Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File:                     1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier:          zHTfBHUiZ4s5ckj1ahbohcCQp/B8ofoO7gbyDzc2Q9I=
Subject key identifier:   0E:1A:0B:8B:69:2B:EF:B1:4C:E6:46:01:79:24:A8:9D:C6:18:ED:0E
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer:       /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial:       01901FDA7798191659B439E8B3AA5EBF1471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 07:02:09 +0000
Manifest this update:     Sun 16 Jun 2024 07:02:09 +0000
Manifest next update:     Mon 17 Jun 2024 07:02:09 +0000
Files and hashes:         1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: aTjh03MG0Eu7aUhhm8vkUX8kVAyE8xn7IsT+JI5h46Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:da:77:98:19:16:59:b4:39:e8:b3:aa:5e:bf:14:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
        Validity
            Not Before: Jun 16 07:02:09 2024 GMT
            Not After : Jun 17 07:02:09 2024 GMT
        Subject: CN=0e1a0b8b692befb14ce646017924a89dc618ed0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:bc:98:ce:e3:b7:15:26:03:37:ac:70:6b:
                    72:b6:29:a0:f2:2c:ed:9c:41:6b:33:e7:a2:4b:c9:
                    d7:8f:a3:e9:42:31:52:ea:4f:21:6b:fc:f5:5e:85:
                    f6:73:60:72:9b:4b:2e:f6:9c:4f:da:4f:e5:8d:97:
                    fa:f7:b8:11:ca:f5:4f:39:49:20:55:b5:64:25:b1:
                    d4:25:e0:e8:a1:4c:fe:4b:a5:0b:b9:1e:68:7d:79:
                    8d:66:80:de:c4:82:3f:b7:93:dd:c8:b4:78:27:14:
                    60:12:62:09:e6:7e:5e:70:8c:c4:61:5c:61:9a:ec:
                    63:c1:df:8b:2a:6e:2a:52:32:af:45:39:4a:b9:ad:
                    34:f2:c0:12:49:80:5e:ec:e6:4e:46:ba:27:6d:4b:
                    8f:38:92:cc:4b:74:8e:8f:b6:9f:f3:88:71:73:ee:
                    c7:38:d0:fe:a9:03:ea:dc:06:ce:bd:d6:24:b4:60:
                    da:e5:4b:2b:6f:86:cb:6e:fe:73:9f:75:2f:8b:53:
                    cc:a3:3a:f9:84:d1:b0:e0:ea:fe:6e:72:ea:2b:21:
                    f3:aa:2d:99:86:0d:c4:49:cb:03:48:e8:8b:67:32:
                    e9:c4:fc:9e:36:38:c7:f5:5d:52:14:64:38:59:85:
                    c0:c2:f8:91:86:34:8b:85:5d:39:31:d1:e2:eb:8f:
                    ca:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1A:0B:8B:69:2B:EF:B1:4C:E6:46:01:79:24:A8:9D:C6:18:ED:0E
            X509v3 Authority Key Identifier:
                keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:80:06:f8:d8:fe:44:84:0f:9e:bd:ad:4e:13:0a:9e:bf:
         af:22:56:0b:76:6b:35:bb:0e:14:5f:f8:a0:cc:f2:26:39:e1:
         15:c6:33:8a:e4:dc:19:e4:fb:39:46:2c:68:de:aa:2c:83:5c:
         20:b7:bf:d1:df:bb:f3:31:88:e7:52:07:1f:7f:08:80:10:34:
         9c:d1:1a:c7:0a:9b:4b:fa:cb:ef:2d:68:54:ec:37:17:a8:e5:
         d5:de:48:d0:b5:df:30:c7:af:9c:d4:2b:bf:98:3e:5c:8c:d2:
         92:fa:51:6c:0b:51:9f:37:07:3b:39:d4:6a:61:96:85:1c:87:
         66:88:55:bd:0a:e0:e5:94:64:ce:cb:c0:b9:2f:60:80:59:92:
         2b:fc:a7:fb:d4:c1:79:7e:b7:9b:ba:51:23:03:c0:8d:63:20:
         be:ce:4d:87:ca:1f:e5:b2:ce:d2:c7:d6:59:ce:af:5b:24:7e:
         dd:69:f5:9b:c1:5d:a6:76:6d:92:28:fa:9b:b2:f0:4f:33:2e:
         bb:0b:35:a9:a2:c5:fd:b2:24:76:fa:05:5e:e7:b6:b7:67:bb:
         01:af:46:93:a8:9b:98:46:4b:f7:5e:4f:cb:f3:68:81:19:45:
         f9:c1:21:a1:d5:85:fd:a4:78:89:49:eb:74:98:ee:9f:f2:c0:
         92:41:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:52:51 2024 by rpki-client on console-ams.rpki-client.org