Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
File:                     V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json)
Hash identifier:          20Ta91ymKGod7oIkZVur5zZdbU6lH9Vb617pLRIKMws=
Subject key identifier:   7C:EC:F7:E5:75:70:3D:47:1A:BC:E3:15:F2:02:20:A1:7D:F0:B3:8F
Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
Certificate issuer:       /CN=57d011b577f90aa7e8e0cc5229e1f29983824593
Certificate serial:       01901E58E141089D7F9C3D692274A3FB3982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 00:00:59 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:59 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:59 +0000
Files and hashes:         1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: tlgEwN+sFmtC3+OJmN72s8FnZ63JcG9ShGcBveo9FYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:e1:41:08:9d:7f:9c:3d:69:22:74:a3:fb:39:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593
        Validity
            Not Before: Jun 16 00:00:59 2024 GMT
            Not After : Jun 17 00:00:59 2024 GMT
        Subject: CN=7cecf7e575703d471abce315f20220a17df0b38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:42:01:4f:cf:67:f6:c1:4a:e5:c5:bf:2c:
                    22:64:d1:73:1c:c8:a4:9f:7f:9e:6f:66:b0:ca:b5:
                    fd:e1:f3:2a:39:46:ad:c8:6b:c6:a6:62:03:91:7c:
                    43:1f:32:42:95:0e:32:84:08:b6:bf:ed:e1:40:71:
                    8f:14:d8:37:44:e8:97:93:14:ec:cd:2e:7c:72:53:
                    6f:fc:c1:d4:bc:3c:40:8b:e7:5a:64:6a:a7:21:ef:
                    73:f4:a6:f3:31:67:ee:a7:44:9e:ee:9d:23:20:cd:
                    91:70:8a:11:20:3f:b6:84:a3:98:fb:3d:eb:a5:35:
                    fd:9d:74:de:8a:f7:8b:88:9b:58:c2:55:f5:36:b9:
                    ca:20:85:09:cc:93:5f:46:0b:c8:ca:2e:a4:f0:c8:
                    02:b1:e3:35:bd:23:e5:06:d7:6d:90:47:86:65:3c:
                    65:4d:a2:c8:d7:0b:48:42:37:cb:19:d7:84:28:84:
                    89:67:7a:24:58:8a:60:80:be:fd:d6:a5:9c:15:ff:
                    f2:dd:3f:44:44:e5:b2:79:4b:a1:59:cd:ae:2c:3a:
                    8d:74:89:b9:9e:38:1c:0c:83:19:0d:8a:f5:4e:a3:
                    ec:a8:3f:3c:c9:5f:d8:b2:c4:ac:dd:1c:6c:92:a3:
                    87:01:e5:93:0b:13:07:5a:9d:49:f9:a2:bb:f3:ab:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EC:F7:E5:75:70:3D:47:1A:BC:E3:15:F2:02:20:A1:7D:F0:B3:8F
            X509v3 Authority Key Identifier:
                keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:01:8f:4d:c3:c6:99:f7:5f:d3:5d:6d:ef:11:f3:8c:eb:22:
         90:74:e5:a2:06:1b:57:72:71:6b:15:b3:67:21:f2:45:97:40:
         59:b0:90:3a:74:72:b3:b0:08:91:61:27:62:1e:f5:9c:67:ac:
         d9:95:f0:ac:c5:f5:f3:a2:a1:83:0d:0e:9e:9d:51:ea:c1:9d:
         41:a0:32:ca:f1:a9:e7:03:90:fc:8f:71:7f:c7:f8:5e:bc:e5:
         30:2b:69:92:a8:68:9e:24:bf:0a:29:20:25:63:df:b5:d5:eb:
         97:48:ce:ac:df:27:19:5d:a1:9f:6c:6a:1a:7e:26:66:3d:e6:
         b6:60:d7:ff:02:6b:11:21:33:6e:eb:0a:a5:9e:db:70:03:97:
         2d:63:c3:4a:62:e4:de:ea:80:da:e5:ad:19:07:b6:70:d8:2f:
         0d:ee:89:a8:ba:f5:80:7f:97:70:2a:af:5d:94:9f:a3:bc:27:
         ec:04:f3:66:df:aa:48:c5:11:a6:cc:75:bf:3d:93:9e:fd:16:
         41:17:b8:0b:b3:20:4a:29:8d:62:20:25:af:8e:c2:03:44:8c:
         52:ca:c8:10:92:bf:98:85:e3:94:57:9e:c2:0e:19:06:ad:58:
         bb:0f:45:bc:d4:8d:d7:08:15:dc:b1:32:99:e8:58:88:6e:bb:
         0a:f0:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:06 2024 by rpki-client on console-fra.rpki-client.org