Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
File:                     HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft (raw, json)
Hash identifier:          aaYZ8LoJ73uPiCjM8/1ojG7dpBIOffGl6DEzjiapxi4=
Subject key identifier:   B5:A0:EE:3C:2F:3E:17:52:D2:9B:61:C0:CD:02:81:96:CD:50:D7:AA
Authority key identifier: 1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54
Certificate issuer:       /CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
Certificate serial:       01901D465488E4772891581A11053749B9CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 19:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:06 +0000
Files and hashes:         1: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl (hash: uf144cxt0kQFMaH07woUqAApY2I/ChsJJSPqTWuPlZw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:54:88:e4:77:28:91:58:1a:11:05:37:49:b9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
        Validity
            Not Before: Jun 15 19:01:06 2024 GMT
            Not After : Jun 16 19:01:06 2024 GMT
        Subject: CN=b5a0ee3c2f3e1752d29b61c0cd028196cd50d7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c3:e2:b1:fe:47:de:09:d8:80:e9:4e:ac:53:
                    1e:67:a9:83:d1:bd:fb:92:3e:50:9b:7e:3e:56:00:
                    9c:28:a7:09:49:36:f3:74:92:43:0d:9b:8b:d4:7e:
                    69:39:e7:5c:a2:e2:35:34:f1:3f:28:ec:77:8c:f8:
                    94:ff:12:8e:fd:62:e1:b5:c6:4c:90:70:f0:4d:d8:
                    df:7e:12:a0:a2:c3:d1:d8:9c:c5:e4:5e:56:e1:4d:
                    ed:70:a5:88:48:71:cb:17:f5:3d:d1:d6:3c:1a:f0:
                    4b:95:61:6e:41:2f:8d:2b:f9:53:8c:c4:36:b7:56:
                    1d:2e:d4:e9:5d:07:64:59:b1:0b:e7:93:9b:1b:84:
                    fd:18:1a:da:51:dc:b5:13:b9:0a:33:98:ba:39:b1:
                    08:85:50:cc:46:db:a2:39:9e:71:b4:11:56:e4:84:
                    51:7d:e7:0f:76:16:40:30:6a:44:9b:92:7f:94:c3:
                    a4:eb:dd:d8:67:13:4d:05:f1:af:26:29:42:72:22:
                    46:72:52:7b:5a:c9:ce:09:1d:73:35:35:a1:79:76:
                    48:2d:9d:20:1a:f8:65:04:06:34:c6:1d:1f:66:dc:
                    87:9e:dc:28:22:e2:41:3f:6f:f1:db:3d:3a:80:5e:
                    18:46:58:e4:22:ca:9b:73:5a:56:9d:34:ac:8a:8c:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A0:EE:3C:2F:3E:17:52:D2:9B:61:C0:CD:02:81:96:CD:50:D7:AA
            X509v3 Authority Key Identifier:
                keyid:1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:25:58:d3:88:1c:e5:40:f3:8f:ad:67:c2:e2:79:1c:f8:
         76:16:66:75:ef:68:02:1a:2b:be:ba:8c:d4:10:cc:39:13:8b:
         8a:a7:b4:5c:92:fd:1f:54:d5:55:dc:33:b6:b8:56:db:4b:3f:
         68:1d:05:f1:0c:f7:8c:67:56:9a:03:3b:75:46:6a:64:58:c7:
         57:23:bf:ad:cd:24:3c:e2:0c:9b:be:bf:6f:a8:08:e2:1b:9a:
         e3:3b:38:7e:88:5c:d8:b7:2d:a4:e1:6b:a3:8e:63:e6:14:28:
         ea:2b:69:b9:d7:d7:c4:ad:3c:e7:d3:3a:18:28:9a:c3:09:72:
         cc:a5:16:b4:a5:d3:a8:ee:6d:6d:4d:b6:88:68:47:0d:84:2c:
         b7:d9:de:b3:5f:f7:ea:ce:51:4b:cd:b7:4c:9c:c1:37:14:b5:
         d7:cd:cf:4d:d7:5a:4d:40:25:92:08:76:26:ef:e5:0a:82:94:
         c4:7b:b5:3b:60:51:d0:bd:e3:be:45:4e:44:05:3f:20:23:77:
         01:97:b3:cf:24:21:79:a7:39:63:40:6c:84:6d:63:68:0f:fc:
         2c:a0:9b:ba:27:f0:54:5c:91:75:bd:ec:8c:81:67:5f:1d:57:
         02:96:c0:e8:79:17:50:7b:24:d6:c1:6e:48:be:68:10:63:91:
         00:ed:d6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:45:00 2024 by rpki-client on console-fra.rpki-client.org