Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
File:                     jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json)
Hash identifier:          9GBYsN+v5pOCXfiFT2WVWg97K6t3A7Jn5xhly6OUf+I=
Subject key identifier:   12:FF:D8:1E:9D:42:D3:D9:BA:A1:41:12:7B:8D:4D:21:DF:E8:76:E1
Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Certificate issuer:       /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Certificate serial:       019045D497EFBC4A542E6E6ECC4C38662778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
Manifest number:          09C4
Signing time:             Sun 23 Jun 2024 16:01:18 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:18 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:18 +0000
Files and hashes:         1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: nU8/ee59oVKqweRS4nl6t2MoSFfaQ9nbi7jFdOCDoLQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:97:ef:bc:4a:54:2e:6e:6e:cc:4c:38:66:27:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
        Validity
            Not Before: Jun 23 16:01:18 2024 GMT
            Not After : Jun 24 16:01:18 2024 GMT
        Subject: CN=12ffd81e9d42d3d9baa141127b8d4d21dfe876e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:8f:e6:1e:91:36:f7:2d:3e:4a:27:9a:d0:
                    9b:c7:cf:c8:bd:41:2e:3b:3b:68:a2:31:fc:4a:eb:
                    9c:d0:be:0d:5c:ca:85:de:78:a1:f6:c9:9a:df:4d:
                    1a:e7:0b:1f:e0:75:85:60:25:49:72:08:49:f5:4a:
                    87:6e:80:ad:28:a2:d9:96:2a:28:9b:dd:75:a9:ed:
                    44:ac:1e:7a:63:7d:60:88:b9:af:67:da:03:0e:9f:
                    e8:bb:cf:e0:c7:5b:d4:92:e8:cd:94:43:79:b2:a7:
                    33:04:02:da:f9:42:8e:1a:9b:47:2d:a1:9e:9f:71:
                    1b:8e:a3:a6:45:7b:03:7d:ac:db:00:bb:4b:4e:b8:
                    da:e8:8b:6f:fc:df:52:15:89:5c:22:aa:e8:99:30:
                    02:18:c9:ba:75:cf:03:ac:90:5e:5a:f9:34:d6:8e:
                    81:85:24:4e:bb:e9:8a:5c:68:ac:c1:35:84:96:75:
                    14:4f:70:18:7e:f2:c6:6b:d6:6c:3f:7a:4e:66:9f:
                    d9:55:85:8d:bf:63:5f:76:95:c4:98:38:6b:c6:2a:
                    c5:c6:4b:a3:57:4f:d5:ea:ee:f9:3b:5f:25:de:cd:
                    43:bb:68:4e:68:83:15:79:f3:79:b5:48:17:26:03:
                    58:69:3f:20:01:5f:ad:7c:5f:c3:76:07:b7:be:b9:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FF:D8:1E:9D:42:D3:D9:BA:A1:41:12:7B:8D:4D:21:DF:E8:76:E1
            X509v3 Authority Key Identifier:
                keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:68:ab:bb:39:57:8f:92:ab:01:9f:c8:2f:9d:c7:74:57:51:
         9d:ad:92:a5:e8:ae:04:c0:b9:dd:81:18:29:b0:a2:c2:e9:4c:
         90:6c:17:58:b6:9b:d3:86:c3:09:60:c5:9d:b4:fd:ac:d4:2d:
         6f:e9:c6:34:1b:57:3d:2d:6e:66:59:32:e7:7d:97:00:fc:ee:
         a2:2c:cc:79:4f:29:2d:b1:4a:a4:0e:e6:03:1c:f1:08:4d:76:
         df:87:f0:ca:93:1f:59:06:c2:f4:39:47:48:81:32:38:1a:5c:
         8e:61:cb:5b:0e:d9:e7:dd:8f:bd:e7:7d:c6:58:e9:ec:f9:d9:
         ae:9d:e6:05:0c:ed:ee:69:04:17:a5:4a:6e:a2:fa:35:ef:57:
         e9:d2:16:49:71:fc:d1:90:d8:c9:6a:a9:86:5e:8c:3c:b4:40:
         22:8f:e3:16:c5:d1:76:d5:09:d5:e0:bf:73:5b:b5:e4:3c:95:
         66:50:87:96:ef:8d:f0:63:71:ed:79:6f:2f:8d:b7:60:37:51:
         25:77:2c:20:5d:0b:ff:e5:c7:20:a3:92:43:13:ee:de:e3:11:
         6d:93:19:7b:84:bb:c0:02:06:31:ae:ab:58:39:a6:34:9f:c5:
         e8:6e:a1:19:d4:50:83:44:61:e5:64:84:2a:03:ef:e6:35:60:
         4b:90:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:52:23 2024 by rpki-client on console-ams.rpki-client.org