Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File:                     VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier:          urr/fNCl/oC8nusO+LgaFDBCFBr9AV1RW0pZizKoEAg=
Subject key identifier:   6D:1E:27:FE:3A:B5:9B:0A:B7:96:EE:B7:94:A0:DD:36:52:2F:40:81
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer:       /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial:       01901DED3B0EFA2333196C44B6E4BF557945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:03:24 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:24 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:24 +0000
Files and hashes:         1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: U0kmfwEhr26aMDuGyMvs0NWtLPWlp32a5rKDzcBQZvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:3b:0e:fa:23:33:19:6c:44:b6:e4:bf:55:79:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
        Validity
            Not Before: Jun 15 22:03:24 2024 GMT
            Not After : Jun 16 22:03:24 2024 GMT
        Subject: CN=6d1e27fe3ab59b0ab796eeb794a0dd36522f4081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e5:e2:25:c1:a7:37:e1:55:ce:98:d9:2c:1a:
                    f7:ab:3e:c3:16:01:19:db:c0:93:8b:08:23:51:dd:
                    16:33:c4:de:3f:7a:32:12:12:bc:e8:32:d6:12:de:
                    52:85:b7:f9:38:90:11:4c:49:ac:d3:7b:4b:b0:2b:
                    52:4b:40:a5:6d:73:d5:a3:58:55:bb:19:8f:40:50:
                    39:e8:bc:4d:fb:c8:e5:d6:fe:b4:48:a1:1d:e9:3a:
                    c8:22:c4:9c:18:dd:e8:e0:8d:a8:bb:75:c3:0e:ad:
                    80:0d:0a:a2:00:a2:80:ae:2f:85:2f:cb:2e:32:fb:
                    03:bf:28:78:ac:7e:07:90:b4:98:48:e4:47:a0:88:
                    82:de:a0:8c:27:38:86:f6:f7:33:dd:a1:f8:3c:70:
                    70:38:71:fe:71:0a:79:9c:07:f6:9a:df:31:93:74:
                    e3:d0:00:48:24:f1:c0:57:3c:4d:a0:cc:b4:cb:ae:
                    e5:48:24:80:2e:fb:8b:34:5f:7f:c3:b0:42:c3:81:
                    34:a5:ec:81:cf:6d:3f:f6:c0:6b:49:f5:69:3c:27:
                    95:dc:c1:61:e4:3f:22:0a:27:b4:50:af:f3:66:f5:
                    dd:84:12:4f:3d:68:54:8e:d8:5f:55:49:64:a3:40:
                    b3:09:bf:ab:40:27:78:97:a0:72:68:bc:43:40:2c:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1E:27:FE:3A:B5:9B:0A:B7:96:EE:B7:94:A0:DD:36:52:2F:40:81
            X509v3 Authority Key Identifier:
                keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e7:0a:a2:ce:a7:04:99:dc:73:94:08:37:bb:16:57:b7:8c:
         bb:82:dc:3d:ae:90:8e:30:d4:87:30:ac:32:e9:df:c7:5c:75:
         44:d2:76:5a:1c:d1:43:aa:98:0b:13:01:b5:46:31:45:9b:5a:
         8e:bc:a0:f0:8d:90:35:3a:bd:4d:cb:e9:e3:88:d5:aa:fa:a8:
         60:0e:c2:77:8c:11:d8:79:4b:86:bf:c5:f5:eb:8a:3f:63:5f:
         99:e3:5a:75:b6:4b:f0:34:5d:65:af:88:f3:55:f3:c2:3c:bb:
         a0:05:b4:21:2f:81:f6:c5:78:13:af:43:95:b5:d8:e7:39:8a:
         32:51:a1:ef:f2:82:56:64:05:9b:d2:49:a7:91:4e:ef:40:1f:
         45:f2:11:e0:84:a8:74:ef:d7:6a:8f:6c:32:85:2a:1b:8e:76:
         fb:57:0b:f9:f1:22:0d:af:19:e8:2b:2e:bd:44:2f:1e:87:08:
         f1:7d:e1:83:d7:55:cd:25:4b:0d:01:5f:5a:e1:27:ae:cd:47:
         4c:6d:9b:25:e3:db:e5:b8:bd:43:4a:34:8f:3a:a7:cf:14:5e:
         67:ff:dd:e0:d7:54:8d:03:47:e3:63:a7:7b:47:ed:0e:2b:70:
         e2:9f:d4:6c:63:9f:6f:3b:e8:db:40:95:e8:1e:9a:b7:04:99:
         2f:ed:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:48:15 2024 by rpki-client on console-ams.rpki-client.org