Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File:                     jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier:          3boHS9jvMVjgrG4mJFCbuI4UjVDXFc22outYR6POUaM=
Subject key identifier:   5A:6A:07:22:F7:66:79:2D:F3:60:17:64:35:2E:78:16:8D:83:39:A1
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer:       /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial:       01901BFE9518409A2CDC17C081A21DFBCF27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 13:03:07 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:07 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:07 +0000
Files and hashes:         1: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: UtcjH7StYtyzM9qMNYnRqqktsbWNh6rICSLE3yDVFjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:95:18:40:9a:2c:dc:17:c0:81:a2:1d:fb:cf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
        Validity
            Not Before: Jun 15 13:03:07 2024 GMT
            Not After : Jun 16 13:03:07 2024 GMT
        Subject: CN=5a6a0722f766792df3601764352e78168d8339a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:fc:cc:0e:0e:31:be:90:ef:22:79:18:0a:
                    7a:5b:55:2f:cb:b7:04:d3:8b:4b:d7:8a:80:9c:e4:
                    db:0d:05:7e:63:02:4c:0e:34:f6:8e:d0:cd:f6:38:
                    0b:f1:04:e3:0d:d5:39:0d:9f:ab:93:8b:cc:b1:60:
                    1e:5b:94:43:04:38:67:68:31:e8:00:43:80:32:3e:
                    f6:16:c9:df:49:8a:83:71:89:b4:39:be:5b:32:6e:
                    ad:7b:3d:d0:27:16:74:fe:49:b5:e7:41:e8:68:50:
                    e9:55:f0:fe:d7:b0:69:77:d8:8a:93:e8:ac:8c:5c:
                    c7:e5:73:02:12:dc:bd:96:e2:69:33:da:d2:6a:f6:
                    40:b2:4a:75:09:01:68:3d:15:01:31:f1:b6:12:5d:
                    09:b1:b7:fe:26:22:40:f2:19:50:43:66:44:18:0c:
                    3f:65:c0:35:08:b1:52:92:f2:6f:45:35:b3:ee:db:
                    fe:72:00:6e:1a:54:72:dc:a7:12:dc:0a:0c:de:ac:
                    e2:b0:a0:7f:1f:f6:df:ca:f5:19:0f:91:34:9f:8d:
                    5d:26:c8:98:41:34:ea:b0:3c:c2:93:a4:3f:36:c8:
                    db:72:4c:79:5f:7b:03:12:63:a9:87:bd:c8:92:b0:
                    4b:f2:15:33:44:15:ab:31:fd:75:26:d5:89:63:ed:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6A:07:22:F7:66:79:2D:F3:60:17:64:35:2E:78:16:8D:83:39:A1
            X509v3 Authority Key Identifier:
                keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:38:d8:4b:7e:2d:7f:cb:ce:ad:9f:a9:da:95:cf:93:4d:
         8f:2d:59:3a:d5:31:90:ae:2a:c6:67:46:1e:37:fe:a7:00:8e:
         3d:29:06:31:3c:72:0c:c2:ae:cb:4d:e0:8a:4c:eb:ef:e2:12:
         c2:81:2b:a6:41:42:54:f0:12:e2:ff:7c:28:3d:18:eb:46:e0:
         dc:04:8a:a7:8c:7f:d2:1c:55:96:e3:ae:3b:dd:a2:98:54:93:
         12:08:7c:4f:cf:36:b4:13:07:7f:d6:65:9b:2d:a1:d0:d2:ed:
         1d:42:2d:95:6e:4d:43:3d:4b:03:3e:79:db:01:28:6a:13:c2:
         4a:80:4d:03:85:92:2e:c4:44:1c:5c:a9:f3:a4:6e:87:12:83:
         ed:1a:f7:15:85:1a:81:a9:18:da:9b:39:f8:76:c9:f7:68:9c:
         8e:ab:d5:73:ba:bb:78:c4:e2:47:f6:96:76:bb:70:ae:77:3c:
         03:55:5f:78:70:0f:eb:d4:21:0a:ac:3e:7d:20:76:67:8a:da:
         3e:02:e5:51:84:e5:68:ab:29:ab:af:51:24:57:6f:dc:82:96:
         aa:56:5d:d3:b3:80:da:de:ee:c8:3e:01:43:00:4d:91:c1:9c:
         3e:9f:3e:68:b4:4b:e5:b7:32:2f:6e:ca:0d:96:ab:7c:a1:31:
         9b:f3:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:39:01 2024 by rpki-client on console-fra.rpki-client.org