Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File:                     msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier:          I2YvL+FaXwyYMAoIAYqisEJuEHxBLMbVRzDBb7gN9xM=
Subject key identifier:   CA:7E:0A:17:F2:A8:A3:6E:B4:F5:9A:45:89:0D:3D:BA:05:6C:00:6A
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer:       /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial:       01901DEC4800583AA88ADA41706C67E64938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:02:22 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:22 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:22 +0000
Files and hashes:         1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: j/aHMfYCN971YoOuc+0c7FeY06XKEL4PchqrL8c257Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:48:00:58:3a:a8:8a:da:41:70:6c:67:e6:49:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
        Validity
            Not Before: Jun 15 22:02:22 2024 GMT
            Not After : Jun 16 22:02:22 2024 GMT
        Subject: CN=ca7e0a17f2a8a36eb4f59a45890d3dba056c006a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:1e:74:ba:d9:53:34:69:39:21:3a:a7:c0:
                    05:41:72:f0:53:9c:43:2d:43:ac:4a:4a:56:b3:e8:
                    9e:01:06:58:80:05:f7:72:4f:c6:32:b6:24:91:20:
                    78:76:a1:6b:38:ff:29:c8:d0:8d:e7:fd:5b:10:8f:
                    0a:61:dd:3f:d7:37:b3:80:82:d7:86:b3:1b:91:b4:
                    18:55:32:67:87:9d:e8:c7:a0:05:65:07:9f:6d:b3:
                    69:ce:ac:0c:8e:e2:74:55:ab:70:a6:29:27:c7:9a:
                    46:38:9e:e3:a7:e8:a0:b4:62:56:1a:90:b2:b2:1a:
                    6d:80:68:ac:30:46:97:37:2c:14:0d:6f:95:b6:cc:
                    fd:40:e1:34:54:f2:af:8c:8d:66:95:d1:db:31:bd:
                    5b:95:3a:5e:e0:b4:a8:ad:27:62:6c:b5:c3:48:ce:
                    47:8e:1f:9f:8f:5d:6e:44:e8:a9:0f:31:c5:42:59:
                    92:8a:b9:a6:2f:4a:11:72:c9:1f:2b:71:57:9b:bc:
                    19:92:d3:6d:08:bb:61:6e:44:69:a2:c6:df:c7:e0:
                    45:93:6f:44:34:c0:d0:ba:97:ba:b0:d0:8a:7d:55:
                    20:2e:0d:18:86:09:78:43:1b:9e:ea:85:96:bd:2d:
                    47:75:44:9e:52:b4:c4:23:af:c7:cd:70:04:5b:9f:
                    45:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7E:0A:17:F2:A8:A3:6E:B4:F5:9A:45:89:0D:3D:BA:05:6C:00:6A
            X509v3 Authority Key Identifier:
                keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:44:32:c1:fe:f8:a2:ee:52:ad:9c:7f:79:17:2f:c3:a3:cb:
         dd:5b:d9:1b:38:5d:d6:2a:18:9e:66:40:95:b5:92:89:9c:62:
         33:1f:3f:c4:5c:1b:d5:c8:f1:0a:eb:98:ea:41:91:16:1e:e5:
         4c:2a:2b:33:3f:9f:1c:35:6a:09:a3:d6:95:27:69:a1:99:97:
         7f:75:e5:f2:ef:ad:07:13:8a:2e:77:35:4a:01:e9:9d:c3:73:
         04:9d:d2:a3:f5:c3:5c:c2:83:1d:4c:bf:c1:8b:d0:f4:3a:6e:
         65:26:25:dd:d7:4b:88:45:a0:d9:5d:89:d2:e0:21:cf:e6:f0:
         35:47:36:e0:91:f9:13:a8:a0:5f:f6:a2:1c:82:f6:1e:7a:c6:
         ca:e9:8b:5c:64:df:42:4f:1b:24:ee:28:bc:c3:8b:a1:f7:21:
         77:f9:c1:7a:97:44:a9:13:26:fb:96:b4:73:d8:34:25:1e:8e:
         bd:97:cc:20:46:b2:3c:c7:8b:1b:75:bc:82:ad:74:ab:2b:86:
         c3:72:f3:59:2d:b4:c7:10:67:04:80:8d:ff:bd:6f:66:3e:f4:
         3f:84:ea:88:0e:5e:12:54:47:4f:ad:1d:40:d1:9d:58:f7:84:
         b0:8d:70:b6:0a:52:75:59:14:e8:63:de:fc:8a:1b:8d:1a:e0:
         49:bf:94:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:28 2024 by rpki-client on console-fra.rpki-client.org