Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
File:                     KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json)
Hash identifier:          kwYmmGbWiPOJv4oyI7tDGY2Jxu3xgoc8B7RACGuZCc8=
Subject key identifier:   E5:B8:EF:97:86:82:5C:17:57:03:23:93:57:7A:BF:E6:38:FD:84:B2
Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
Certificate issuer:       /CN=2a7148c461f5e77e107af73566a27e343561dc1d
Certificate serial:       01901DEC153D545D96FBC5A6FC6A65506290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:02:09 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:09 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:09 +0000
Files and hashes:         1: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: hPM+zhexAgF8+hBAF1rA4iRBIg4nX9hnFn+NNyGO/nM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:15:3d:54:5d:96:fb:c5:a6:fc:6a:65:50:62:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d
        Validity
            Not Before: Jun 15 22:02:09 2024 GMT
            Not After : Jun 16 22:02:09 2024 GMT
        Subject: CN=e5b8ef9786825c1757032393577abfe638fd84b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:86:d8:98:1f:12:47:29:9d:c9:e4:75:7f:
                    5f:2d:77:e3:08:fb:1a:e0:36:87:c4:c2:9e:30:80:
                    7a:66:8d:88:b7:a1:ee:aa:97:67:79:f7:f1:0d:0c:
                    b4:22:b4:f8:55:29:c8:84:4b:57:55:59:8e:b8:a8:
                    e7:60:f9:8a:de:2a:79:f7:92:54:b3:d3:8a:b2:ca:
                    cc:4a:f2:4c:5b:e0:3d:91:15:f0:34:a0:6d:b7:28:
                    ec:a0:63:d3:d5:26:7d:25:a0:f7:40:e1:23:6a:f2:
                    a4:53:dc:0a:0e:e8:e4:a0:a3:ba:a3:4a:c1:2a:8e:
                    a1:a4:4a:de:02:58:a0:8e:43:9d:33:23:5b:ee:94:
                    a8:05:4d:39:c8:1d:12:9e:7f:db:14:22:d4:bf:42:
                    35:a0:75:f2:16:3c:84:2b:b5:c9:81:07:b0:df:ce:
                    bc:e9:7c:4e:47:04:ce:c1:89:59:06:55:c7:a9:13:
                    af:ad:28:29:e0:41:4e:68:f7:09:4f:ba:39:b7:97:
                    74:d2:58:59:e1:b6:6d:af:98:7e:8e:a0:ca:63:59:
                    db:39:5e:54:d2:21:b4:54:86:59:1d:8a:2e:97:76:
                    ff:1b:89:76:25:f4:a7:bf:ab:fe:92:93:09:00:74:
                    2a:ec:8e:dd:c6:10:d8:c1:41:9f:96:a4:d1:28:27:
                    6e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B8:EF:97:86:82:5C:17:57:03:23:93:57:7A:BF:E6:38:FD:84:B2
            X509v3 Authority Key Identifier:
                keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8e:a5:7e:17:21:5e:63:30:d3:b0:7f:d8:fb:15:c4:e6:f4:
         4d:de:4a:b2:cc:dc:cb:0e:c0:94:32:75:0d:30:b3:70:bd:37:
         72:2b:a0:0b:8f:e6:06:b4:67:d1:2d:96:43:c9:60:a1:a1:e5:
         1f:7c:8a:69:f1:d2:b0:22:a1:5d:48:6e:bc:10:be:ee:b2:c3:
         ad:03:b5:79:5f:b5:02:c5:1f:d6:b8:bb:58:cc:a0:67:1c:b7:
         25:31:1d:27:73:f6:4f:cc:74:fd:33:c9:e5:e0:7d:ee:b7:e6:
         ea:cc:ba:27:e5:11:55:4f:e5:24:7d:98:bd:82:1a:5f:07:e6:
         eb:e9:ca:0c:c6:f2:4c:35:db:aa:e2:41:a8:d0:b6:0e:9b:06:
         4d:38:36:35:0a:b0:af:30:f0:04:32:4d:38:76:b9:1d:79:0e:
         f6:b0:f6:72:a8:33:c3:d9:dc:34:8d:8a:bb:64:80:ce:24:89:
         e2:ce:4f:41:bc:b9:3a:8d:f8:80:e1:b9:ef:52:e8:d3:6e:ce:
         45:fb:c1:ee:cb:95:69:93:ef:b3:d0:8c:4a:d5:e5:97:73:f4:
         90:da:da:09:e1:c5:28:47:84:09:10:2b:49:00:af:05:24:9b:
         81:ff:cb:2c:b3:3b:63:74:18:d7:11:2a:fb:8c:cb:49:11:1e:
         73:ec:7c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:08:22 2024 by rpki-client on console-ams.rpki-client.org