Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8b58d2-70e7-47ab-842a-d14577ab3148/1/_8Lk5KWVcFpHIn2pPdY_c_Aus9A.mft
File:                     _8Lk5KWVcFpHIn2pPdY_c_Aus9A.mft (raw, json)
Hash identifier:          JNMtT2FNKuyYBANkrKh58eSmAfuM2H3F8rYtQnLx/QQ=
Subject key identifier:   59:FB:94:F6:AB:C9:81:A7:AE:B4:3F:F9:32:58:C6:74:74:24:80:00
Authority key identifier: FF:C2:E4:E4:A5:95:70:5A:47:22:7D:A9:3D:D6:3F:73:F0:2E:B3:D0
Certificate issuer:       /CN=ffc2e4e4a595705a47227da93dd63f73f02eb3d0
Certificate serial:       01901DEB32B27BA2589A386D973953A95B8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_8Lk5KWVcFpHIn2pPdY_c_Aus9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/8b58d2-70e7-47ab-842a-d14577ab3148/1/_8Lk5KWVcFpHIn2pPdY_c_Aus9A.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:01:11 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:11 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:11 +0000
Files and hashes:         1: _8Lk5KWVcFpHIn2pPdY_c_Aus9A.crl (hash: 6m17nIF99+IlHfHNGXt6lVqSNoPmQEXM/VtGKOMiKs8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/8b58d2-70e7-47ab-842a-d14577ab3148/1/_8Lk5KWVcFpHIn2pPdY_c_Aus9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/8b58d2-70e7-47ab-842a-d14577ab3148/1/_8Lk5KWVcFpHIn2pPdY_c_Aus9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_8Lk5KWVcFpHIn2pPdY_c_Aus9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:32:b2:7b:a2:58:9a:38:6d:97:39:53:a9:5b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc2e4e4a595705a47227da93dd63f73f02eb3d0
        Validity
            Not Before: Jun 15 22:01:11 2024 GMT
            Not After : Jun 16 22:01:11 2024 GMT
        Subject: CN=59fb94f6abc981a7aeb43ff93258c67474248000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:75:a7:58:df:92:08:da:b9:4a:67:44:a8:cd:
                    26:cc:67:8a:48:7f:31:e6:79:d8:78:d9:4b:a7:1d:
                    be:53:1f:f6:ac:60:00:63:03:06:29:17:e7:5c:48:
                    ec:0f:cc:97:a7:75:da:3f:4d:e6:60:aa:0d:16:58:
                    ff:5d:ce:f0:74:74:b7:e7:c2:ff:61:7d:0f:f1:30:
                    1e:30:8d:95:0c:fe:c8:db:f3:2b:dc:75:4e:89:2f:
                    8c:83:af:8d:4b:0a:1c:d5:b5:0e:e8:0c:b9:3c:c2:
                    a8:f3:84:3f:7b:3e:8a:c3:1e:2d:ad:95:1e:6f:e5:
                    0a:61:7e:d0:cb:d2:da:fb:98:90:d4:cb:dc:c2:27:
                    66:e8:db:2d:31:4a:9b:f9:94:a4:f6:9c:73:60:5d:
                    ff:28:7d:47:66:9e:c8:46:05:1c:1d:12:3c:ae:fd:
                    04:ec:8f:0c:f8:2e:b9:d7:89:7a:92:cb:f2:8a:0f:
                    84:1c:ba:d3:29:ae:83:f3:12:6a:60:33:a1:e1:0b:
                    7c:cf:27:26:4b:22:cc:3d:52:f6:ed:62:a8:34:06:
                    da:64:b9:87:76:58:52:68:7f:32:93:05:33:21:c4:
                    54:82:aa:38:07:27:65:02:54:fe:38:79:53:42:1f:
                    0d:37:83:a2:ae:77:2f:ad:4f:84:bf:2b:fc:52:36:
                    8e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:94:F6:AB:C9:81:A7:AE:B4:3F:F9:32:58:C6:74:74:24:80:00
            X509v3 Authority Key Identifier:
                keyid:FF:C2:E4:E4:A5:95:70:5A:47:22:7D:A9:3D:D6:3F:73:F0:2E:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8Lk5KWVcFpHIn2pPdY_c_Aus9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8b58d2-70e7-47ab-842a-d14577ab3148/1/_8Lk5KWVcFpHIn2pPdY_c_Aus9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8b58d2-70e7-47ab-842a-d14577ab3148/1/_8Lk5KWVcFpHIn2pPdY_c_Aus9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:06:c5:48:cd:03:2d:2d:ae:7d:cb:c8:c4:a7:d3:b9:92:69:
         d3:7c:7c:1a:c8:f0:02:92:72:dd:53:33:27:f4:b9:38:ad:ed:
         6a:e3:7a:93:a9:84:65:d5:75:72:61:1c:06:cd:28:c9:75:4e:
         ea:bc:a9:c0:a7:6d:74:f1:bb:22:cd:00:0f:98:8d:6b:c8:51:
         16:6b:c2:f5:fd:83:39:1b:f6:29:d2:7e:19:a6:81:e8:b7:90:
         6f:12:57:d8:16:99:18:05:74:c6:d6:2f:99:50:13:cb:b1:6a:
         e1:70:5c:e8:6d:5c:80:03:c4:6d:50:4a:f1:54:ca:27:51:1f:
         7e:f0:b1:6c:e5:2e:95:b6:34:fe:55:3f:ae:3a:dc:7b:4c:69:
         3c:71:03:44:a9:8d:ca:8f:7d:e5:a6:6f:aa:1d:64:97:4f:2e:
         19:93:2e:0f:0c:e7:f1:45:44:27:3f:60:6c:fd:96:03:46:48:
         1f:c0:a6:5d:b4:af:c6:41:a1:28:94:52:f8:75:5f:ab:65:2c:
         bb:0d:81:99:6f:ec:60:11:da:3e:3f:f9:6e:bc:40:88:98:66:
         f5:68:f7:41:e1:85:a3:40:7d:46:0f:e7:4f:eb:6a:4e:2b:01:
         3c:38:47:62:9e:f9:78:e6:dd:57:da:53:39:02:d4:9e:b2:d4:
         7a:d5:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:02:09 2024 by rpki-client on console-ams.rpki-client.org