Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
File:                     Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json)
Hash identifier:          1R/uUdesuVOtSKiwbN+33873OKwRR8EreWCIHvGl28Q=
Subject key identifier:   56:DC:97:BE:CF:A3:F9:DD:57:26:B1:59:D1:40:C5:4E:3B:22:17:17
Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
Certificate issuer:       /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Certificate serial:       01901DEBBDE4139D9CE7F79D56926DE6A779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:01:46 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:46 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:46 +0000
Files and hashes:         1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: fwCq/vbYcvEvRiSFU4au3Y4ccIC9zZld81jVKbq1Rkk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:bd:e4:13:9d:9c:e7:f7:9d:56:92:6d:e6:a7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
        Validity
            Not Before: Jun 15 22:01:46 2024 GMT
            Not After : Jun 16 22:01:46 2024 GMT
        Subject: CN=56dc97becfa3f9dd5726b159d140c54e3b221717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:19:03:1c:98:7e:2a:0d:0d:b0:87:b6:50:
                    6e:b6:dd:e0:70:fd:50:82:97:f2:16:a0:a3:49:3c:
                    cf:db:6f:59:2d:52:d7:c8:8e:36:b8:ae:ba:9a:6d:
                    19:0b:50:fa:94:e7:02:56:e6:fd:82:b8:55:7e:40:
                    09:bf:b1:f9:41:95:7e:25:c6:4c:19:ca:e3:b2:16:
                    c7:3b:ae:77:ca:a8:26:d9:b7:4d:fc:f1:66:08:87:
                    53:88:f3:56:03:90:82:8b:ba:2f:d9:86:d7:28:a4:
                    a3:74:1e:62:ca:a2:92:b4:2a:e3:8b:99:16:02:eb:
                    94:79:b8:41:3d:e8:ae:f2:d5:9f:d4:b0:63:6c:10:
                    45:51:81:da:5d:4d:dc:29:f5:04:72:c3:14:6d:11:
                    c6:4d:57:68:34:ca:79:63:a7:99:0e:d0:73:c3:e7:
                    5c:8b:ba:4a:d9:fa:64:22:79:77:9a:25:8b:6e:83:
                    e7:0e:6d:90:a2:67:cb:00:5e:a8:47:ff:aa:91:64:
                    06:d9:86:48:20:cd:54:b8:cb:3e:14:f9:e5:21:b7:
                    f7:bd:05:da:57:e4:2f:fc:4a:e6:bf:42:c5:db:82:
                    9c:49:fa:06:8c:81:c4:fc:48:fc:d5:93:8d:1a:d2:
                    c0:68:30:ea:46:cb:28:72:de:94:3f:91:31:ba:bf:
                    a5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DC:97:BE:CF:A3:F9:DD:57:26:B1:59:D1:40:C5:4E:3B:22:17:17
            X509v3 Authority Key Identifier:
                keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:94:ac:79:aa:ae:05:14:8a:61:c3:74:3b:28:6d:ae:17:84:
         c3:f9:7d:58:19:86:16:c2:a0:5f:45:32:11:18:8f:f0:ef:fb:
         87:b0:d5:8a:8f:da:64:2f:0b:e0:cf:4e:cc:23:87:ef:93:f9:
         ac:10:37:0a:56:11:61:87:e8:65:e0:c9:d3:2e:69:83:a1:11:
         ef:bb:17:07:fb:b3:2d:5a:88:58:eb:1e:ce:4e:9e:5c:5f:b6:
         ec:3d:08:1c:a6:59:9f:fa:5c:82:c4:71:4e:b0:12:0b:78:f1:
         fd:9f:27:f9:29:34:8a:b2:8a:ad:b6:de:1f:20:04:b8:da:5a:
         64:f8:3b:85:51:23:9b:30:3e:70:a5:e9:e8:7c:9b:3f:99:f1:
         df:a8:0c:3b:4a:1c:7d:fb:48:e4:35:be:32:0a:66:da:a3:d6:
         08:19:11:97:69:bc:c2:d4:1b:00:12:03:3c:26:19:b6:74:2f:
         36:5a:ac:78:1f:ae:6a:60:c8:1d:47:e2:9a:47:f9:87:b8:4f:
         dd:17:16:05:04:75:3e:78:63:1d:ed:19:c2:ef:92:bd:57:de:
         13:8e:49:36:95:73:73:13:a9:50:4d:fa:4e:a5:8a:38:95:85:
         85:6e:d5:bb:c4:e6:d5:62:0a:99:d5:b5:58:fb:c4:43:6b:e9:
         70:98:f5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:33:30 2024 by rpki-client on console-ams.rpki-client.org