Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File:                     qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier:          +B9rwC6pq+zjttQ9h+KPcxwkjOMVHRnhhM5pHutBEtw=
Subject key identifier:   76:FC:55:DC:EA:1E:EA:89:17:ED:3A:13:45:0F:00:98:90:FA:D3:19
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer:       /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial:       0190742D9E85DFE300211568C749CFC85127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number:          0CE0
Signing time:             Tue 02 Jul 2024 16:01:05 +0000
Manifest this update:     Tue 02 Jul 2024 16:01:05 +0000
Manifest next update:     Wed 03 Jul 2024 16:01:05 +0000
Files and hashes:         1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: ZTvbXrIKZi+GgUB0cTDRhKlmrU7n598KrP41S6XiJ/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:74:2d:9e:85:df:e3:00:21:15:68:c7:49:cf:c8:51:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
        Validity
            Not Before: Jul  2 16:01:05 2024 GMT
            Not After : Jul  3 16:01:05 2024 GMT
        Subject: CN=76fc55dcea1eea8917ed3a13450f009890fad319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:54:52:a7:88:05:b8:43:cb:22:1c:9a:c2:
                    da:ba:76:73:6b:c7:46:f1:4f:00:f5:d6:17:9e:4a:
                    9e:7a:4b:44:6b:f7:f0:11:79:ac:35:92:b8:47:2e:
                    98:16:7c:2d:89:c8:87:71:ef:ca:bb:74:4b:00:4b:
                    49:42:4b:7d:e9:50:40:bd:9b:a9:80:6d:a9:af:36:
                    f0:9b:82:2a:b0:b0:5a:a0:42:86:58:a6:b8:f2:d3:
                    61:e6:94:f6:7a:15:d3:75:7b:30:42:44:3a:b7:3a:
                    5d:55:58:f0:dc:a3:5c:66:08:08:c2:76:42:ed:c3:
                    21:22:94:9b:53:61:5d:9b:dc:1c:5e:8b:a4:02:21:
                    7f:f4:68:cc:f5:ce:05:4d:df:12:e9:39:3f:80:1d:
                    a4:14:5c:10:b6:e1:83:fa:49:34:ed:40:26:05:f5:
                    bc:d2:15:41:52:33:cf:97:dc:22:bb:f0:5c:d9:98:
                    4a:af:f0:de:9a:46:3c:cc:d7:be:5a:a0:5e:78:0a:
                    a2:10:b7:a9:a7:42:d0:56:4c:7e:9b:96:92:fa:03:
                    05:04:b1:b3:8b:74:4e:45:f0:09:97:97:c5:ab:75:
                    de:cc:a8:a4:f5:07:5b:5f:7e:ad:58:ae:e0:f7:fd:
                    79:15:8a:e8:30:fe:33:4d:0c:07:f3:6a:cb:9d:45:
                    c7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FC:55:DC:EA:1E:EA:89:17:ED:3A:13:45:0F:00:98:90:FA:D3:19
            X509v3 Authority Key Identifier:
                keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ab:59:13:f3:92:e2:87:8a:1e:51:24:22:59:84:eb:5d:dc:
         9c:35:61:b3:b0:58:7e:8b:d6:b2:6d:95:ff:7d:3d:16:b7:75:
         76:32:9c:e8:1f:20:09:bd:8c:3f:4e:48:21:6b:29:4f:fc:b9:
         88:78:7f:20:e4:4b:69:18:ec:48:2c:74:98:f9:00:e3:82:ba:
         39:2f:3d:3d:80:9c:63:8f:32:1b:bd:ed:06:d1:a9:ad:67:46:
         ee:be:61:a6:89:4f:58:7d:0a:07:d5:d3:9a:7b:61:d7:6a:fa:
         ee:e2:4d:23:39:c8:5e:25:8d:75:73:88:a8:b0:a5:83:63:d6:
         1e:61:5f:29:b6:4b:ea:11:f1:e5:4f:79:7c:50:08:8e:12:01:
         3b:2f:5f:68:a5:0a:5b:b1:ee:a2:da:2b:38:9a:61:b9:4c:9f:
         ec:d1:2b:84:5c:04:1f:15:b0:28:3d:21:e4:be:e1:39:d7:36:
         a1:73:af:ce:8a:51:ea:06:49:06:75:d4:32:6b:00:04:20:fd:
         06:eb:c8:80:a5:b4:43:20:40:eb:cc:2d:ac:59:72:e6:1c:2d:
         46:e1:62:d3:98:30:50:c9:e2:13:27:07:39:3e:de:4d:98:4b:
         df:39:00:3a:ba:f3:fd:ef:fb:4d:68:00:bd:4a:4e:ea:67:f8:
         e6:84:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 21:46:39 2024 by rpki-client on console-ams.rpki-client.org