Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
File:                     SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft (raw, json)
Hash identifier:          vBWnYtINqYI1jCDRBel5rds+wahg5I5WQYYEre7zQBo=
Subject key identifier:   CC:18:7C:57:05:C0:4E:93:BB:E6:DD:02:12:40:A2:E0:14:83:16:CC
Authority key identifier: 49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B
Certificate issuer:       /CN=4911e41f8bbee80c655c153f28a819d016c8271b
Certificate serial:       01901E8FE994FE2E17C19E9BB1A62A8EAD79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
Manifest number:          0650
Signing time:             Sun 16 Jun 2024 01:01:06 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:06 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:06 +0000
Files and hashes:         1: SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl (hash: hfBM3CVgAPtPmGTMQ2ukjwKXNglHM9XLSf0+tBRxXXU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:e9:94:fe:2e:17:c1:9e:9b:b1:a6:2a:8e:ad:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4911e41f8bbee80c655c153f28a819d016c8271b
        Validity
            Not Before: Jun 16 01:01:06 2024 GMT
            Not After : Jun 17 01:01:06 2024 GMT
        Subject: CN=cc187c5705c04e93bbe6dd021240a2e0148316cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:3e:aa:d1:c5:9d:6a:ac:68:33:6e:3d:18:
                    f3:85:8f:6b:1c:81:18:b0:03:6f:04:cc:61:14:8a:
                    0a:b3:c6:65:d8:c8:b1:32:b4:49:50:13:e4:2d:47:
                    eb:a6:c6:ae:f8:4e:a3:ea:f8:9e:9c:b5:82:f5:d1:
                    e9:2d:b6:c2:8c:1e:e3:5e:42:6b:8c:2e:12:f1:04:
                    3b:3c:9e:0e:e6:2d:02:89:aa:22:ff:26:46:e5:c6:
                    7a:5d:28:8c:a5:67:e7:9c:0a:cf:38:9c:21:34:b8:
                    47:d9:d7:76:79:97:ce:7b:05:51:da:6f:75:a1:1c:
                    cd:2c:50:f2:68:40:aa:01:2e:84:54:94:f8:a2:54:
                    e0:98:6b:c5:eb:00:83:5f:eb:a7:7a:36:b9:c8:8c:
                    bc:c9:14:58:04:eb:fd:26:ac:13:9c:b4:4d:ec:85:
                    d8:02:cc:75:1f:eb:e9:c9:6b:62:06:a3:01:d6:37:
                    97:d4:45:5f:43:fb:d9:f0:6b:e6:b2:05:05:6a:a0:
                    7b:39:cc:9e:03:bf:21:f8:d0:b9:78:62:0a:c5:dd:
                    ab:14:14:53:16:bd:11:21:73:86:86:a3:42:ac:32:
                    95:e9:f8:cc:71:42:c9:26:f5:eb:91:e8:3f:48:2e:
                    fc:4b:f1:78:2f:d9:74:82:f9:5a:2c:31:8a:81:92:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:18:7C:57:05:C0:4E:93:BB:E6:DD:02:12:40:A2:E0:14:83:16:CC
            X509v3 Authority Key Identifier:
                keyid:49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:96:7b:27:bf:58:a9:bc:88:20:02:da:46:a4:58:bf:a3:
         fb:ee:e0:a0:ba:8b:9f:08:30:e3:fa:6d:ac:95:fb:13:ee:ee:
         39:e2:b0:15:8b:1d:5d:78:72:ce:37:6b:9d:2f:10:6a:f8:fe:
         eb:7e:50:a5:ce:ec:eb:c9:21:b5:5f:ff:fb:a1:21:bb:ce:13:
         d5:cf:9e:1f:1b:75:3c:4c:44:84:10:6f:ed:28:1a:e1:b2:59:
         17:4e:23:3d:5c:44:9a:07:a7:8e:2f:9d:60:be:f0:59:c1:0f:
         3b:ab:6b:a3:8e:42:b0:91:57:ab:86:4b:be:dd:f5:ae:43:62:
         ad:1f:c9:ed:a1:e2:18:d4:10:59:8c:3b:28:3c:e9:4b:3c:73:
         82:26:c2:08:02:28:95:aa:7e:52:91:71:85:88:b8:1c:3c:3d:
         7a:f6:33:88:15:c9:43:87:22:6d:04:61:22:75:f8:c0:fa:b0:
         84:27:28:f3:fe:6d:93:45:f8:1e:9e:c8:9e:20:12:0d:08:58:
         ae:78:f3:52:c1:b8:05:37:2a:79:3d:e4:df:f0:77:f3:5d:34:
         52:f9:b2:c7:fa:d7:0f:b4:69:35:51:5a:cf:96:1a:af:2f:94:
         28:06:c7:7e:77:8a:0e:0a:60:2a:98:e8:99:c2:a3:a0:c5:cf:
         61:f6:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:07:34 2024 by rpki-client on console-ams.rpki-client.org