Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File:                     iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier:          kc9moZ2FAx7zdRAo6J+N3uD/OSYRdNLmhpK/5ZKvfQ0=
Subject key identifier:   7F:60:2E:55:39:53:06:C4:D4:21:75:BF:93:69:B3:43:B3:6E:13:98
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer:       /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial:       01901DEC33C34B7B2E41DFEA3217DE4A4793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:17 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:17 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:17 +0000
Files and hashes:         1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: 9Mg0gv8jXrLuGIMrnOn9e+UVQyvFjvj3wSDcF9IidIw=)
                          2: xWz79t6A7nNBlz18f_XTjGjlem4.roa (hash: 09ITprOCkmAUezK4IAMhLZ/Y0pwiFpYAM61TTE3IhJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:33:c3:4b:7b:2e:41:df:ea:32:17:de:4a:47:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
        Validity
            Not Before: Jun 15 22:02:17 2024 GMT
            Not After : Jun 16 22:02:17 2024 GMT
        Subject: CN=7f602e55395306c4d42175bf9369b343b36e1398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:32:d3:10:14:f5:4e:86:c2:55:bd:b2:3a:
                    74:39:30:02:d9:cc:6b:f1:dc:5b:f8:4a:de:83:5d:
                    70:0c:b2:63:13:32:36:0b:57:27:05:5a:3e:bb:45:
                    aa:76:ec:b1:f5:da:b9:d9:65:43:23:ac:c4:49:a8:
                    75:2d:69:1e:14:ed:11:70:14:db:ea:d3:72:55:76:
                    6f:51:be:3c:db:3b:82:4e:91:38:37:cf:25:8b:58:
                    41:ac:04:76:5b:7e:c8:d0:d2:c9:93:a0:f0:07:8b:
                    25:c4:60:fd:ff:dc:9a:31:8c:f3:73:a2:5b:28:e0:
                    24:e9:43:3d:eb:6f:e3:dc:a2:6d:54:86:ce:09:4c:
                    9d:9c:59:dd:5e:d5:3e:b6:93:cd:b0:e1:3f:46:22:
                    4b:6b:4a:c2:65:af:72:05:97:13:57:83:08:11:72:
                    8f:98:17:f6:ea:bd:6a:05:95:f5:c9:b2:e0:7a:f7:
                    d4:aa:3a:96:aa:71:1b:62:4f:f7:d7:73:b6:ba:d8:
                    94:59:a6:64:74:d2:61:39:8b:82:cb:f4:27:c3:bb:
                    36:0c:72:49:db:96:67:02:93:e9:e1:1a:fc:72:83:
                    68:6c:ae:76:5f:8b:34:2c:21:25:96:24:d7:ed:3a:
                    5d:11:70:1f:50:04:98:6e:2d:59:b5:35:fd:38:45:
                    f7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:60:2E:55:39:53:06:C4:D4:21:75:BF:93:69:B3:43:B3:6E:13:98
            X509v3 Authority Key Identifier:
                keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3a:9e:5d:ab:48:49:aa:f8:be:49:1c:d8:39:11:ad:ed:e7:
         3c:68:f9:0d:d1:d6:4b:c2:ec:74:f6:f8:59:aa:b7:18:19:bd:
         35:6c:6f:9b:5a:67:2b:37:ca:f5:db:b2:83:ad:f0:5d:08:85:
         a0:c1:14:1d:30:06:15:8e:72:92:b1:b4:37:4c:96:65:aa:4d:
         cc:8e:de:88:14:1a:c7:43:33:d0:1c:18:de:0b:ab:09:9d:7b:
         52:ec:d6:24:09:88:39:a3:d1:58:97:54:dd:c2:2b:85:fc:b1:
         be:03:79:6b:5a:ad:5c:cc:0e:26:11:da:03:e6:d9:f8:65:f4:
         06:c2:81:8f:cf:10:0a:02:bd:a3:be:93:3a:6a:0b:47:90:b3:
         62:62:8e:f4:87:32:26:6e:8b:51:e6:1c:fa:b1:46:c9:63:55:
         62:b2:0e:50:d1:9e:fd:d9:76:89:f2:fc:b3:28:02:6a:2f:63:
         68:e8:d3:b0:11:d7:6c:35:e1:12:8d:ed:3b:c1:67:cb:73:07:
         fb:22:22:d3:82:45:2a:30:f2:3a:6d:21:c1:11:f5:90:c6:f4:
         71:7a:f9:de:db:65:f2:8e:e3:70:8a:ec:11:d6:ea:a1:0b:ac:
         c5:dc:f7:85:5e:f7:d7:6d:d4:1e:c1:b7:59:59:44:8f:c4:af:
         11:50:f1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:33:13 2024 by rpki-client on console-ams.rpki-client.org