Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
File:                     kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft (raw, json)
Hash identifier:          5GnEUl2TtXC0bt6QClape49smzBwkSPSmgmLAEhkGwI=
Subject key identifier:   9E:7D:76:DC:5E:A0:2F:57:B0:57:EB:6F:6A:A5:F6:C3:A6:AC:4D:A3
Authority key identifier: 91:CE:55:13:88:CC:BC:0E:13:06:BF:A2:8B:E6:33:BB:5D:C3:4B:F5
Certificate issuer:       /CN=91ce551388ccbc0e1306bfa28be633bb5dc34bf5
Certificate serial:       01901E8FB0A0289F9D0F5F125247549FF127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kc5VE4jMvA4TBr-ii-Yzu13DS_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
Manifest number:          0D08
Signing time:             Sun 16 Jun 2024 01:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:51 +0000
Files and hashes:         1: kc5VE4jMvA4TBr-ii-Yzu13DS_U.crl (hash: MF5j4I40CpkzPpZXtnxFB7f3SA9CJVjiOQhiJIIRru0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kc5VE4jMvA4TBr-ii-Yzu13DS_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:b0:a0:28:9f:9d:0f:5f:12:52:47:54:9f:f1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ce551388ccbc0e1306bfa28be633bb5dc34bf5
        Validity
            Not Before: Jun 16 01:00:51 2024 GMT
            Not After : Jun 17 01:00:51 2024 GMT
        Subject: CN=9e7d76dc5ea02f57b057eb6f6aa5f6c3a6ac4da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:18:ea:9d:1f:0a:0e:33:2a:41:a2:27:13:
                    37:35:aa:f2:21:9c:74:e7:24:db:7e:53:fd:09:58:
                    7a:b8:80:69:e8:10:28:2c:90:e2:4c:35:d4:48:f9:
                    26:db:ba:e0:b2:14:ed:63:b4:dd:a9:a7:90:5d:44:
                    67:03:ea:c5:4a:98:fb:1c:5a:35:d3:a9:18:9c:25:
                    b1:a6:11:33:dd:b6:1b:61:c9:df:ef:b2:fe:7f:32:
                    b4:17:a1:9c:e5:2f:50:9a:da:d4:91:5a:dc:b9:51:
                    63:6b:8f:18:47:fb:0b:7a:28:d6:6d:3d:56:27:d8:
                    83:56:95:c1:3a:1e:8b:70:f9:49:1c:e2:62:a7:54:
                    bd:f6:03:b4:6e:f1:22:f4:fa:8c:34:f0:fe:41:20:
                    c5:c0:69:7e:a9:61:9c:23:d8:f5:54:39:38:14:b4:
                    11:9b:05:c4:3d:ba:0b:f4:28:59:5b:c1:fa:dd:cd:
                    38:e8:08:7d:e2:77:ce:33:4c:be:9d:05:e2:d8:21:
                    26:47:c1:f4:a5:93:2f:38:a8:12:b7:3f:94:7e:0d:
                    b9:30:04:65:12:8f:69:27:2a:57:cd:b0:da:0e:18:
                    44:2f:ed:5d:43:92:b7:0a:32:d9:bf:d3:8b:4a:36:
                    d4:76:f8:ff:9c:e2:f8:cc:98:49:b7:a1:1f:17:f0:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7D:76:DC:5E:A0:2F:57:B0:57:EB:6F:6A:A5:F6:C3:A6:AC:4D:A3
            X509v3 Authority Key Identifier:
                keyid:91:CE:55:13:88:CC:BC:0E:13:06:BF:A2:8B:E6:33:BB:5D:C3:4B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc5VE4jMvA4TBr-ii-Yzu13DS_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:93:35:65:8e:ac:0b:1a:3a:54:08:9f:5f:8d:82:8b:dc:e0:
         ea:42:33:5f:65:c3:83:5e:86:75:1c:31:f5:df:d3:97:7f:e0:
         98:21:d7:e0:d1:5d:79:d3:0f:76:5c:d9:24:a8:2c:9a:fa:ce:
         96:b3:61:0f:c0:84:ad:11:e3:39:90:28:65:a3:07:2f:e6:d3:
         b3:a4:65:6a:4b:a1:5c:6a:ee:72:35:58:ba:50:5f:6a:4e:67:
         58:fc:0c:ce:37:87:09:fd:91:90:fe:38:3f:c4:72:5c:01:bc:
         04:3f:96:81:14:4b:61:dd:25:2d:e8:8e:a1:f4:90:cc:9c:ab:
         39:17:c3:0b:99:32:51:21:91:33:96:bf:f7:23:8f:a1:61:e0:
         42:06:e7:eb:d6:bd:27:15:7c:14:1f:8d:df:5e:f4:23:0f:e6:
         c6:f8:6a:ec:51:d7:c8:6f:6b:67:e4:dd:57:9e:20:cd:da:d7:
         8c:44:fb:26:a4:81:8f:c1:1b:99:2b:e4:9a:84:2e:a0:42:fb:
         d1:ed:d2:22:70:85:90:76:89:a6:51:78:75:4d:50:26:6a:42:
         e7:d7:a4:4a:1d:1b:d6:2e:43:29:c1:02:0a:0e:2c:5b:5a:68:
         b3:c0:72:37:9a:a6:c6:35:ef:d7:ce:a9:cf:b1:96:f0:74:51:
         5e:02:50:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:46:32 2024 by rpki-client on console-fra.rpki-client.org