Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File:                     I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier:          i9Hoc0Vz92c4IPzUi5i8aQIuoPb1snWpktPwJ3suP8U=
Subject key identifier:   F4:D6:C7:E9:FA:1F:6E:4E:A1:49:F1:84:85:B8:12:33:2B:E2:4E:DE
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer:       /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial:       01901E58EE39AD6C50360F816BFF80AA9DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number:          11C1
Signing time:             Sun 16 Jun 2024 00:01:02 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:02 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:02 +0000
Files and hashes:         1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: 4HJUNhrzzHmgow4vP10XJg3/runkkFRjXkqDlC8HFX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:ee:39:ad:6c:50:36:0f:81:6b:ff:80:aa:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
        Validity
            Not Before: Jun 16 00:01:02 2024 GMT
            Not After : Jun 17 00:01:02 2024 GMT
        Subject: CN=f4d6c7e9fa1f6e4ea149f18485b812332be24ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:34:8a:08:69:a7:97:3e:f3:49:7d:fd:f4:
                    73:ba:14:11:9f:e6:78:c8:23:2e:12:c3:10:92:61:
                    b0:65:5a:f1:57:c9:68:b7:19:86:2d:a7:f1:76:1c:
                    55:5d:7d:71:5b:d4:6d:b1:57:b8:41:65:cb:44:80:
                    fe:9e:0c:d3:6f:e2:88:79:20:c8:df:5c:9f:fa:52:
                    cc:c3:58:3c:18:ba:a6:de:b9:4e:9a:e2:15:0c:6a:
                    ee:85:e3:f8:aa:ce:b6:15:17:f5:51:6e:e8:90:04:
                    2e:eb:49:65:2c:c1:76:25:53:70:b3:1e:bb:d1:bc:
                    cb:37:71:f3:79:38:70:7d:f8:11:df:e1:b1:ba:f2:
                    b8:84:34:66:17:1e:e7:01:a8:9f:66:4a:44:33:9e:
                    dc:6b:9b:db:cd:65:12:73:8d:14:18:f8:4f:b8:86:
                    ed:c8:7d:30:df:93:11:20:21:71:9f:63:70:a3:1d:
                    d7:2c:cc:86:ba:13:91:17:80:4a:ee:43:4f:07:27:
                    eb:43:e6:74:98:a1:8c:c3:93:cc:24:5a:36:fd:a1:
                    22:b7:97:7e:7b:39:b9:b9:66:d3:1d:24:86:b5:0f:
                    8c:ed:7c:e5:be:a4:7f:89:66:3f:3f:9a:c3:2a:4b:
                    13:81:cc:a8:42:36:37:dc:83:56:cf:24:67:ab:bd:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D6:C7:E9:FA:1F:6E:4E:A1:49:F1:84:85:B8:12:33:2B:E2:4E:DE
            X509v3 Authority Key Identifier:
                keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:48:a8:62:80:6f:28:e6:4a:f7:29:da:63:76:c8:2f:82:
         ce:15:9f:fb:c1:01:1f:c7:b6:65:5e:0f:ed:5e:8e:9e:e4:b2:
         80:1b:1d:84:62:e3:d1:e9:b5:e1:62:f6:9b:d7:d9:a6:7b:d0:
         0c:f2:2e:ab:dc:98:8d:54:91:07:87:34:23:b4:c9:8e:e1:3e:
         86:4e:a0:ca:a1:3d:46:42:c1:b4:9f:cf:4a:a6:b4:0f:16:e4:
         e1:55:05:0b:7e:2e:f1:2b:10:b1:c0:4f:10:93:68:a8:e3:70:
         f0:a4:34:48:91:30:bb:8b:da:7c:e9:f4:1a:53:23:20:97:b1:
         a0:fa:00:cd:43:e4:cf:55:e1:48:1d:23:03:53:cd:47:a5:ac:
         b5:25:c8:b5:cb:23:f6:14:09:47:d6:a6:1c:f7:3c:d2:20:04:
         bb:3f:74:91:77:1e:03:8c:8c:23:bb:41:b6:a5:f3:60:be:2a:
         89:e3:c9:51:1d:72:2d:4b:72:cb:17:3f:b1:03:58:2c:83:03:
         ce:bd:ec:fb:74:1d:63:fa:0d:0d:84:de:02:09:98:9e:d0:b2:
         d9:43:23:2d:96:06:6d:b9:ac:2d:fc:69:ab:63:f5:a4:7a:08:
         6f:51:7a:0d:91:d2:6e:00:4d:44:19:db:f1:2e:72:20:db:05:
         e7:c4:e9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:55:41 2024 by rpki-client on console-ams.rpki-client.org