Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File:                     _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier:          +n2R11+Q/7CBiyaL/mpaFpcnBpZ03MS/ZUix1eSIekI=
Subject key identifier:   B6:87:84:6F:7E:EE:65:2E:3B:EB:03:ED:D1:26:79:F8:13:9D:C0:EB
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer:       /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial:       01901D46333789BD70205E661C550A653AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 19:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:58 +0000
Files and hashes:         1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: jlQxM9aZcE4Mss9ahnnaOpQ+fhq88KC09Fajll0Fk4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:33:37:89:bd:70:20:5e:66:1c:55:0a:65:3a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
        Validity
            Not Before: Jun 15 19:00:58 2024 GMT
            Not After : Jun 16 19:00:58 2024 GMT
        Subject: CN=b687846f7eee652e3beb03edd12679f8139dc0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:ab:96:92:04:df:85:3a:21:7e:62:42:12:
                    ef:39:05:b5:08:1b:d7:92:77:93:f7:0f:1f:fd:2f:
                    06:1b:8a:98:ac:63:bc:fc:c7:49:91:d7:8c:90:b9:
                    a6:10:44:cd:f0:df:17:a8:0a:93:fd:7d:17:07:8b:
                    97:87:6a:aa:14:8d:c2:38:f5:fc:2c:af:9e:b3:fc:
                    7d:d5:ae:f5:74:54:00:64:30:93:ec:8e:8e:4b:c5:
                    98:0f:7b:e2:b0:8d:43:e7:4c:36:1b:01:2a:bc:70:
                    f5:cf:46:10:f9:00:91:94:2a:bb:4e:9a:62:26:85:
                    4c:04:a4:6e:93:96:6b:5f:86:e9:e2:08:22:2d:ae:
                    96:bd:0e:19:79:89:b2:cd:51:59:ca:49:ba:7f:bc:
                    5a:c3:df:32:ea:b3:9f:7b:76:be:08:4b:78:7b:7d:
                    d5:9e:42:84:b6:0b:05:7d:9e:4f:8f:3c:b4:f6:5f:
                    1a:18:cf:06:64:36:e2:14:11:31:25:78:42:50:1f:
                    0e:91:d6:b2:77:95:3c:a1:1a:93:43:fc:fa:69:4e:
                    76:99:aa:4a:04:1d:f4:6a:07:1a:ea:da:e4:b3:90:
                    f6:0d:f9:57:24:01:fa:8d:84:9c:01:34:35:97:3d:
                    d7:f7:36:66:d5:1b:ae:26:7f:f2:02:b5:f3:82:a1:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:87:84:6F:7E:EE:65:2E:3B:EB:03:ED:D1:26:79:F8:13:9D:C0:EB
            X509v3 Authority Key Identifier:
                keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7e:f6:54:55:a3:0c:7d:ef:f2:89:da:2e:e2:a1:5c:77:32:
         5e:a7:8a:b0:8b:28:b4:21:a2:d5:95:e2:f3:15:90:e2:47:23:
         ab:b1:b5:f4:fc:57:b1:76:c4:87:c0:17:11:ad:76:02:b1:ad:
         78:24:ed:36:b6:f7:29:2b:52:b8:9d:54:e8:ea:ef:fc:c1:9d:
         03:e2:9a:30:94:77:f5:ff:f7:12:3c:da:b0:cd:a6:28:01:ce:
         41:60:c4:18:52:bb:64:f3:48:ad:af:18:5d:ee:58:ba:2c:14:
         9f:f0:01:16:54:db:13:b7:67:3b:a0:93:df:1e:4d:2d:24:ab:
         48:61:c5:2b:5a:64:68:8f:ed:8e:2e:9a:b3:a3:dd:81:7d:c0:
         63:14:14:e6:f4:13:80:0c:b3:0f:45:b5:8f:22:42:c1:45:16:
         d7:d6:d9:24:0d:c8:71:12:2f:c4:13:f0:18:ba:05:e8:ba:e6:
         f2:ca:9e:9d:96:cd:88:22:fe:99:fc:c6:72:12:c7:91:1f:4e:
         ba:9f:52:cc:a2:67:9a:0c:0e:61:d3:2d:fc:e6:db:8d:80:aa:
         c6:8f:f4:47:c8:9b:12:b8:f7:91:6b:aa:fa:fc:2f:5a:68:20:
         5b:3a:81:18:d1:18:13:b1:80:2b:71:3d:a3:38:43:85:58:24:
         63:fd:ae:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:56:10 2024 by rpki-client on console-fra.rpki-client.org