Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File:                     nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier:          uVXm3oA5GkrSat4le3gNkal7eR/kNo31iZ1ZXju4Lr4=
Subject key identifier:   21:95:BE:69:60:6D:C8:22:39:5E:74:9F:53:7D:69:DD:0B:BB:38:A9
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer:       /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial:       01901B58358E60B14058FD951F8E8869995A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number:          01AB
Signing time:             Sat 15 Jun 2024 10:01:24 +0000
Manifest this update:     Sat 15 Jun 2024 10:01:24 +0000
Manifest next update:     Sun 16 Jun 2024 10:01:24 +0000
Files and hashes:         1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: BCmO4E1/dOueOG99CCUvQn8NLaYMpdgaN4214Iqrlvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:58:35:8e:60:b1:40:58:fd:95:1f:8e:88:69:99:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
        Validity
            Not Before: Jun 15 10:01:24 2024 GMT
            Not After : Jun 16 10:01:24 2024 GMT
        Subject: CN=2195be69606dc822395e749f537d69dd0bbb38a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:3b:35:a8:ee:35:f6:92:c5:66:7e:d9:7d:
                    12:f7:12:bc:85:d1:29:2d:1b:94:59:3d:c9:a6:e0:
                    ac:da:bd:5f:e2:3b:11:43:ad:d7:c9:bf:ea:8d:58:
                    a3:a0:79:23:47:78:09:49:8d:75:f3:a5:f0:ab:29:
                    1d:b3:6f:9f:81:43:7a:b0:d5:e1:2c:56:bc:ba:86:
                    87:2b:51:29:02:86:42:c6:f8:50:2c:83:de:3d:63:
                    c8:53:e8:7c:af:8d:95:4b:2f:86:0c:72:6a:16:bc:
                    f4:00:3e:bb:6e:e8:67:90:08:49:72:ed:c8:6d:7d:
                    02:cb:4d:0f:7e:63:b3:1a:fb:64:9e:17:11:e5:70:
                    e0:0d:bc:52:d9:7a:94:ab:43:32:14:55:e6:ed:9d:
                    a0:38:81:09:9e:41:33:14:96:ae:2c:65:bf:31:1e:
                    ed:e0:fc:f9:cc:5a:6c:fb:14:12:60:b5:46:ae:ad:
                    36:6c:0b:2d:3a:79:5d:4b:c8:72:0f:db:85:04:1b:
                    27:ed:af:fe:a6:48:0d:d9:e5:17:0e:a8:a3:4e:83:
                    6c:fa:28:24:7b:cc:81:01:a0:e8:45:e1:9b:7c:4c:
                    0c:57:0a:64:cb:d2:48:45:60:9f:6a:2a:e9:36:c6:
                    43:a5:e4:c6:c5:d6:c1:98:f7:71:d6:2e:1d:7a:a2:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:95:BE:69:60:6D:C8:22:39:5E:74:9F:53:7D:69:DD:0B:BB:38:A9
            X509v3 Authority Key Identifier:
                keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e7:3c:80:ae:f5:c3:a6:8f:7a:5d:8e:db:0a:3d:7c:0f:6d:
         6a:46:4e:d5:cf:e9:58:64:1d:d7:fb:d8:91:66:53:ae:d1:fa:
         78:b1:4e:eb:43:c9:a9:bf:e8:0f:a5:c5:40:17:17:b1:33:5b:
         be:4f:f6:ae:01:81:9d:7c:f2:b3:4b:7e:85:09:45:99:4e:ae:
         75:ef:d9:b6:98:6d:91:81:ae:e7:70:02:e7:0b:91:bf:a8:de:
         0e:5e:68:0a:f1:a9:21:3b:e7:14:b5:e7:26:3e:da:14:c0:0a:
         42:36:b2:eb:9d:52:d0:40:c7:bc:d6:be:d1:2a:fd:5d:4e:12:
         b7:0d:8a:be:35:97:d7:74:43:50:23:4a:3c:24:c4:0a:31:a3:
         4c:56:df:4d:d9:15:f8:77:01:85:f2:d4:c0:78:b8:46:ba:67:
         c6:66:1a:59:bb:6f:3a:90:5d:05:cc:7f:03:13:c4:34:8e:60:
         08:50:ff:a1:77:a0:03:60:df:c6:57:31:cd:63:60:96:9c:0a:
         bd:3d:f6:77:fa:f2:91:09:72:bc:81:67:b9:99:10:c0:3e:fd:
         76:1d:7b:75:45:c2:bc:48:3f:f1:4b:ef:ed:9b:b1:c5:0f:b3:
         ed:92:0c:72:35:be:d2:b4:f6:89:5d:cb:32:e5:14:90:95:dd:
         c5:eb:f1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:47:27 2024 by rpki-client on console-fra.rpki-client.org