Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
File:                     MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft (raw, json)
Hash identifier:          Gm3rln4VyWtiFm7rbr+YR3NdB2J3nRt3H3GVTEh5728=
Subject key identifier:   97:07:1C:5C:02:1B:E5:A4:8C:A2:14:73:6F:C8:95:D8:76:28:18:21
Authority key identifier: 30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F
Certificate issuer:       /CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
Certificate serial:       01901FDBD85AA5D122CFBDD3B63F1FECB7FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
Manifest number:          054E
Signing time:             Sun 16 Jun 2024 07:03:39 +0000
Manifest this update:     Sun 16 Jun 2024 07:03:39 +0000
Manifest next update:     Mon 17 Jun 2024 07:03:39 +0000
Files and hashes:         1: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl (hash: qLNHXlnSaKKY0F8vRjkWP2hYTkgl0xoXiD2gRiFUGwI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:db:d8:5a:a5:d1:22:cf:bd:d3:b6:3f:1f:ec:b7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
        Validity
            Not Before: Jun 16 07:03:39 2024 GMT
            Not After : Jun 17 07:03:39 2024 GMT
        Subject: CN=97071c5c021be5a48ca214736fc895d876281821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:1d:c1:78:ba:01:76:32:0d:cc:89:56:82:
                    6e:a5:f0:df:81:17:88:59:f7:e1:ca:bb:93:e3:eb:
                    fd:e2:48:0f:4f:ec:2c:6a:36:c9:2e:21:9c:63:8e:
                    2c:ac:39:d1:70:b5:8f:3b:d1:06:bb:c3:67:78:04:
                    dd:dd:3f:59:05:a0:95:e7:16:ad:f0:ed:b5:4e:95:
                    75:57:e0:74:cd:95:66:d1:31:d5:7a:bf:69:5e:9d:
                    3e:de:b5:03:36:fa:d5:43:ea:7a:4e:cf:55:b8:5b:
                    9c:7e:63:91:68:49:f9:dc:64:18:f7:3d:cb:d7:ba:
                    c4:04:ff:ad:30:e5:5c:26:af:6e:1a:ff:06:c0:ee:
                    ee:6b:3e:a8:c2:a4:6b:61:71:dc:d3:31:07:95:51:
                    ca:10:95:ad:b0:7d:4f:52:8c:7b:56:36:4f:7c:f6:
                    6c:45:5d:6d:71:78:2b:d5:8e:20:5d:27:df:8a:a6:
                    cc:cb:bd:dd:f0:01:08:14:2f:3c:f6:3e:2b:09:74:
                    96:38:e8:5b:39:41:06:a2:21:11:ac:31:23:e2:f5:
                    92:31:e9:f7:4e:51:b6:02:b2:f8:f7:32:c3:f8:b2:
                    20:fa:47:1a:a0:db:08:d0:da:95:8b:65:84:ff:f5:
                    d1:27:0d:67:ea:f5:dd:eb:e7:3d:df:19:bd:91:92:
                    8f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:07:1C:5C:02:1B:E5:A4:8C:A2:14:73:6F:C8:95:D8:76:28:18:21
            X509v3 Authority Key Identifier:
