Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
File:                     MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft (raw, json)
Hash identifier:          Jdok7KuH8aRt+AyIVGObnDuvo8Bcv861WroOPRSoK1U=
Subject key identifier:   4E:92:9F:1D:20:3B:2E:56:62:F0:7A:F2:F9:D8:B2:B2:9D:B7:46:1D
Authority key identifier: 30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE
Certificate issuer:       /CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
Certificate serial:       01901DEB42A5F287D0E843AC51A8B6C95330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:01:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:15 +0000
Files and hashes:         1: MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl (hash: JRqADEQo+VKxeyf3qY6pTfrOerFKpEUje9I/CCJkEpE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:42:a5:f2:87:d0:e8:43:ac:51:a8:b6:c9:53:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
        Validity
            Not Before: Jun 15 22:01:15 2024 GMT
            Not After : Jun 16 22:01:15 2024 GMT
        Subject: CN=4e929f1d203b2e5662f07af2f9d8b2b29db7461d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:69:cd:52:1f:d3:09:2d:92:6d:a5:f3:9a:8f:
                    11:a5:24:68:29:3c:60:f4:53:2c:18:e9:2c:89:a8:
                    af:d5:29:08:9b:a4:72:54:49:8c:b4:02:d1:61:41:
                    60:66:8b:a3:f9:19:dd:78:0c:fb:33:fe:a3:6a:cc:
                    ec:93:32:e4:17:71:39:1c:4b:67:3b:a3:d4:22:42:
                    86:bd:a1:43:b2:4f:72:0b:11:c9:f3:02:9c:9e:f4:
                    19:a3:1d:03:fe:82:49:a8:dd:bf:b9:77:26:f2:93:
                    d9:d0:c7:a3:a8:96:fe:d4:d1:61:57:6a:b4:5c:e3:
                    c8:b0:6a:60:de:64:95:c0:0f:4a:3b:1c:f9:5f:df:
                    01:92:40:58:bc:09:dd:c1:67:91:a4:d7:47:70:2e:
                    d5:7b:c5:3d:16:3f:56:0c:4d:ae:52:84:62:d2:45:
                    23:1d:b4:2b:0f:dc:87:f7:51:f3:9f:79:e9:ae:45:
                    31:0e:65:32:e3:b4:d5:c8:55:f3:2f:14:ed:fe:e2:
                    29:5a:fe:25:3f:27:9a:9a:fc:7e:f4:a0:35:a4:58:
                    4d:1b:32:dd:8d:c9:33:0a:0b:f8:0f:3f:4d:94:dc:
                    e3:24:f0:21:6a:f1:d2:ee:dd:6b:26:0a:79:74:0b:
                    2a:f2:a1:0b:25:ac:8e:93:f9:e6:a7:47:2e:4d:8c:
                    7e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:92:9F:1D:20:3B:2E:56:62:F0:7A:F2:F9:D8:B2:B2:9D:B7:46:1D
            X509v3 Authority Key Identifier:
                keyid:30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:07:6f:6c:55:78:69:1f:7e:2d:aa:6a:29:2f:04:72:c2:55:
         76:40:84:cf:65:cc:61:e4:e4:28:e4:dd:9e:16:59:f9:9a:8b:
         58:f1:02:8a:20:06:4b:93:ed:a9:8d:2d:f7:92:9a:ce:dd:5d:
         c9:e4:23:26:b1:3a:60:b8:55:af:ec:c4:f7:71:72:e4:cf:07:
         b3:71:e3:0b:2d:1d:d0:3b:e6:0d:c4:4e:f1:23:82:61:e9:13:
         bf:a6:88:f4:1a:b4:46:5e:40:a7:df:3d:12:7f:60:97:77:1b:
         9a:ad:70:3c:c3:0d:de:11:46:66:b4:34:a5:74:94:e4:82:74:
         3a:40:aa:f6:63:d5:3d:9d:29:74:83:c9:26:8f:ea:c5:be:92:
         5d:0a:d7:bf:d9:73:8a:32:7b:b5:ea:e4:f0:90:81:66:12:65:
         5a:ea:74:e0:76:cb:97:40:0f:89:6c:0c:27:21:88:74:c2:40:
         41:f2:2c:8a:ad:6f:65:db:53:90:c0:df:1c:aa:67:13:c0:9d:
         b6:d4:36:42:38:92:ff:41:e3:c8:77:89:b3:e1:6e:2e:c3:02:
         58:93:6d:7b:e5:16:ef:8f:3f:47:e5:37:53:b6:5f:f0:46:34:
         da:73:99:e3:62:31:2d:e9:90:2a:06:9e:05:04:b0:4f:70:27:
         71:e1:a8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:39:19 2024 by rpki-client on console-ams.rpki-client.org