Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File:                     DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier:          Nsxn8Eyv4kCaErx5KDRd40lMEM3y0b+IBo0jfeEieWU=
Subject key identifier:   91:A2:C8:CB:67:9F:E4:F5:FA:02:61:4B:B0:DC:5A:81:74:16:77:DD
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer:       /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial:       018F874988FDB46E56D4CC0730E142779A70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number:          0364
Signing time:             Fri 17 May 2024 16:01:34 +0000
Manifest this update:     Fri 17 May 2024 16:01:34 +0000
Manifest next update:     Sat 18 May 2024 16:01:34 +0000
Files and hashes:         1: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: 8tbWrMuV+ASnn81VeGNTX7KgG8lqXfQnhqEhPLXRNqM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:88:fd:b4:6e:56:d4:cc:07:30:e1:42:77:9a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
        Validity
            Not Before: May 17 16:01:34 2024 GMT
            Not After : May 18 16:01:34 2024 GMT
        Subject: CN=91a2c8cb679fe4f5fa02614bb0dc5a81741677dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:fb:e2:66:de:37:d9:c0:23:be:00:87:02:
                    1c:e7:0c:88:b9:3a:9f:4f:44:17:3a:70:b3:eb:23:
                    42:83:1d:d5:46:36:93:04:bb:68:20:3b:90:5f:77:
                    79:51:84:c1:43:bf:78:5b:28:c8:a3:f9:f9:36:b1:
                    8e:7a:cc:91:c3:a2:20:bb:e0:07:7a:00:dd:ae:5e:
                    e7:d0:b2:88:a6:69:f5:88:68:1a:47:9d:2f:7d:4c:
                    41:d9:65:25:fb:5f:5b:f7:26:a5:02:dd:ec:04:1b:
                    b3:ac:f2:86:5e:99:2b:2f:86:8e:82:28:28:d5:b2:
                    10:10:e5:41:94:35:51:a7:37:8d:6a:ff:29:63:99:
                    58:c9:c8:43:84:01:64:60:62:35:84:e5:15:fb:b5:
                    69:b1:a8:cc:42:08:f0:d4:97:e9:d7:fd:9b:b4:70:
                    35:90:ba:9a:8f:a6:9d:4e:f3:d0:a2:d0:f2:91:ab:
                    56:76:25:34:b4:ae:fe:94:1f:6d:ef:ef:a0:9e:00:
                    43:84:7b:2a:33:0f:2f:1a:73:96:c8:37:9b:7b:84:
                    b6:e0:6c:12:13:30:0d:b9:cc:fe:46:51:08:b0:bd:
                    d2:28:e0:1d:03:2a:b3:fd:53:31:6a:26:4a:b6:45:
                    72:29:4e:4e:b6:32:54:08:36:cc:d9:59:ee:b9:5c:
                    53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A2:C8:CB:67:9F:E4:F5:FA:02:61:4B:B0:DC:5A:81:74:16:77:DD
            X509v3 Authority Key Identifier:
                keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:31:13:c3:41:00:a4:6d:5c:b8:a2:73:33:df:f6:28:6c:16:
         62:ff:91:ae:06:97:70:dc:a1:3a:da:6e:f1:ce:11:7b:e8:5e:
         e0:30:f6:22:95:b4:60:50:77:fe:55:e6:7d:98:bf:b9:c6:7d:
         72:58:e8:40:47:ef:de:f0:26:75:6c:f5:9f:f6:5d:f2:74:f3:
         00:81:6b:55:e2:79:b5:d6:41:b5:ef:58:61:d0:66:5f:87:ed:
         e5:90:1e:c2:d2:12:a9:71:f2:eb:14:1e:3f:17:7b:a3:45:fb:
         83:7a:9a:5f:27:a4:e9:26:b1:b1:19:6c:fc:3b:07:d3:9d:94:
         4a:fc:fa:93:63:07:09:4d:44:0c:99:87:bf:86:76:73:90:59:
         d3:36:1e:4e:dc:28:17:8e:29:b8:e5:28:31:66:2b:d5:5e:2c:
         22:18:c1:ec:bc:ad:dd:72:21:1c:87:fc:38:7f:9b:4c:15:c5:
         c4:c8:35:af:1a:01:cb:1c:4f:1f:ce:b4:4d:54:aa:4a:0f:30:
         b9:da:0e:73:92:99:1e:be:d5:09:e7:0b:88:5d:02:71:f6:0e:
         d4:ea:68:97:a1:2f:9b:25:71:ef:ea:01:1f:8f:68:02:3d:b2:
         d5:50:20:e6:9d:9e:8f:45:02:c4:ae:42:39:23:43:86:6b:bf:
         d5:58:69:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:04:12 2024 by rpki-client on console-ams.rpki-client.org