Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File:                     1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier:          3r2MtMkCYrfptKaTzX9/WqsK4wrt2+tblWTpgEgIcpw=
Subject key identifier:   9A:96:B9:EB:41:0B:3C:E2:73:7B:66:8A:57:A7:90:A0:02:68:27:90
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer:       /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial:       01901CA1D870CE70C47582331A0B5B8C20DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number:          014C
Signing time:             Sat 15 Jun 2024 16:01:26 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:26 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:26 +0000
Files and hashes:         1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: xxOH8erKOqDGRid408TEQOn6oA70gnY9jE0gGBqsZ30=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:d8:70:ce:70:c4:75:82:33:1a:0b:5b:8c:20:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
        Validity
            Not Before: Jun 15 16:01:26 2024 GMT
            Not After : Jun 16 16:01:26 2024 GMT
        Subject: CN=9a96b9eb410b3ce2737b668a57a790a002682790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:a3:18:d5:df:e5:69:15:5d:10:0d:6a:48:
                    fc:f4:fb:ea:7d:52:fc:ce:8d:cd:5d:1d:2f:6e:76:
                    c3:09:b4:4f:47:c4:b0:8a:9b:28:60:91:1d:85:48:
                    85:d0:ad:60:76:ad:6b:9a:67:ab:2e:70:0e:b0:39:
                    eb:3b:07:42:84:4f:f5:38:cb:b9:63:1e:c8:b1:87:
                    a3:10:a5:fd:7b:ea:ed:54:30:0e:1d:9a:55:32:87:
                    bc:76:ff:57:70:96:8d:59:45:3e:c1:2c:60:54:66:
                    7c:3b:8f:46:44:a7:05:aa:60:25:34:6a:c4:98:3d:
                    9e:e9:9e:53:78:37:e6:14:d1:c0:a1:c2:06:1a:11:
                    26:32:c2:80:77:ee:cc:86:d7:c1:6a:ba:10:51:80:
                    70:6d:19:d7:bb:73:89:1a:b2:2d:3a:fd:9b:ea:5a:
                    99:ce:57:0c:31:13:6b:e1:7d:95:f0:02:4d:be:92:
                    5d:fd:85:e2:01:6d:02:de:af:19:cb:0b:9a:70:bf:
                    00:9e:92:7d:69:89:73:3b:79:6c:30:15:70:83:71:
                    03:13:4e:90:86:d5:bf:d4:5f:4a:6b:d5:df:20:3b:
                    9c:9f:d1:9f:e8:52:2a:17:2a:c2:d0:d7:55:38:84:
                    9a:e1:fe:76:bc:70:14:26:86:55:92:7e:62:ea:cb:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:96:B9:EB:41:0B:3C:E2:73:7B:66:8A:57:A7:90:A0:02:68:27:90
            X509v3 Authority Key Identifier:
                keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e7:97:e3:a3:35:59:93:e3:e2:d2:78:25:de:58:48:19:1f:
         5b:bb:96:8e:e2:a7:a5:e2:06:38:9e:ba:a7:d5:41:30:96:35:
         d7:13:f8:6f:58:b2:4a:41:4b:7e:0c:94:6a:07:56:99:c5:26:
         7e:39:02:fe:92:63:3d:d1:18:24:60:2d:e3:23:d7:a5:07:de:
         00:c3:ed:21:b3:3d:85:c3:ca:79:b0:d2:63:3a:63:ea:76:4e:
         de:5f:fb:75:f5:6a:15:76:6b:d9:47:4c:de:3c:66:7d:01:f5:
         c3:1f:81:72:fc:25:22:bf:12:29:7d:81:e2:04:f4:b5:a4:d7:
         af:c4:40:0f:0b:c9:f5:29:f1:5b:9d:47:10:89:c6:66:b9:4a:
         71:94:b9:65:ad:aa:d1:54:0e:73:89:a5:32:a3:bd:46:62:1d:
         b3:f4:5f:63:9d:d8:bf:85:29:9e:94:ee:39:1d:49:52:4b:f3:
         2f:dd:b4:47:2f:11:98:56:13:34:c6:b9:c1:e0:fd:a5:9c:ef:
         fd:83:56:98:43:52:4a:34:aa:92:55:c1:08:35:8a:b8:72:34:
         30:00:b6:e9:9e:a7:58:fc:9f:65:db:50:7a:97:ba:32:c4:41:
         45:d7:be:fd:ba:37:ef:9a:44:5c:49:ef:42:ff:04:9d:c3:c9:
         c6:4d:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:13:01 2024 by rpki-client on console-ams.rpki-client.org