Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
File:                     2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft (raw, json)
Hash identifier:          aZW3teLkYuEdpnuafHxV/4HKBW1awaJGUOB+1v+xmT8=
Subject key identifier:   05:A8:6F:E7:8D:D1:0B:B0:43:76:9C:AF:26:96:0D:A6:AA:72:3E:61
Authority key identifier: D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
Certificate issuer:       /CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Certificate serial:       01901DED04F253FC97443D873154A0DC0023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
Manifest number:          08A7
Signing time:             Sat 15 Jun 2024 22:03:10 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:10 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:10 +0000
Files and hashes:         1: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl (hash: vsXE6TF7duaNTwLe92r5K0eVNVEgvwt27OPbXKMGjuk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:04:f2:53:fc:97:44:3d:87:31:54:a0:dc:00:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
        Validity
            Not Before: Jun 15 22:03:10 2024 GMT
            Not After : Jun 16 22:03:10 2024 GMT
        Subject: CN=05a86fe78dd10bb043769caf26960da6aa723e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:79:3d:ee:7f:05:83:a7:4a:ae:f5:7a:3c:
                    0c:25:b6:8e:11:4b:ec:e7:17:79:7f:f2:9e:ca:ca:
                    5f:ee:21:c9:0e:7c:0c:61:c5:a5:20:2d:4f:ae:1d:
                    09:8c:c2:f3:bd:60:f9:7c:52:29:6f:04:17:d6:63:
                    db:d1:41:bc:a8:41:ca:2d:28:4f:33:09:78:59:8f:
                    59:5e:68:fa:94:f4:36:57:fe:54:35:d9:90:fa:dd:
                    2d:d6:fc:ae:e1:99:70:6a:7b:15:ef:1f:18:b9:be:
                    cd:91:d3:f6:1e:d4:bd:aa:69:ee:00:ad:2d:0d:1c:
                    30:7c:74:56:9d:fd:6d:68:e8:bf:5d:e4:4c:01:4e:
                    64:b1:76:2b:6c:5b:2e:9b:e9:42:1c:29:7b:f2:2e:
                    8d:6f:14:7a:4f:f4:1b:0f:f1:83:c3:12:84:bf:9c:
                    88:6b:19:56:46:91:70:07:78:56:c9:6c:a2:6f:9f:
                    73:2c:bc:73:e0:13:97:fd:86:ba:35:a4:0b:76:36:
                    d0:29:b9:c7:f8:80:21:63:c5:d6:2d:3a:40:bf:38:
                    d9:df:8c:43:3d:8c:c5:c6:18:f8:44:df:b4:d7:ab:
                    ba:d2:87:e2:d1:f3:71:10:cc:74:af:33:7b:65:be:
                    26:2a:d1:8f:22:a0:6a:f5:d1:8e:62:44:a0:6e:c5:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A8:6F:E7:8D:D1:0B:B0:43:76:9C:AF:26:96:0D:A6:AA:72:3E:61
            X509v3 Authority Key Identifier:
                keyid:D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2f:94:09:9a:b3:af:a5:a2:f8:f5:c5:42:2d:35:1a:2d:51:
         b9:55:3b:49:88:03:37:cd:b1:29:95:be:72:32:90:50:9b:6e:
         47:28:61:17:83:dc:0d:d3:37:69:86:11:92:15:1b:4d:ab:ab:
         8d:3f:5e:5f:ab:c5:e9:91:df:4a:04:5e:57:f5:75:0e:3c:d5:
         f9:a8:19:2a:18:15:40:77:e9:c7:cf:28:80:b8:3c:c2:69:eb:
         db:79:3f:1c:07:6f:fd:cd:1e:9f:dd:e4:02:e0:af:b7:94:72:
         d9:99:92:bc:40:1c:fa:ba:ef:92:50:5c:35:fc:3f:99:5c:c1:
         9d:53:b6:56:36:7c:4e:51:ab:e3:4c:d7:4c:8a:11:74:2c:ad:
         cb:ce:d0:ca:81:64:60:72:37:6b:9f:24:e1:ea:1f:c8:c2:fe:
         01:bb:77:d6:00:cc:0b:5b:27:69:e4:b8:92:33:61:d9:05:a6:
         28:52:a0:cb:2b:98:d9:e4:83:e5:e4:df:40:10:32:46:6f:c9:
         bf:13:90:87:55:1f:88:69:6f:b1:e7:4d:78:b2:dc:7c:b2:9b:
         6c:66:8c:02:6f:3f:dc:f7:d0:fd:10:d4:5a:12:b9:0d:49:a6:
         54:6b:f3:04:4a:b1:eb:fc:86:ba:8c:e5:28:3b:80:80:15:69:
         b1:0f:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:38 2024 by rpki-client on console-ams.rpki-client.org