Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File:                     1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier:          nb0LFvx+jUrbt4120RhR/yIKMlxuZTsSQjS6idw/x2Y=
Subject key identifier:   4F:7E:59:46:2A:7D:16:13:5B:5B:67:67:42:20:01:1A:7C:70:B5:9C
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer:       /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial:       01901DED14A2D7E5BE0450C0DBCA43DD407D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:03:14 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:14 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:14 +0000
Files and hashes:         1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: hPMbYyBsDxMvEiLFMYEPNAZFX9oTDMmIFZIIqUDE+xo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:14:a2:d7:e5:be:04:50:c0:db:ca:43:dd:40:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
        Validity
            Not Before: Jun 15 22:03:14 2024 GMT
            Not After : Jun 16 22:03:14 2024 GMT
        Subject: CN=4f7e59462a7d16135b5b67674220011a7c70b59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:15:11:09:6a:dc:68:55:ad:d9:8d:e4:34:
                    c6:72:e9:56:24:28:4a:a0:c6:32:ec:b7:37:3b:df:
                    18:92:68:42:e2:f3:78:31:fe:be:3f:f2:a5:41:34:
                    b7:ef:87:15:26:37:1b:6c:4e:d4:a9:43:22:89:0b:
                    7c:93:1c:ed:6b:99:26:f3:d8:f3:ad:71:bf:35:be:
                    95:c6:8a:d6:eb:53:c6:8e:73:cd:8b:82:bf:a8:0b:
                    a7:21:ca:90:d2:a7:d0:49:6d:12:5c:c1:f2:c4:bd:
                    db:0e:23:19:6a:ba:55:dd:fb:32:e6:40:d2:22:73:
                    83:2f:1d:05:11:5a:bf:ba:8c:db:f8:d8:61:75:31:
                    8e:e0:da:09:da:1b:2d:2f:e2:7c:d5:85:66:5e:6d:
                    61:ae:8b:69:bd:6b:79:6a:c4:8f:34:c5:a0:9e:13:
                    d0:30:90:b5:1e:ca:88:e5:e3:ca:31:c5:52:76:59:
                    51:49:2d:90:83:72:81:9a:aa:ae:c9:1c:09:36:b5:
                    d1:08:57:f6:a4:74:86:72:93:59:f9:32:eb:ee:0a:
                    a7:49:51:e1:d1:01:87:ef:66:ff:f9:ef:ac:66:27:
                    6a:24:c8:f7:e2:7e:2b:77:99:3d:1a:e8:a7:90:13:
                    1e:7d:6e:da:2a:f9:0d:37:56:c9:29:2b:a8:ca:2a:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7E:59:46:2A:7D:16:13:5B:5B:67:67:42:20:01:1A:7C:70:B5:9C
            X509v3 Authority Key Identifier:
                keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5c:ca:e4:e9:c2:55:d7:8c:9a:60:4f:cc:a3:9f:9c:db:d7:
         5f:76:0c:2f:60:b8:ec:9b:86:7e:33:43:ad:cb:75:f9:70:e7:
         e1:bf:af:a8:09:21:fe:58:0e:fb:8c:ef:66:fe:33:bb:0a:78:
         2c:34:83:50:80:d3:1e:3e:d0:0b:7a:de:e1:40:20:96:1a:2f:
         0c:c1:b8:3e:37:3d:ae:08:e7:28:9f:06:b5:0a:c6:39:0a:8a:
         e8:1e:49:b9:5f:2d:17:20:a9:67:95:c3:0a:08:0a:c5:f4:6e:
         32:e3:f7:cd:71:ae:b8:ad:3a:4e:cc:a1:8e:eb:84:ef:94:d2:
         25:f1:fe:fb:8d:b2:ae:ad:6d:6c:33:cc:51:9b:89:f7:07:2b:
         88:ba:f9:85:d7:83:a5:e3:48:0e:74:50:68:40:ca:18:59:79:
         f2:fa:54:73:87:21:87:46:79:12:68:14:9f:6d:a3:d2:a3:46:
         cd:21:c3:f7:f6:a9:11:75:bd:c3:8a:7b:91:31:a9:d9:2d:94:
         b3:16:6b:d1:60:80:c7:c1:7c:8b:00:03:53:ee:02:4c:31:e1:
         d9:86:a9:1f:09:f7:98:bf:13:72:a7:3e:6a:98:4d:1b:0e:fb:
         06:35:3e:43:6b:5c:20:f5:b3:32:fb:eb:5f:42:30:55:35:09:
         0e:81:79:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:49 2024 by rpki-client on console-fra.rpki-client.org