Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File:                     ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier:          EDDs1gpvwmqW+3xNmriLnTVfskh+FBATbVBRE68ldJc=
Subject key identifier:   0D:D2:43:13:39:A0:53:BF:6E:F3:18:A5:7D:16:48:1D:C3:C2:F0:B5
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer:       /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial:       01901BFE8402079E36DE309FBE1D681BA424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 13:03:03 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:03 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:03 +0000
Files and hashes:         1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: ou2H160vBaBVPPYAcL3OoBn6c/dcRnZdJHhRncKK1EM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:84:02:07:9e:36:de:30:9f:be:1d:68:1b:a4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
        Validity
            Not Before: Jun 15 13:03:03 2024 GMT
            Not After : Jun 16 13:03:03 2024 GMT
        Subject: CN=0dd2431339a053bf6ef318a57d16481dc3c2f0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1c:74:0c:3c:b6:ae:9b:60:1c:db:30:cf:f0:
                    e2:a3:11:73:a1:86:64:76:4c:15:bc:18:e8:9e:a0:
                    72:e9:b2:91:51:77:e5:7e:eb:b3:81:49:b9:36:15:
                    1f:49:f9:a0:dc:6c:de:f1:dc:bb:b3:99:7f:86:3a:
                    74:cf:d1:e5:05:b7:f4:fc:15:3d:7d:9d:50:d5:39:
                    ed:28:2f:d5:8b:38:56:3e:ca:db:8b:2e:d6:62:28:
                    47:4c:de:59:0f:34:1a:fb:dc:a5:87:5c:ea:ed:54:
                    aa:9b:64:3c:56:39:1d:93:13:7c:cf:fe:3c:3d:82:
                    e1:ad:4e:f8:74:3f:23:eb:96:49:cb:93:ea:0e:7c:
                    e8:96:9e:52:9b:5c:b7:be:3c:d8:05:9b:20:03:77:
                    99:50:2c:ef:73:3a:36:23:53:74:2d:ac:51:25:e6:
                    c4:ae:fe:34:43:01:fa:64:75:81:be:10:38:c0:c7:
                    b9:23:ca:15:49:b3:ef:2f:85:45:1a:69:99:18:a6:
                    a0:25:39:00:a5:3f:8e:1b:64:8f:0a:ec:3d:44:a9:
                    5c:88:4c:87:cb:ad:0b:b8:06:ee:9a:f5:7e:2b:12:
                    51:2f:aa:06:21:3d:80:cd:8f:47:55:d8:00:eb:f9:
                    1b:58:27:7d:90:95:d7:49:7c:db:29:a0:28:60:48:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D2:43:13:39:A0:53:BF:6E:F3:18:A5:7D:16:48:1D:C3:C2:F0:B5
            X509v3 Authority Key Identifier:
                keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:62:b0:26:cd:93:3e:1a:40:ba:e2:d6:f8:b2:99:ff:76:18:
         f0:63:ce:cf:d9:7e:1b:b9:4d:ae:bb:6d:af:23:80:cb:c4:cd:
         f0:9f:43:fa:a6:49:0e:75:7b:58:a8:ef:65:33:53:af:37:e4:
         9c:e2:d3:b2:81:07:e5:41:90:1e:ab:36:fd:b9:61:e0:2d:7b:
         f2:69:6a:7d:ee:2e:10:8b:67:b3:7e:2a:7f:55:bf:8b:ee:b2:
         79:f3:cb:18:c2:80:d2:7f:41:f1:5b:88:cb:bd:a4:e8:2c:16:
         be:0c:69:9b:ec:d6:e4:63:40:35:6f:57:a2:ba:be:33:e5:40:
         d5:19:21:00:38:e3:44:d6:b5:ee:d2:af:ee:73:0d:62:b8:64:
         c0:95:35:a6:80:b6:43:e6:ea:fe:27:77:a6:db:26:f0:f9:be:
         84:1a:c4:f3:9b:72:10:6d:83:b8:b8:80:69:d6:14:c2:4b:e6:
         0b:26:13:4f:84:2f:24:f7:e9:2c:51:47:06:18:96:eb:ab:54:
         95:f0:34:d1:f9:42:b1:cd:0c:69:e9:9b:6e:fc:1c:cd:ad:a5:
         24:9f:c6:94:b5:d7:5b:73:15:0a:45:b4:84:ea:d1:dd:27:50:
         59:a1:9c:27:e5:49:6b:bc:25:cb:c1:46:3d:fd:62:b4:6e:c0:
         a1:91:57:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:45:01 2024 by rpki-client on console-fra.rpki-client.org