Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File:                     8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier:          Dgox+pE3aAXTlH8Gefwk1fN+GJZ55GjCVFPfKofKSEU=
Subject key identifier:   68:65:4B:96:99:C5:E2:F2:99:59:B6:50:46:74:5B:7D:2D:6B:60:21
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer:       /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial:       01901BFE8E99E3DC301F318E61A412073C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 13:03:05 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:05 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:05 +0000
Files and hashes:         1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: Qs2vaa4sUm4fQ5T09U66j8s49nh+tJsqFte6EKDPK3U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:8e:99:e3:dc:30:1f:31:8e:61:a4:12:07:3c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
        Validity
            Not Before: Jun 15 13:03:05 2024 GMT
            Not After : Jun 16 13:03:05 2024 GMT
        Subject: CN=68654b9699c5e2f29959b65046745b7d2d6b6021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:4c:0f:d7:25:5d:35:71:26:3e:b5:40:c4:
                    07:7c:d6:07:cd:d8:22:cc:37:57:60:10:a1:a1:e0:
                    92:7d:30:b2:3a:94:21:c9:ce:44:d1:b2:ed:a1:2a:
                    bd:03:75:db:be:2f:3e:e5:8c:80:9e:88:46:b7:e0:
                    0f:a0:95:e3:9c:45:8a:db:95:87:e4:fd:36:4b:33:
                    03:d9:80:64:48:2a:a5:05:2b:1c:29:0e:dd:a6:e6:
                    bd:1f:d0:ae:66:5b:8c:87:ef:05:f9:77:b3:45:b1:
                    ec:ab:9f:66:04:a7:d4:64:18:64:b7:56:3d:b4:fa:
                    8b:c3:5f:e7:a0:0d:56:af:99:29:61:07:b8:d1:ca:
                    5b:3d:f6:8d:58:24:eb:58:7b:76:25:1a:df:af:00:
                    d8:20:3a:d5:f8:e3:a3:bc:04:4c:ef:1d:21:b9:03:
                    dc:3c:e5:21:af:bf:80:79:4d:02:c5:bf:b5:35:14:
                    4c:c3:0b:d6:1d:78:13:26:2c:3c:8f:34:72:24:ce:
                    76:71:1c:24:05:9f:06:d9:0c:e6:54:5b:ee:c8:a7:
                    79:df:7e:8d:b4:ab:35:9b:2e:65:9c:dc:31:ad:5a:
                    79:38:04:57:75:43:8b:c5:cc:bf:90:2e:6e:15:f1:
                    6a:b8:51:24:d3:fb:e7:91:46:1b:cf:a0:2c:01:7b:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:65:4B:96:99:C5:E2:F2:99:59:B6:50:46:74:5B:7D:2D:6B:60:21
            X509v3 Authority Key Identifier:
                keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:7d:83:06:2c:62:40:37:75:45:fe:43:bd:ca:0e:4f:a0:b6:
         c6:52:df:0e:cf:72:46:76:65:65:5a:e6:7a:d1:43:dc:a2:13:
         27:03:1e:7f:8b:3b:00:52:4b:f0:45:d7:fc:3b:b2:73:5d:61:
         3b:fe:8a:5b:8e:83:a2:2c:93:5b:4d:21:42:97:e5:f3:af:fd:
         d9:e7:a5:3c:95:2a:84:73:2a:84:72:f9:3a:0c:f6:33:19:3e:
         4f:de:e7:1f:e3:af:b7:1f:52:59:e6:c8:4e:00:42:e2:e4:61:
         5f:ea:ee:56:cc:c4:10:69:17:1b:db:fa:86:11:88:58:71:a4:
         a9:7d:1a:9c:56:84:03:b1:43:6e:54:33:6d:3f:3e:02:ea:71:
         8d:1d:e4:cb:29:ba:90:c3:64:62:31:7e:d4:b2:c7:0b:2c:10:
         c5:11:2e:7a:6d:c3:c9:af:2c:a9:1d:31:d1:0d:99:34:dc:90:
         c0:90:03:c7:92:9f:a8:dc:fa:86:c8:f7:b8:c3:9a:af:99:da:
         aa:f1:87:86:08:b6:41:fe:5d:56:b1:db:2d:3d:8f:bb:63:d2:
         43:a3:fb:be:37:43:aa:1d:45:8b:b9:2f:3f:76:4e:0c:83:b3:
         b2:81:d3:3e:fd:ee:cb:15:17:c7:97:92:87:e7:7b:8d:6a:46:
         bd:09:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:29:21 2024 by rpki-client on console-fra.rpki-client.org