Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
File:                     Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json)
Hash identifier:          pLkoXkSbaL9Emtm0va283NgAtNF46gSLkIrRCkH7pmA=
Subject key identifier:   32:5F:0B:7A:AC:2B:68:67:7F:2A:01:BD:96:D3:1F:94:73:EE:96:3B
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Certificate issuer:       /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial:       01901E58F8A492559A94A988F6383985D16A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
Manifest number:          1121
Signing time:             Sun 16 Jun 2024 00:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:05 +0000
Files and hashes:         1: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: S8+f6CItXxdhmV6o1DKu/CaR4uZy0gnoq9mIMsYEAm4=)
                          2: uZok7D_QdrsSU-e02B-oSZtFoto.roa (hash: ColYrkkd0iyFyEmNIa75L/F7iTI5MNe6LpM59hlSpL0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f8:a4:92:55:9a:94:a9:88:f6:38:39:85:d1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
        Validity
            Not Before: Jun 16 00:01:05 2024 GMT
            Not After : Jun 17 00:01:05 2024 GMT
        Subject: CN=325f0b7aac2b68677f2a01bd96d31f9473ee963b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:38:ed:8b:59:d3:6c:4d:6e:f8:7b:6a:e6:
                    7a:df:91:c6:01:40:76:f7:12:e8:49:97:41:59:3a:
                    26:e1:00:f0:6a:03:75:ea:27:19:e0:cc:5d:e2:28:
                    d7:cb:5d:f6:18:2e:14:79:97:bf:c4:3b:df:e5:e8:
                    b5:80:60:8c:7e:60:91:f7:a8:69:20:fe:51:d6:65:
                    36:d7:b4:4b:97:22:61:d9:f3:42:c5:24:f2:42:01:
                    bb:d7:f7:64:56:00:7c:2d:bb:32:36:d2:c5:8b:da:
                    7a:94:85:8f:98:d9:5e:66:47:c9:04:3e:4a:01:b6:
                    0b:7f:66:a4:50:38:b7:19:8c:0f:95:66:63:b7:28:
                    46:1a:0a:11:c7:ab:ed:09:4a:28:68:87:b5:da:0b:
                    3f:4e:8e:c6:29:fa:c7:5e:85:b1:71:3a:cb:5e:7c:
                    5a:0b:f0:77:58:45:e8:45:51:02:ca:24:21:49:68:
                    71:31:bf:b5:e0:62:6d:61:04:2b:c6:ef:d5:76:08:
                    86:bf:6e:b6:59:f7:3a:df:ca:70:37:10:17:ea:3c:
                    a6:79:e0:b8:36:3d:c4:ac:4a:e3:5e:9b:eb:89:27:
                    7b:c8:76:02:c8:b7:e4:e3:a8:16:fc:9b:c3:a9:b4:
                    85:68:07:29:46:a0:f6:70:01:74:e8:c4:86:e6:73:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5F:0B:7A:AC:2B:68:67:7F:2A:01:BD:96:D3:1F:94:73:EE:96:3B
            X509v3 Authority Key Identifier:
                keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:d1:8f:6a:b6:cc:24:c0:a4:97:5d:e7:c1:e7:a2:4a:09:
         7d:e5:64:52:29:d5:f1:6a:c5:75:c4:9a:cc:89:b7:08:fe:f3:
         e1:5e:d7:bb:f0:7b:86:7b:d1:03:92:99:e4:42:b9:38:09:75:
         03:c1:f9:a1:0f:bc:6a:d6:1d:ed:64:68:c9:bb:53:51:ea:e4:
         55:aa:73:6c:f4:6a:05:5f:17:1a:8a:e7:bf:6f:5f:8d:4c:45:
         72:f8:ac:77:6c:e8:9c:f3:a0:60:c8:2c:f7:74:12:97:bd:e6:
         79:c3:b4:84:13:05:e4:57:1c:7d:08:ea:a0:1a:02:9e:7d:27:
         f4:c9:9e:58:32:8a:b5:21:50:17:80:38:46:33:37:16:9c:89:
         b5:8f:c9:73:9e:14:54:ab:3d:31:61:69:57:7c:cb:a0:02:57:
         30:12:00:1a:b1:5e:f1:a1:bd:b3:6c:7d:49:c3:f9:59:b7:d4:
         cc:d0:fc:f7:3a:e9:53:ab:b9:be:88:20:b9:c5:44:0e:f2:a5:
         08:8f:41:57:5b:cd:6b:ad:c3:0b:49:fc:c4:47:22:b5:53:9b:
         79:46:a6:26:63:5b:cf:6f:64:63:9d:97:97:02:c9:a4:7a:52:
         b5:0f:d5:03:53:ba:fd:0d:06:4c:ec:a4:1e:bb:14:7a:2b:6a:
         f9:52:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:04 2024 by rpki-client on console-fra.rpki-client.org