Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File:                     JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier:          HNBHPyyPQRCHfiD1cq6fhm1HTIU0ylQl4NugPy0H+iM=
Subject key identifier:   86:91:E2:DE:38:51:98:C6:82:35:C5:37:5B:D4:D6:5D:50:8C:39:90
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer:       /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial:       01901DED92AB9D4294A02003D1CFB10A559E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:03:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:47 +0000
Files and hashes:         1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: 41u2LqbPESQjKFzH1En/FhrpkJqDGS7feYSP2MfAo7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:92:ab:9d:42:94:a0:20:03:d1:cf:b1:0a:55:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
        Validity
            Not Before: Jun 15 22:03:47 2024 GMT
            Not After : Jun 16 22:03:47 2024 GMT
        Subject: CN=8691e2de385198c68235c5375bd4d65d508c3990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:da:b4:25:1a:f0:cb:a6:6f:96:0e:e2:3c:
                    38:e9:c0:25:58:3b:37:1e:9f:f1:e6:d0:e9:56:b9:
                    2f:6f:a5:5b:66:a6:62:56:f9:25:83:4d:83:42:21:
                    d2:29:4c:4f:49:8b:00:b7:6a:63:6e:03:94:36:b0:
                    66:24:f4:f4:b0:48:fd:10:34:ba:bb:77:c8:8a:e5:
                    d7:dd:cf:be:d2:1b:38:53:3a:f1:a7:bc:2b:a6:99:
                    74:47:73:08:b6:b2:a8:ed:09:94:33:d4:8d:98:ba:
                    ee:b6:79:7e:aa:fc:62:37:8e:4f:99:45:e9:f1:69:
                    58:01:ef:2d:5d:77:5f:10:a8:e5:fb:d9:1f:1f:d7:
                    d9:bc:23:52:b8:df:7f:e5:23:85:04:18:e9:c2:54:
                    6f:5b:ed:f8:8f:2f:cb:c8:23:5f:94:7a:e4:a8:2a:
                    6a:df:02:26:d0:e2:4f:1d:ea:9d:ca:fa:93:47:bf:
                    c8:8a:64:9d:f0:ad:a5:f9:07:c0:bc:9d:a9:d7:d3:
                    3a:0d:94:22:07:a2:46:99:04:f1:78:57:6c:fb:69:
                    2a:27:94:8f:65:b0:64:9d:e0:e7:e2:6e:53:a5:a3:
                    26:6d:6a:ab:22:75:6d:12:3d:ed:4a:66:cd:f8:f0:
                    85:90:a7:e8:e5:62:81:a9:b5:78:cb:53:b1:21:af:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:91:E2:DE:38:51:98:C6:82:35:C5:37:5B:D4:D6:5D:50:8C:39:90
            X509v3 Authority Key Identifier:
                keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ac:02:4f:9d:2f:39:12:09:23:82:62:94:f9:22:ad:85:01:
         c7:6c:c6:4b:e1:e4:dc:46:f7:e6:aa:ef:39:0b:d1:82:28:7f:
         94:a3:23:94:9c:a0:6c:4a:06:c8:7a:c7:e0:3f:1d:f0:15:48:
         53:ca:c8:f4:87:88:c4:b1:7f:26:f3:77:f5:3f:63:f6:a3:f9:
         db:84:af:54:1a:a3:80:6d:3b:7b:5b:ad:bb:32:04:a6:06:3b:
         ce:32:9c:9c:3c:db:97:22:40:b7:d4:af:19:db:35:6b:53:0e:
         71:46:ee:65:04:15:0e:78:b9:2e:69:96:c4:00:d5:ec:0b:70:
         f3:2d:70:6f:f8:fb:a0:10:ab:5e:e5:ee:11:5c:66:87:06:e5:
         0c:43:6c:86:32:25:fd:40:df:58:06:7e:9e:22:f2:d0:b1:df:
         5e:a0:db:0f:20:82:e3:41:82:46:95:58:14:7e:40:c5:67:a4:
         fa:61:7e:1d:61:76:b9:08:51:32:a8:f9:2a:07:15:71:f4:13:
         74:d7:f8:0b:2d:02:a7:11:78:63:33:6a:b0:99:19:1d:70:52:
         9f:5c:4a:1d:29:9e:a9:c0:00:60:0f:da:fd:9f:8e:df:5b:0c:
         dd:fa:df:55:ee:0d:2f:a4:92:fd:d9:79:db:5d:e1:14:a8:90:
         50:69:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:04 2024 by rpki-client on console-ams.rpki-client.org