Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File:                     1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier:          sONCV/Qt9Z2lEgDoaonScUfoiJcvKwhuMv8ZwKIIBhY=
Subject key identifier:   97:B7:AC:E8:4C:40:84:BC:FF:29:09:92:E3:A4:E2:A4:88:13:76:0F
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer:       /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial:       01901CD892062EC6946785F4712E70C255E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number:          07EC
Signing time:             Sat 15 Jun 2024 17:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:13 +0000
Files and hashes:         1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: CX7A9C+Eh9irjCxNUJGMxek3QHWSRM4rAPA8sKmNu+8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:92:06:2e:c6:94:67:85:f4:71:2e:70:c2:55:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
        Validity
            Not Before: Jun 15 17:01:13 2024 GMT
            Not After : Jun 16 17:01:13 2024 GMT
        Subject: CN=97b7ace84c4084bcff290992e3a4e2a48813760f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:68:c1:24:69:5b:23:6c:4e:95:80:f8:40:
                    0a:23:69:9c:48:00:dc:82:ea:24:e2:28:c2:1b:4b:
                    98:7f:2c:8e:91:d7:7b:78:24:ef:4e:68:38:a8:89:
                    fa:0b:0d:ff:95:59:68:96:62:c9:b5:50:cc:f3:1a:
                    70:b9:26:aa:ce:9c:32:55:a4:bc:29:15:cd:9b:9e:
                    94:eb:e7:4c:25:c4:4c:db:69:76:eb:7a:bd:39:25:
                    61:f8:35:6f:35:17:92:53:f1:9f:c0:14:0e:dc:c7:
                    48:a8:e9:14:91:f1:8a:53:70:de:e6:65:7e:50:99:
                    e9:1c:80:b4:50:db:f6:34:27:31:0d:38:cf:57:86:
                    e3:54:a8:8f:7f:a0:da:c5:ca:14:ec:06:20:3a:63:
                    2f:8d:23:fd:7b:41:26:72:19:2d:b5:be:30:ee:dd:
                    51:1a:16:8c:fe:07:97:ea:e8:40:0f:3c:94:5b:d5:
                    3a:45:18:31:9b:61:6a:82:98:f1:b7:2a:b6:78:89:
                    55:69:95:01:9a:63:a9:43:80:93:8d:1c:84:39:dc:
                    f2:c7:36:af:a2:09:a6:8a:13:66:0e:df:2d:31:98:
                    59:95:44:3a:e6:4d:14:3e:da:bb:ae:c2:49:f3:db:
                    fe:5e:c7:b0:cd:54:e9:5d:c2:c4:70:3b:58:61:79:
                    20:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B7:AC:E8:4C:40:84:BC:FF:29:09:92:E3:A4:E2:A4:88:13:76:0F
            X509v3 Authority Key Identifier:
                keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8b:13:b4:ce:ca:72:b3:8d:60:46:bd:e2:e7:af:d4:96:41:
         5f:69:40:da:2c:02:c3:01:55:1f:7d:4f:ae:ed:77:80:b5:3c:
         44:94:d4:13:27:de:74:fa:10:eb:5b:fc:8d:ab:04:c1:bc:93:
         a6:31:fa:66:1e:a3:d9:12:dc:1c:ef:45:7a:98:44:74:e8:85:
         97:57:0c:a8:7c:27:7c:81:55:8c:fb:81:f4:27:24:ab:7b:79:
         d3:fa:58:50:1c:7a:68:7d:7b:03:ee:aa:3b:f1:f9:c2:10:17:
         2c:f7:cb:6f:4c:51:dc:fe:41:c0:81:84:42:1a:57:bd:9c:34:
         d6:b2:35:26:7c:00:9b:0d:6c:b6:02:3e:f7:aa:db:82:e3:76:
         7d:60:8c:96:66:b1:89:74:12:fd:67:24:5b:89:4c:86:5e:76:
         c4:bf:22:e2:94:8f:c5:a8:ec:b8:4e:b2:01:aa:5e:3a:70:c1:
         a2:cb:bc:2a:16:b7:be:ed:7e:e7:92:76:cb:bc:10:c1:08:0a:
         65:d8:e2:11:7c:78:f0:1b:46:bc:f3:14:4e:0e:b4:4e:34:37:
         c7:b4:77:30:45:7a:ef:e8:d3:bd:c2:c0:ca:c7:28:0c:12:96:
         a7:ae:76:0f:cc:4a:3b:97:ed:b2:8f:4f:34:56:84:51:06:4e:
         1b:d5:18:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:50:20 2024 by rpki-client on console-fra.rpki-client.org