:19:fd:6b:0c:c7:31:c9:af:
                    5f:9c:da:92:45:b6:5d:d7:12:b7:ec:76:fe:8e:fa:
                    6f:16:44:e9:c0:f0:cf:4f:3d:2e:b0:98:66:92:e7:
                    1c:32:6c:92:58:fc:fc:64:00:8a:1c:1b:5e:55:d2:
                    5c:2a:75:29:91:83:90:96:8a:2d:f7:e7:ed:f5:a1:
                    24:67:0c:25:ff:0e:7f:bf:68:3b:8d:58:e0:e7:d8:
                    11:37:8d:2f:7c:46:5e:b6:76:1b:8a:98:a5:eb:59:
                    42:f6:6a:4d:b6:fc:b0:12:0a:a5:9f:b6:ad:c9:6d:
                    00:de:cd:9f:aa:1b:03:ef:28:f4:aa:d3:eb:a4:50:
                    aa:60:1d:b8:3f:80:97:db:6a:74:ff:a7:30:ba:92:
                    cf:55:ce:8e:6b:39:0e:12:0f:9a:1f:1a:8e:bf:28:
                    3e:b9:97:c2:47:a4:34:8f:5c:64:ab:b1:f3:26:98:
                    c2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:09:23:7E:0A:69:47:00:7F:3C:E6:2B:01:03:DC:A8:FB:E7:EB:04
            X509v3 Authority Key Identifier:
                keyid:76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:99:3c:7e:ad:b2:6b:75:13:1d:21:be:37:a1:a5:6a:29:95:
         40:30:f8:92:c1:65:d1:4d:46:39:61:50:0e:26:9f:62:c9:ce:
         05:17:ba:51:b1:62:ab:f7:f7:1f:3c:a6:0f:96:2d:4b:10:83:
         b0:24:c9:87:63:49:32:e5:16:ff:b3:78:d1:14:90:31:b3:1c:
         86:d6:7b:6b:9c:11:5d:76:b4:22:d8:f8:d6:09:8e:ab:5e:b3:
         53:5b:9d:df:2d:6c:d5:d1:d3:08:cc:3f:45:7a:6d:68:06:15:
         42:19:a3:e9:03:e9:28:0a:e2:d5:44:10:65:49:45:a2:24:fb:
         24:85:4e:63:35:95:bc:67:7d:14:a3:4b:79:00:56:ca:3e:c3:
         d1:9c:89:0e:4d:79:2b:14:c9:2c:f4:f5:fc:ba:04:21:37:91:
         39:e3:d3:51:eb:8c:a9:5d:de:57:6d:83:cd:ed:70:44:59:0e:
         16:9d:8c:70:45:63:df:8e:bc:b5:a6:9c:4b:52:9e:7a:c1:b6:
         58:02:fb:fd:15:ae:2c:a4:92:7c:0e:ab:4b:d2:f5:e9:4b:8c:
         7b:6c:f9:cf:12:1d:15:49:93:7c:9f:29:98:4f:f8:bc:44:43:
         7f:15:94:5b:1b:d1:e9:a6:29:6a:ee:d9:2d:a1:c8:1e:f8:48:
         ad:86:80:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:04:02 2024 by rpki-client on console-ams.rpki-client.org