Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
File:                     lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json)
Hash identifier:          Vf53A5Lohs1INXzMtpWpccIgIcGAPA0mUih2xqa3ok4=
Subject key identifier:   08:36:02:8D:11:F0:15:66:CE:AC:43:E5:C6:5B:EC:56:01:53:26:69
Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
Certificate issuer:       /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Certificate serial:       0190448C394A0B5B42AA102DBD77D46B552C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
Manifest number:          11D6
Signing time:             Sun 23 Jun 2024 10:02:38 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:38 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:38 +0000
Files and hashes:         1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: w/ibB17Elhsh4HmHvibntaoH338g9whdL4kViEyOtzM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:39:4a:0b:5b:42:aa:10:2d:bd:77:d4:6b:55:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
        Validity
            Not Before: Jun 23 10:02:38 2024 GMT
            Not After : Jun 24 10:02:38 2024 GMT
        Subject: CN=0836028d11f01566ceac43e5c65bec5601532669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:83:1e:e2:a6:65:f6:eb:87:a2:0d:07:79:
                    40:5b:0f:e5:3c:2d:62:ee:33:d0:c3:ba:98:6e:76:
                    53:24:ae:b9:d4:89:24:d0:4d:82:8d:4d:98:d4:07:
                    e6:b0:5d:b6:9c:8e:56:96:fc:9c:c3:ba:e2:93:82:
                    37:66:e0:cd:71:48:fa:9d:6e:63:89:17:36:49:e8:
                    6f:fe:d6:22:2f:6f:73:dc:e5:50:48:ad:3e:ea:44:
                    13:12:27:4f:ce:04:b3:ce:20:b5:91:ed:7b:d1:88:
                    8e:40:3f:0d:1c:15:5c:d2:2d:e9:b0:8b:ed:11:df:
                    41:be:61:e4:0b:2b:f3:76:bf:78:3d:dc:c3:a4:03:
                    06:d2:88:db:6a:4e:eb:97:d5:6f:d5:9a:85:09:fb:
                    49:c7:85:a5:2c:81:97:52:94:2e:49:d4:32:61:26:
                    6a:f8:29:70:72:50:7b:b4:03:a3:2a:d2:af:07:b9:
                    32:df:79:79:f9:8d:c4:f3:b1:83:ea:f6:4f:fa:5d:
                    d7:72:02:86:a4:e3:f9:2b:94:07:f9:86:2f:ae:56:
                    6a:8d:cc:87:3c:bc:01:10:4a:73:d3:05:97:1f:16:
                    1f:96:01:50:90:71:71:1a:bf:c7:93:f1:4e:7b:90:
                    ec:c9:19:c8:e6:04:6a:3b:4c:fb:71:17:c0:fa:0c:
                    d6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:36:02:8D:11:F0:15:66:CE:AC:43:E5:C6:5B:EC:56:01:53:26:69
            X509v3 Authority Key Identifier:
                keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b3:2c:e7:9c:20:3d:f0:19:5d:ce:93:5e:fe:80:0e:76:c9:
         90:2c:36:93:e4:a7:d2:99:be:7f:f0:72:0d:43:9a:1b:6c:77:
         28:dc:0e:7c:94:e2:2c:6d:34:3b:5c:1f:eb:72:bb:26:5f:7f:
         03:16:85:7a:fb:b6:f2:bf:a1:29:d0:57:40:5f:28:d5:8a:7d:
         4e:f0:8e:5e:a8:78:65:c3:40:51:f6:fd:07:3e:97:a8:44:12:
         43:ad:9e:ec:db:27:57:99:e1:0a:23:15:e1:91:92:04:e8:5d:
         f0:b9:b9:d2:64:36:60:34:49:81:31:9f:32:c7:90:76:c6:33:
         70:81:5d:69:ca:d8:6c:d3:fb:25:0c:0a:e8:5c:50:1c:0d:21:
         db:c6:5a:fa:0d:b7:f4:92:52:ad:3b:51:be:d1:34:12:01:aa:
         1d:e4:b8:35:52:bc:7f:87:31:2d:6c:9d:df:86:07:c1:d4:22:
         63:26:c9:ae:c7:e8:d3:4c:e5:f8:aa:6d:ce:57:05:fc:33:1e:
         e1:a6:8c:9a:89:f3:0b:d8:50:2d:89:06:9d:7c:9b:b4:cb:4f:
         ef:1d:78:af:13:18:2e:33:96:9d:ba:82:1a:d3:be:90:af:73:
         f9:fd:f3:3d:90:6b:aa:60:11:a3:fe:cf:83:a6:3b:3e:16:45:
         af:ae:24:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:01:49 2024 by rpki-client on console-ams.rpki-client.org