Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File:                     2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier:          5sQexvS81mJ/Td8bta8JOnYKTAawsOIZR7LtjChmVY4=
Subject key identifier:   0B:75:E5:C7:2A:BB:A4:A8:36:7A:B2:E2:AB:01:72:26:48:66:11:84
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer:       /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial:       01901DED25EA73FE8C4D8F884AC26DC02874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:03:19 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:19 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:19 +0000
Files and hashes:         1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: DR+5etHnj+ujuod+t6aV2A+hmvCLoKjWcvlDGTONWmQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:25:ea:73:fe:8c:4d:8f:88:4a:c2:6d:c0:28:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
        Validity
            Not Before: Jun 15 22:03:19 2024 GMT
            Not After : Jun 16 22:03:19 2024 GMT
        Subject: CN=0b75e5c72abba4a8367ab2e2ab01722648661184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:e3:9c:be:c9:07:cb:cf:d2:02:42:7d:75:
                    05:c6:43:bb:fb:8d:eb:07:51:06:0a:64:d8:e9:49:
                    8b:f0:9c:b7:86:51:fb:ff:ac:db:cd:b9:ec:ad:df:
                    6e:76:c0:34:ba:17:ea:2d:7c:16:7a:18:53:62:da:
                    d8:19:ec:51:f5:ff:56:51:cf:77:8c:5d:36:1b:3c:
                    6f:29:5a:3d:93:61:d6:3f:7f:ec:76:ff:1e:c4:41:
                    68:11:f9:29:8a:78:25:f5:ba:16:cc:e7:64:7d:2b:
                    d1:ed:13:7f:be:53:7b:d0:26:f6:70:a4:65:17:dd:
                    a2:79:cf:5f:1f:33:60:d2:67:77:ca:cd:eb:7b:ab:
                    08:d2:c6:77:4b:10:41:72:69:2b:72:62:55:0a:ae:
                    11:35:10:3f:6f:fc:2a:27:60:ee:00:be:2a:93:65:
                    cb:a7:07:51:d0:9f:93:fb:0c:35:4f:e8:ba:92:49:
                    d4:bd:22:ee:40:1f:bf:51:4b:54:a5:6b:d5:7e:60:
                    ec:98:70:36:4c:e5:9a:2a:34:86:4c:64:95:61:85:
                    8e:72:30:82:81:1f:59:04:23:c5:26:65:82:3d:96:
                    a9:ce:7b:c4:82:95:05:4e:1d:2b:ab:cb:f2:3c:81:
                    2c:4b:16:e1:7b:47:1f:86:cc:6d:98:72:49:9b:12:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:75:E5:C7:2A:BB:A4:A8:36:7A:B2:E2:AB:01:72:26:48:66:11:84
            X509v3 Authority Key Identifier:
                keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:f5:9d:18:b6:22:a8:b3:14:6f:d0:f8:be:20:46:f0:b6:
         54:97:7e:84:9e:49:20:09:26:28:3f:1f:fc:93:f7:f8:a0:2c:
         69:a3:77:aa:0b:67:ee:72:9c:ff:7b:ba:e1:16:8a:2e:61:0e:
         45:c0:79:eb:9f:7c:38:82:a1:e2:a3:a5:40:60:ff:13:e8:a4:
         7d:3f:5b:04:6b:a7:e1:6f:9d:bd:60:dc:c8:fc:56:e2:a4:26:
         7c:97:bd:51:14:76:99:c3:79:9a:9b:46:30:49:b1:b2:fc:e7:
         b6:34:e6:ce:97:31:a6:d0:5d:7c:47:b2:a2:2e:db:2b:b8:8a:
         81:60:0b:ba:e3:f8:e2:e1:d0:b7:75:1d:77:7f:59:0e:e5:81:
         15:a9:bb:e3:c7:83:8b:96:ce:cd:f9:38:02:21:81:bb:bf:9d:
         1b:14:e3:d4:f6:b4:82:e7:f1:a0:2c:c5:43:95:39:22:f2:d0:
         dd:ba:dc:08:89:84:ed:a9:91:8b:26:dc:30:c5:cb:cf:1a:b2:
         65:db:43:7d:c0:ae:f4:39:d5:54:40:04:bb:dd:e1:4c:4a:a0:
         78:26:c7:76:aa:7e:ec:74:08:c1:9d:45:60:b2:0a:6c:a6:d2:
         a6:9a:f3:c3:d0:07:b4:e1:30:d1:0e:05:60:9e:c2:4b:45:49:
         d0:c7:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:52:13 2024 by rpki-client on console-fra.rpki-client.org