Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File:                     9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier:          57PwtA2DWYs4QcTxIDziSyteRphgf7YSfsWuqpvKuec=
Subject key identifier:   E2:11:78:68:4B:CD:53:88:69:02:8A:52:82:CA:FF:06:33:DD:8C:C4
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer:       /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial:       01901E58B0EBB16E8217AEAAF03771A2AAA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number:          10DC
Signing time:             Sun 16 Jun 2024 00:00:47 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:47 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:47 +0000
Files and hashes:         1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: i3EYsc5jPGSIz84e+YO0XQA/lreDtSlrFP3IJILzr8o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:b0:eb:b1:6e:82:17:ae:aa:f0:37:71:a2:aa:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
        Validity
            Not Before: Jun 16 00:00:47 2024 GMT
            Not After : Jun 17 00:00:47 2024 GMT
        Subject: CN=e21178684bcd538869028a5282caff0633dd8cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:11:43:b5:ef:70:bf:18:53:f4:17:2a:c8:15:
                    30:51:f2:ab:e1:7c:a7:6f:a6:c4:2d:d5:c0:90:9a:
                    fc:af:7a:6c:55:82:bd:b8:b9:4d:a8:e7:05:e9:23:
                    1b:83:20:af:f9:2c:d2:d8:54:d3:fb:23:fb:33:ed:
                    18:44:fb:d3:e0:48:e9:35:06:90:7e:c1:7b:31:7c:
                    5f:c3:f3:5c:49:7e:c7:a4:d2:23:7e:4e:68:5a:a7:
                    0c:c2:36:6d:74:22:50:bf:92:08:20:99:e3:72:dc:
                    04:47:bd:e1:0e:d6:2b:5e:36:8c:c2:db:2f:9e:43:
                    5f:e8:c8:a2:2b:b3:6b:75:43:55:aa:5a:c2:b2:77:
                    fe:4e:dd:28:a4:c2:43:4c:37:8b:5e:69:bb:39:82:
                    b6:e6:b4:93:66:33:f4:ad:64:15:bc:24:94:47:97:
                    00:83:86:91:b9:53:05:d9:9f:b9:4f:19:80:b5:04:
                    5f:f4:b5:5d:cd:2d:d1:af:49:34:b8:e2:ed:ad:29:
                    cb:2e:d4:f4:26:30:a4:e5:98:21:0e:a9:52:88:af:
                    ac:2c:de:91:f3:f5:2d:11:6a:7f:08:09:dc:75:29:
                    e2:0d:c8:e3:dc:51:aa:a3:bf:21:71:07:0f:7d:ce:
                    3a:bf:e7:c0:ea:af:b5:4e:cf:11:8a:b7:fb:ed:96:
                    f8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:11:78:68:4B:CD:53:88:69:02:8A:52:82:CA:FF:06:33:DD:8C:C4
            X509v3 Authority Key Identifier:
                keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4a:02:94:b0:48:dd:10:7e:fa:6b:32:20:06:1e:72:12:b3:
         9b:d1:f6:ba:9a:47:ea:fb:05:e0:48:36:9d:fd:bd:d5:b9:fc:
         af:eb:ec:c0:6d:44:15:59:f9:3b:dd:66:29:30:8e:41:a0:aa:
         e9:da:b4:f7:92:fd:aa:e6:b1:7a:cf:3b:10:b1:94:d4:e8:64:
         63:31:0d:2e:9f:c1:b6:5f:9e:77:5f:a9:f4:39:f7:b7:e5:08:
         0e:53:4a:29:b2:a6:82:4e:b6:f6:12:e5:73:6e:a7:2c:f8:97:
         df:19:db:0f:10:e4:b2:43:6f:cd:f0:41:98:28:3e:a8:fc:83:
         a1:91:73:c3:b6:ce:b9:19:ff:5d:5a:50:b3:78:26:1d:8b:23:
         fb:d5:3a:f5:48:e3:b4:06:5d:47:08:36:eb:38:4e:f9:a3:53:
         2b:45:73:b2:0c:bc:a8:f8:75:be:dc:ba:00:f5:7a:15:03:94:
         9c:8c:3e:ce:ea:74:f3:2f:e4:d6:1a:f8:ee:f9:44:7d:e6:17:
         c8:90:22:4d:b8:3e:e7:32:bc:9c:48:b9:a8:1e:ac:27:8e:52:
         29:89:6d:0b:0a:a0:cf:bc:ca:7e:6a:87:f1:09:d4:12:c9:3a:
         b2:78:5a:70:51:ad:e4:32:39:fb:05:e9:cb:19:e0:10:25:49:
         b4:79:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:54 2024 by rpki-client on console-ams.rpki-client.org