Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File:                     K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier:          4+yL0CwuY8DW60nRQ/HGvNv6Alnj194J0lBRmPH25Z0=
Subject key identifier:   B6:D4:4D:26:12:2E:A1:46:53:63:51:5E:0B:96:C7:4C:D3:EC:E7:31
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer:       /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial:       01901E591B5DCE425285F6E301D25A756178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number:          01FE
Signing time:             Sun 16 Jun 2024 00:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:14 +0000
Files and hashes:         1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: s40jGrsglNAY38JO2teNYztpOl85qacDFhahcuu50j0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:1b:5d:ce:42:52:85:f6:e3:01:d2:5a:75:61:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
        Validity
            Not Before: Jun 16 00:01:14 2024 GMT
            Not After : Jun 17 00:01:14 2024 GMT
        Subject: CN=b6d44d26122ea1465363515e0b96c74cd3ece731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:73:97:56:a6:84:c7:12:b2:e3:08:6b:c8:
                    a9:a4:78:69:70:d1:42:29:06:b5:12:4d:f6:e1:67:
                    0a:5b:eb:51:df:b7:85:c9:3a:8b:60:0a:e3:66:03:
                    e5:a5:7c:e9:1a:05:bd:d1:41:40:2b:73:39:43:30:
                    d5:ae:c7:cf:ca:7c:79:5c:e4:04:08:eb:0e:3e:ef:
                    85:27:4f:29:1b:c1:c5:66:7d:90:9d:b6:01:c3:1b:
                    62:83:6c:92:6a:c3:48:8c:f3:0f:0b:a6:b2:c9:ce:
                    84:d0:6f:b9:70:32:42:cd:5d:0b:81:f5:be:e4:14:
                    6c:84:1d:f7:69:f5:0d:2d:b5:09:fa:44:70:9a:66:
                    4b:38:f0:e9:32:79:48:00:9a:70:c6:e7:3b:b0:bc:
                    ec:e1:aa:93:62:ba:99:35:4c:5a:1e:5d:e5:41:1b:
                    20:fa:14:ff:d8:18:f7:b3:cf:a7:3d:c6:f4:97:f9:
                    7b:40:24:cb:2d:6d:78:82:72:16:11:9a:cb:47:32:
                    c4:f0:a6:57:59:b1:b0:e1:b0:93:1a:e5:ba:b5:64:
                    22:09:09:c4:77:e4:2c:49:87:f5:8c:d3:db:cc:55:
                    0c:17:d8:22:a0:7c:8d:57:7f:e8:ab:ca:5f:34:29:
                    c0:1f:2c:c2:e1:26:b9:09:e9:cf:7b:bd:a8:39:c0:
                    33:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D4:4D:26:12:2E:A1:46:53:63:51:5E:0B:96:C7:4C:D3:EC:E7:31
            X509v3 Authority Key Identifier:
                keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:96:85:f1:16:b2:9d:60:20:21:98:dd:59:b2:90:5f:a8:95:
         1c:04:bb:0f:3a:88:bf:e8:71:df:d2:e8:96:18:fc:a8:23:f5:
         b8:d9:4c:b4:1b:01:6b:90:5d:b9:0d:a0:89:ac:57:39:81:10:
         7f:a8:d5:f0:25:7e:14:fe:87:ce:e7:59:06:3c:25:f1:bc:f0:
         be:e2:8f:53:5a:50:3b:a8:d8:3a:06:18:ab:8f:df:99:aa:d4:
         11:55:a3:c9:35:91:ee:01:7e:cc:94:bf:e6:78:34:29:85:03:
         da:0a:f0:7e:14:05:c3:ab:68:21:69:76:28:87:3b:a2:82:69:
         54:f8:98:e9:21:f4:7b:0b:ee:d7:b1:b6:95:a7:60:5d:21:50:
         01:fa:c6:e0:89:dd:41:ca:d9:2c:59:20:0b:a5:4c:55:d0:c2:
         1d:67:de:3d:5a:3c:1b:4e:4d:1d:d4:f4:f1:67:81:21:a8:58:
         c2:a2:fe:f4:8f:31:fc:24:fa:04:82:d0:c4:9c:ba:e8:d5:0e:
         2a:67:fb:4c:b2:17:3a:50:7f:90:d0:e7:14:96:89:93:5e:b9:
         5a:d1:dd:0a:0c:bb:3e:5f:3f:c8:1e:c5:40:f8:65:49:3e:01:
         f8:81:dd:48:c1:97:cf:bb:38:65:cb:8a:75:83:9d:6f:78:25:
         c1:37:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:55:07 2024 by rpki-client on console-fra.rpki-client.org