                keyid:30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:5e:4b:b8:e9:f3:34:b3:6f:18:3b:c7:df:33:b2:41:58:
         77:9b:12:29:26:6a:1b:65:4c:4c:f4:1e:4f:e3:7d:f5:03:eb:
         74:0b:57:c1:1c:57:c5:c1:43:17:17:69:d8:b9:99:6a:b4:67:
         19:5f:0a:92:2f:4f:5c:c0:ea:44:3c:86:02:e6:50:b9:91:4e:
         93:1e:b7:43:c6:bf:db:f9:24:7a:4b:d2:45:ab:37:0f:44:03:
         dc:37:17:09:78:12:57:5a:e2:1c:48:a6:38:04:fd:b7:0c:a4:
         0c:ce:99:3e:f1:c0:aa:f7:22:ce:b4:9f:9c:f6:0c:5a:86:64:
         1c:f3:0c:46:2b:97:1d:1d:37:db:38:ea:5f:ab:2d:aa:71:a0:
         11:bb:8f:42:d2:3a:43:77:c8:e3:55:4b:93:ae:de:69:c8:1e:
         f9:26:98:89:c8:5f:2d:ca:26:c3:50:cf:5e:21:bf:fe:dd:f9:
         16:41:ed:b4:ec:9a:38:40:90:1f:ab:e2:64:4c:e6:ec:6a:a7:
         0b:e6:24:fc:a8:82:85:73:71:03:e2:12:6d:7b:a8:b3:75:d8:
         9d:04:06:46:60:24:c8:1f:94:67:87:7b:e9:3d:70:b4:25:f5:
         f5:ff:62:2c:ec:8e:70:fe:be:bc:b3:a4:24:aa:12:2b:86:16:
         d1:8f:a7:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAf29hapdEiz73Ttj8f7Lf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTI0MmNmNmMxNTI5YWFhMDY5MzM2N2U0NGM4NGEwN2Q4
YjBjOWYwHhcNMjQwNjE2MDcwMzM5WhcNMjQwNjE3MDcwMzM5WjAzMTEwLwYDVQQD
Eyg5NzA3MWM1YzAyMWJlNWE0OGNhMjE0NzM2ZmM4OTVkODc2MjgxODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7cdwXi6AXYyDcyJVoJupfDfgReI
WffhyruT4+v94kgPT+wsajbJLiGcY44srDnRcLWPO9EGu8NneATd3T9ZBaCV5xat
8O21TpV1V+B0zZVm0THVer9pXp0+3rUDNvrVQ+p6Ts9VuFucfmORaEn53GQY9z3L
17rEBP+tMOVcJq9uGv8GwO7uaz6owqRrYXHc0zEHlVHKEJWtsH1PUox7VjZPfPZs
RV1tcXgr1Y4gXSffiqbMy73d8AEIFC889j4rCXSWOOhbOUEGoiERrDEj4vWSMen3
TlG2ArL49zLD+LIg+kcaoNsI0NqVi2WE//XRJw1n6vXd6+c93xm9kZKPcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcHHFwCG+WkjKIUc2/Ildh2KBghMB8GA1UdIwQY
MBaAFDCiQs9sFSmqoGkzZ+RMhKB9iwyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtKQ3oyd1ZLYXFnYVRObjVFeUVvSDJMREo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xN2NkODYtN2ZiYi00MDhmLWEyOGMt
ZmEyNjc2ZmUzOGZkLzEvTUtKQ3oyd1ZLYXFnYVRObjVFeUVvSDJMREo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xN2NkODYtN2ZiYi00MDhmLWEyOGMtZmEyNjc2ZmUzOGZk
LzEvTUtKQ3oyd1ZLYXFnYVRObjVFeUVvSDJMREo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/ZeS7jp
8zSzbxg7x98zskFYd5sSKSZqG2VMTPQeT+N99QPrdAtXwRxXxcFDFxdp2LmZarRn
GV8Kki9PXMDqRDyGAuZQuZFOkx63Q8a/2/kkekvSRas3D0QD3DcXCXgSV1riHEim
OAT9twykDM6ZPvHAqvcizrSfnPYMWoZkHPMMRiuXHR032zjqX6stqnGgEbuPQtI6
Q3fI41VLk67eacge+SaYichfLcomw1DPXiG//t35FkHttOyaOECQH6viZEzm7Gqn
C+Yk/KiChXNxA+ISbXuos3XYnQQGRmAkyB+UZ4d76T1wtCX19f9iLOyOcP6+vLOk
JKoSK4YW0Y+ndw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 07:50:23 2024 by rpki-client on console-ams.rpki-client.org