Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft
File:                     DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft (raw, json)
Hash identifier:          ofHgS/3qXwf2TidI7Dg8pk6lKICq+NyZmhwiZUvh56I=
Subject key identifier:   97:A4:0E:F7:44:CF:32:B5:73:E6:67:DA:D3:D5:D2:01:04:D1:E3:0B
Authority key identifier: 0C:47:35:08:6C:74:C1:4B:75:B0:F6:72:41:7E:30:75:CF:6F:41:2B
Certificate issuer:       /CN=0c4735086c74c14b75b0f672417e3075cf6f412b
Certificate serial:       01901DEC000F0A17065C699D03122ED383E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEc1CGx0wUt1sPZyQX4wdc9vQSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft
Manifest number:          07AC
Signing time:             Sat 15 Jun 2024 22:02:04 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:04 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:04 +0000
Files and hashes:         1: DEc1CGx0wUt1sPZyQX4wdc9vQSs.crl (hash: 905HEF3p4tBVlozIbWm37Vp0RHtLdrAVYHAvM+/Tsg4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEc1CGx0wUt1sPZyQX4wdc9vQSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:00:0f:0a:17:06:5c:69:9d:03:12:2e:d3:83:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4735086c74c14b75b0f672417e3075cf6f412b
        Validity
            Not Before: Jun 15 22:02:04 2024 GMT
            Not After : Jun 16 22:02:04 2024 GMT
        Subject: CN=97a40ef744cf32b573e667dad3d5d20104d1e30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:2e:89:72:c2:00:7b:00:07:a8:f2:10:3d:
                    db:d1:3b:93:d7:ee:78:8e:1e:ee:38:75:23:eb:1f:
                    f1:0c:e4:8f:67:ed:df:2d:a3:bf:31:04:18:e7:7e:
                    59:05:f2:55:88:c9:6e:9d:dd:08:cb:ba:df:f5:c3:
                    40:36:20:ba:f1:a3:89:02:c6:fe:7f:03:a0:ea:fb:
                    e5:ac:ee:d0:83:2a:86:8b:36:8b:da:fa:df:e2:88:
                    40:db:9c:7f:c0:fa:ce:40:de:ae:86:de:53:e8:d1:
                    03:1f:b3:b0:4c:d6:a7:09:49:6c:66:17:8d:17:77:
                    b8:f3:e7:9e:df:9b:da:58:23:b4:a6:06:4c:90:10:
                    9a:6d:a2:19:07:01:b2:52:75:92:c9:32:fb:47:5d:
                    ba:d5:2d:c0:46:33:52:00:d7:f5:3c:23:af:9e:d6:
                    37:59:ff:9d:37:48:9f:c7:28:a3:ec:81:da:b0:b7:
                    69:f3:62:3d:db:f0:40:1a:f8:00:31:01:3c:fd:25:
                    24:14:e8:8e:f1:78:84:58:cd:be:96:b7:05:7c:da:
                    13:67:10:a2:a2:6c:7d:b3:be:fc:c3:ab:98:aa:78:
                    ed:2e:7d:45:02:bd:2c:31:40:5a:bc:ed:2a:69:c5:
                    b3:77:c0:d9:84:07:f3:c9:bf:01:20:8a:bd:1e:a1:
                    33:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A4:0E:F7:44:CF:32:B5:73:E6:67:DA:D3:D5:D2:01:04:D1:E3:0B
            X509v3 Authority Key Identifier:
                keyid:0C:47:35:08:6C:74:C1:4B:75:B0:F6:72:41:7E:30:75:CF:6F:41:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEc1CGx0wUt1sPZyQX4wdc9vQSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f4:0f:6a:e8:cb:a8:6a:35:f0:5a:51:35:22:07:7f:3e:69:
         d8:be:c7:5a:a2:e0:17:e6:90:61:b5:c5:a8:95:28:16:76:5a:
         ea:5e:7c:60:64:1d:cf:eb:7b:a7:83:e9:1a:95:9d:00:f1:c0:
         a6:8e:86:cc:dd:0e:c5:6a:ca:52:61:7a:20:16:4a:ad:0f:c2:
         65:dd:bc:06:5d:61:e6:63:61:99:3e:8c:79:ff:f1:6d:7e:24:
         10:c3:82:65:a7:a4:5d:db:04:3e:89:f8:a0:a3:37:e7:ef:ba:
         7a:ba:83:08:31:74:63:64:2e:32:19:51:a5:1d:dd:4c:ad:df:
         fa:b4:18:8d:a2:1c:58:46:10:8b:18:62:6a:80:11:47:3b:31:
         6d:75:87:49:c4:c7:15:dd:60:86:43:b0:e5:89:67:0e:4d:42:
         07:cd:ac:7b:10:e1:59:bf:da:cc:9f:65:ad:fb:de:51:b9:b7:
         38:4e:01:2a:fe:74:9b:f7:ed:48:47:dc:a8:4a:cb:0b:99:5f:
         d4:3d:a6:ef:93:a8:ae:3c:0a:4d:3a:16:2c:15:29:11:a0:8b:
         97:ba:8d:43:78:ae:ff:90:88:31:f8:23:16:80:ee:2c:2b:1f:
         be:43:b9:fe:2e:ff:29:87:c0:ac:1a:b7:af:54:23:e0:7d:61:
         1c:99:80:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:15:37 2024 by rpki-client on console-fra.rpki-client.org