Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File:                     0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier:          WYJ6IKMR3Jgp6PPEUZMPYvGsEOLBTRKaWQZjdytP86s=
Subject key identifier:   68:0B:46:87:E5:0C:C2:CA:D1:75:E6:68:BB:C4:55:29:64:49:DD:D0
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer:       /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial:       018F429F6B45EAF65F444C2B3FCAD7320D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number:          06D7
Signing time:             Sat 04 May 2024 08:01:34 +0000
Manifest this update:     Sat 04 May 2024 08:01:34 +0000
Manifest next update:     Sun 05 May 2024 08:01:34 +0000
Files and hashes:         1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: rajBfE9cgHEt9RFjQ2yVNmE8/gT1aVZKTVxNkQzjgJ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:9f:6b:45:ea:f6:5f:44:4c:2b:3f:ca:d7:32:0d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
        Validity
            Not Before: May  4 08:01:34 2024 GMT
            Not After : May  5 08:01:34 2024 GMT
        Subject: CN=680b4687e50cc2cad175e668bbc455296449ddd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:a6:25:52:d7:5a:2a:9e:1f:0e:df:b3:2f:
                    e3:24:6b:6c:52:47:80:28:e5:f9:30:dc:0f:e6:84:
                    af:47:80:43:44:8c:e2:55:ce:32:b4:43:38:bf:e0:
                    bc:c7:56:f2:f6:12:be:3c:af:11:76:b5:9b:8e:87:
                    ea:82:98:f9:c0:b3:ee:e0:99:83:2c:0a:4d:9f:00:
                    6b:f7:e5:91:6d:9d:9e:05:f7:52:5c:b0:4c:5b:cf:
                    d6:c6:08:20:39:2a:12:b6:eb:12:8e:96:72:e4:b3:
                    e9:ae:20:82:c7:0b:50:09:3e:53:2c:51:d2:da:1f:
                    c1:7f:27:79:92:56:74:71:5f:7d:6e:13:ab:52:83:
                    2e:ed:af:3a:6d:28:39:8c:4e:c4:b6:24:50:eb:d9:
                    07:fc:19:73:cd:75:95:4f:5c:a7:48:5f:8b:06:03:
                    e0:98:3d:09:11:16:38:72:72:c3:a2:9e:b6:51:80:
                    22:fc:28:f9:75:8e:15:2c:22:bf:89:68:0b:8e:8a:
                    6b:d4:3c:81:7c:15:fc:26:b3:bd:ef:94:6f:79:b1:
                    03:54:10:03:1d:5e:8c:09:09:70:d7:70:e6:0c:91:
                    da:5c:51:56:22:98:94:fc:4c:71:a9:d0:f2:f6:92:
                    6c:9a:3c:1e:ff:33:5b:e3:72:8b:92:e3:76:3c:b3:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0B:46:87:E5:0C:C2:CA:D1:75:E6:68:BB:C4:55:29:64:49:DD:D0
            X509v3 Authority Key Identifier:
                keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:41:bb:65:5c:f4:b1:1c:e3:c9:5f:68:fe:a6:88:d6:bb:92:
         bd:32:2f:31:03:08:40:e6:69:48:d6:15:93:23:04:61:8d:23:
         1b:21:35:14:b1:6c:f3:fb:f7:59:c0:9f:9e:51:57:25:76:ec:
         8d:99:78:cd:f5:37:8b:b4:75:74:c6:36:90:8e:fb:06:75:75:
         be:4d:a9:91:4e:31:19:e7:4b:40:e2:9b:19:21:c6:79:5a:7c:
         d5:6b:58:4f:8d:5a:26:52:aa:40:8a:1e:29:59:97:4a:06:3d:
         f2:72:47:95:74:d9:58:26:82:bd:d7:48:d1:d9:c4:ab:21:b0:
         49:fe:29:ef:20:ed:72:52:f7:11:70:32:af:0e:8e:d5:91:51:
         68:87:5e:17:57:2b:31:c6:56:1e:eb:c0:e4:00:74:2c:07:2a:
         8c:37:d9:50:fd:c0:23:6b:47:ec:ce:f9:62:0b:94:b6:4d:3c:
         d8:87:10:99:d5:42:f5:66:62:54:d3:10:94:f3:0f:d6:a0:12:
         f8:15:30:01:a2:77:64:c8:bb:1d:d8:2d:6e:eb:67:9d:f7:60:
         a9:91:a9:45:99:3e:fb:19:59:bc:ec:4d:2e:02:a4:d0:d5:4d:
         65:57:a8:d5:9c:ed:94:d6:fe:f9:32:63:21:ce:00:1f:18:65:
         f0:6c:48:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:56:48 2024 by rpki-client on console-ams.rpki-client.org