Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
File:                     5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json)
Hash identifier:          CL8ZYK13YOqWVtrtmxyuxhATIvKnK7rnRt4jT5r7wbY=
Subject key identifier:   04:3A:80:7D:2C:18:24:01:1C:FA:46:3B:50:95:85:D0:92:E6:FD:54
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Certificate issuer:       /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial:       01901E8F9BC7059F6DBA41135FABA1131F4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 01:00:46 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:46 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:46 +0000
Files and hashes:         1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: OVOKXwjCuUx2tw8FMC/RlBTi0pKMs7WNg6OJByHXvas=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:9b:c7:05:9f:6d:ba:41:13:5f:ab:a1:13:1f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
        Validity
            Not Before: Jun 16 01:00:46 2024 GMT
            Not After : Jun 17 01:00:46 2024 GMT
        Subject: CN=043a807d2c1824011cfa463b509585d092e6fd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:a9:d4:40:91:bb:87:dc:4c:0d:b4:85:6a:
                    30:b0:5c:14:27:c5:99:10:71:26:bd:34:12:56:fe:
                    ad:17:dd:f2:c8:85:1a:51:d6:18:89:75:a9:24:10:
                    35:2c:23:06:44:2c:9e:e8:0e:86:be:ce:34:14:5f:
                    a1:44:58:3c:b2:86:47:b1:55:96:62:f7:da:56:45:
                    45:22:4e:d2:41:e1:81:9b:4c:82:b3:99:61:59:6e:
                    61:74:0b:29:e5:80:82:63:20:f5:df:25:ca:4b:cb:
                    95:1d:68:ac:67:aa:a8:ad:22:37:04:71:df:16:6b:
                    de:63:c2:4b:4e:8a:fe:b3:96:a6:0f:3b:bb:e3:6a:
                    76:42:ac:d1:95:2b:cb:50:42:60:f9:b8:7c:41:e3:
                    43:86:59:1d:85:76:1b:96:52:4a:f3:24:a1:a1:2a:
                    16:98:e5:c2:53:2d:46:1c:0c:f5:86:ad:ce:15:1b:
                    c5:dc:1c:52:b7:b4:6b:f1:72:5f:8b:16:65:1b:33:
                    34:41:fa:08:b8:76:0a:38:a8:63:59:ef:65:bd:ab:
                    b6:e3:67:a1:c8:cf:aa:02:ac:d2:53:f6:af:6a:0b:
                    ad:df:54:34:97:35:82:2f:5d:93:21:df:62:be:ce:
                    d2:3b:35:07:bd:f1:f1:3f:22:8b:07:7d:bd:7c:de:
                    8e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3A:80:7D:2C:18:24:01:1C:FA:46:3B:50:95:85:D0:92:E6:FD:54
            X509v3 Authority Key Identifier:
                keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:57:3d:3f:7e:a5:5e:07:8b:36:71:1e:f9:fd:fd:7b:af:7c:
         5f:04:0b:79:06:3d:b7:2c:3d:17:fc:f2:5d:a2:e4:30:4d:95:
         72:8f:50:95:8a:2f:cf:50:9c:96:4e:89:98:8e:f1:42:01:6f:
         1e:2d:49:a4:f4:38:a7:8c:9e:23:12:be:5b:12:6f:90:fd:68:
         74:d8:75:81:9f:0f:0d:01:58:59:75:b2:d9:8f:ff:93:bb:4e:
         ba:f3:c0:37:c4:d0:db:01:69:b9:2e:0d:e3:08:34:60:74:95:
         81:6c:14:e1:c3:f1:9c:0d:d6:69:e2:ac:e2:79:5b:0e:69:d4:
         a4:7d:86:97:98:75:ca:86:29:23:b2:a4:7b:4f:74:16:78:86:
         db:7c:62:d3:6b:9f:3a:1b:ce:b7:80:a0:4d:7f:87:cb:6a:4e:
         dd:b6:78:1d:a9:54:9f:55:ec:e4:bc:84:5f:b4:49:53:a5:78:
         a4:08:12:fd:6f:a4:0a:75:fd:d2:5a:6d:35:6f:b1:b4:81:7c:
         25:fc:b9:76:76:f7:11:db:24:53:2e:78:d4:45:fa:18:6e:8a:
         f3:13:6c:33:35:07:6a:d6:8f:05:b4:e8:c3:89:56:8d:ef:9f:
         7b:85:ce:e4:b5:bd:c8:1e:31:4e:da:a3:c5:1a:51:34:83:d2:
         b9:e6:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:55:03 2024 by rpki-client on console-fra.rpki-client.org