Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
File:                     Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft (raw, json)
Hash identifier:          PlHbD0sxPyPp/tL4GFhdC+J2Txuqr1GE6Rq6rRr0fKU=
Subject key identifier:   91:D2:E9:78:F6:C8:D4:FC:A7:62:4B:21:52:C1:93:86:50:6C:2A:6F
Authority key identifier: 43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98
Certificate issuer:       /CN=43668474e7bb3dbdb26adc01838ce7062d70c498
Certificate serial:       01901E21B3C47AF284E85F7B4D2FA6BFE759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 23:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:43 +0000
Files and hashes:         1: Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl (hash: GwbCT3CB/f/qXb/npWRR3Pk8AqMBu9+NdODn6/FEgHM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:b3:c4:7a:f2:84:e8:5f:7b:4d:2f:a6:bf:e7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43668474e7bb3dbdb26adc01838ce7062d70c498
        Validity
            Not Before: Jun 15 23:00:43 2024 GMT
            Not After : Jun 16 23:00:43 2024 GMT
        Subject: CN=91d2e978f6c8d4fca7624b2152c19386506c2a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:57:e8:bc:8d:ec:2a:45:e6:df:88:2e:d2:
                    fb:8e:d4:a3:7f:c5:cf:cd:f3:6a:78:f2:d6:55:05:
                    5d:59:41:b9:c6:74:48:47:73:d8:fe:b7:4b:b4:58:
                    0c:09:b2:97:1e:a2:7c:75:00:7f:60:20:dc:d5:2f:
                    a9:56:02:22:dc:de:17:ef:76:e7:ea:ac:ab:5c:fe:
                    45:a8:36:b5:59:7d:5b:f0:08:e0:c5:7f:f8:a6:d7:
                    fb:52:c5:a4:d9:0a:a4:bc:2c:93:cf:09:7e:0d:2d:
                    08:ca:3d:f3:45:b2:90:00:27:09:bb:9d:fe:bd:1d:
                    3d:5e:a8:50:c2:77:04:fc:99:68:4e:d2:83:b0:8e:
                    bc:96:d5:b7:6c:f1:e9:ee:05:fb:c8:7d:ae:fd:9d:
                    74:39:e2:04:70:b0:7f:a1:05:ca:17:58:5c:17:1f:
                    23:c8:b0:4d:d1:0c:8b:f3:b7:12:06:74:44:73:04:
                    86:80:ec:37:ba:2b:05:d4:4b:04:a0:38:2d:75:77:
                    11:aa:c1:f5:7b:8c:c3:05:fa:95:69:96:a8:0d:1e:
                    4c:1a:9a:3d:3c:bb:a7:69:b7:95:fc:a2:f7:2d:3e:
                    ab:1e:bb:4a:a4:48:76:77:28:a9:b9:15:8f:28:d5:
                    4c:83:ac:dd:c5:3e:e8:3e:c9:e9:d7:db:91:54:03:
                    7e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D2:E9:78:F6:C8:D4:FC:A7:62:4B:21:52:C1:93:86:50:6C:2A:6F
            X509v3 Authority Key Identifier:
                keyid:43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c3:a8:d7:46:7c:43:e6:39:96:a3:ee:6b:05:4a:aa:60:60:
         f2:95:5a:0e:9f:f8:e3:83:78:e5:95:ce:20:f4:f5:bf:1f:68:
         9b:40:9a:22:d9:db:2c:db:c1:04:cf:e0:12:01:b3:72:9f:6d:
         1f:9c:36:02:7a:65:a0:85:e3:50:6b:63:3e:8e:2f:39:2f:af:
         d8:2b:a4:f1:7e:2e:fb:05:ec:2f:9c:d2:02:ba:9b:fb:3d:25:
         6b:2a:4e:b7:8b:6c:9f:d5:2f:06:c5:bc:fd:85:64:2d:c7:83:
         b6:10:32:07:cc:e5:fa:b1:3a:ab:7b:b1:60:30:cb:99:dd:6d:
         68:a4:96:42:a5:7f:61:7e:01:72:87:e5:b4:f4:fc:18:dc:22:
         fa:d7:4a:32:64:19:0d:06:bb:5a:4e:90:a3:23:11:1f:81:5d:
         42:12:a1:91:8b:8c:cc:7d:74:40:40:2e:b7:5c:0b:85:2f:ca:
         e7:26:34:4e:bb:39:02:1b:15:54:ad:2c:1c:92:75:a4:d0:ab:
         11:15:0e:a0:82:93:2b:8c:3f:e4:f4:0a:ce:31:cb:b4:7f:6d:
         49:a7:f8:42:3e:7d:3d:85:c5:df:28:8d:26:31:85:5f:96:6a:
         97:01:61:c5:ac:a1:27:42:25:08:73:f1:de:00:90:66:fc:dd:
         53:32:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:09:08 2024 by rpki-client on console-ams.rpki-client.org