Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File:                     kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier:          DaNJDYmMztDyN5kO5nxR39FBu5WV0DqDXDq56DNpNy4=
Subject key identifier:   B1:D5:70:4E:B9:B6:BD:B1:92:B3:37:DA:7B:A2:F5:44:AF:CA:C5:6E
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer:       /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial:       018F874AD020300DB35E0E000A6459DD11BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number:          061A
Signing time:             Fri 17 May 2024 16:02:57 +0000
Manifest this update:     Fri 17 May 2024 16:02:57 +0000
Manifest next update:     Sat 18 May 2024 16:02:57 +0000
Files and hashes:         1: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: DnmX8a7A58PHq0ITlUiHDJIZu1Ub4xWULrJI1fLGiNE=)
                          2: n0ayEBBCIwGKssHMqtkY5I1ghqQ.roa (hash: 1V87bteT+eyMx9O3z82Rsdu/wEnFn+t962+ha2/4Skw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d0:20:30:0d:b3:5e:0e:00:0a:64:59:dd:11:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
        Validity
            Not Before: May 17 16:02:57 2024 GMT
            Not After : May 18 16:02:57 2024 GMT
        Subject: CN=b1d5704eb9b6bdb192b337da7ba2f544afcac56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:aa:10:7c:72:35:1c:d9:63:90:9d:24:eb:
                    cc:c1:9f:f4:04:42:10:4d:c8:85:44:56:50:a9:6b:
                    a4:d4:69:9e:d7:66:d4:74:c1:c9:5c:62:0f:12:7a:
                    28:89:4f:e9:55:04:64:63:cc:b6:2a:40:57:3d:67:
                    0b:76:e2:2f:b6:ce:9d:95:e0:61:34:a1:02:af:2e:
                    b1:e0:93:fd:38:b3:5e:c4:da:bf:1c:65:10:aa:fd:
                    89:6d:72:3d:44:7b:bb:5e:7c:6a:b8:4d:77:f6:9a:
                    2a:11:3f:e1:16:16:e4:d0:33:82:a7:bc:e2:b2:b0:
                    22:54:42:80:33:e6:5b:f8:66:9e:79:00:38:c6:bf:
                    8c:85:3e:b4:5e:07:f2:c8:31:7c:43:56:93:15:2e:
                    be:c2:dc:b3:0d:4a:c4:a3:8a:a8:7a:7a:d6:8e:ed:
                    e2:da:25:98:e6:98:cf:93:5e:80:a7:36:db:e2:6d:
                    47:93:f2:17:d6:eb:03:5c:54:50:c9:64:f6:56:10:
                    fb:6e:cf:7d:02:8a:f8:2c:74:9f:dd:94:cb:18:2c:
                    e7:cd:65:d4:61:98:ef:0f:b1:5d:1d:01:0f:eb:d3:
                    ca:82:fb:4e:58:41:c5:ab:de:b1:1d:a6:a7:9d:b2:
                    f4:5d:57:a6:b8:ac:3a:72:15:b8:89:ca:e3:fd:bc:
                    19:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D5:70:4E:B9:B6:BD:B1:92:B3:37:DA:7B:A2:F5:44:AF:CA:C5:6E
            X509v3 Authority Key Identifier:
                keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1e:ba:63:23:b4:87:36:8b:f1:d1:61:7f:95:ab:9b:c8:43:
         3d:5a:19:1f:5f:cf:3b:01:8e:f9:31:40:e3:54:57:f5:58:a3:
         b9:db:1a:45:4a:85:d1:66:19:6c:1c:1e:bc:ca:e9:30:d4:c1:
         36:71:ea:56:58:24:5f:08:0d:67:60:43:c7:52:c3:e3:af:71:
         39:a3:eb:5b:ae:0a:52:b4:27:b1:90:a1:73:a0:6e:2c:b0:c3:
         6e:0b:2c:2e:0e:b1:ff:ee:46:98:4f:fa:70:b7:22:87:4f:76:
         97:87:42:40:ba:63:83:e2:56:bc:e3:ad:bc:cd:d5:3a:a5:f9:
         3b:e9:d4:02:c8:36:fd:ed:73:5e:8b:a5:52:92:03:65:1c:12:
         bf:78:46:e7:05:9f:58:32:10:01:7a:c4:ba:16:f3:0e:1d:be:
         02:b1:ae:15:0c:44:61:30:f2:22:80:23:8b:5e:eb:1b:c8:40:
         69:95:ae:e8:55:3a:1b:8e:8e:6c:55:c3:3d:f1:d7:d4:40:00:
         3d:7f:a2:91:4e:fd:da:a3:3c:c5:19:9c:91:21:3d:4e:8f:45:
         e9:06:f0:a5:8a:7c:1b:a0:a9:7a:09:8d:d2:17:ad:e5:88:f4:
         4c:29:a4:ae:b1:87:6c:56:8e:82:77:ce:fb:ae:0d:dd:cd:17:
         e9:a4:b8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:27:10 2024 by rpki-client on console-fra.rpki-client.org