Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File:                     2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier:          Zx5BVN9RWt5gUcY8uCsksYB4Oggzj0oMm4LTcrODS8g=
Subject key identifier:   62:45:8C:6A:20:86:9B:95:AC:40:F1:2D:07:AD:B0:41:52:F9:7E:05
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer:       /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial:       01901D46019A74E29CA853163A24B52A03EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 19:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:45 +0000
Files and hashes:         1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: KK0etMwcDOgNOFJoHtwPZ4nYkflKXkFiDsCqLYk/D7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:01:9a:74:e2:9c:a8:53:16:3a:24:b5:2a:03:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
        Validity
            Not Before: Jun 15 19:00:45 2024 GMT
            Not After : Jun 16 19:00:45 2024 GMT
        Subject: CN=62458c6a20869b95ac40f12d07adb04152f97e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:ef:14:04:0e:eb:eb:ba:ac:0a:31:05:6c:
                    a1:37:a5:65:0a:9f:67:4e:3b:b1:33:98:ba:a3:79:
                    da:14:a5:ad:02:a0:b5:b6:ec:0d:83:ba:dd:2c:61:
                    53:3b:a7:57:a1:2d:0e:b1:a3:43:3f:1c:27:fc:4d:
                    e6:af:80:71:e5:9a:24:a2:f2:2d:80:8f:d9:ef:c4:
                    43:12:2f:a5:0c:19:5c:b0:06:d2:23:8b:ee:77:e1:
                    6c:10:44:df:2d:4b:d8:07:79:ef:ca:cd:ad:55:80:
                    d5:1a:d3:10:cf:a4:15:29:33:60:81:95:f8:4d:b2:
                    e9:c0:5d:b5:43:a1:00:48:32:2c:d1:0e:fc:c1:6c:
                    00:85:c4:e5:93:7c:fd:e6:ae:96:a6:f0:04:62:61:
                    e4:a0:fc:ab:21:c0:35:ca:cc:0d:a2:0e:87:db:e6:
                    52:f7:ba:29:2e:8f:7b:eb:2d:c3:e1:80:42:44:d1:
                    39:28:60:5a:19:ba:84:83:59:9c:00:39:81:fa:c4:
                    2a:94:b8:cd:91:81:92:f1:8f:91:55:dd:d2:20:0a:
                    ee:65:96:c2:df:b0:0b:54:38:24:b6:c2:b1:f4:b4:
                    79:c3:05:91:ee:d9:65:25:69:37:f4:ba:c7:3e:8f:
                    b5:07:c4:5a:32:00:f0:59:cf:30:c4:03:27:1c:e7:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:45:8C:6A:20:86:9B:95:AC:40:F1:2D:07:AD:B0:41:52:F9:7E:05
            X509v3 Authority Key Identifier:
                keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:04:b7:eb:50:14:ce:d4:dd:06:36:23:33:64:78:81:5a:65:
         c6:43:3a:5e:b9:b4:bd:53:65:32:0d:91:6d:5e:dd:9b:f4:99:
         04:4b:28:1d:ab:89:c0:80:34:c4:bd:7c:1c:ba:80:a2:0b:da:
         c1:b4:e7:2d:a1:2d:2f:33:d8:2c:06:68:09:33:2c:be:41:fd:
         ea:c4:d8:24:ae:34:86:a7:e9:3c:59:e0:3f:c6:d2:25:ef:fc:
         06:cb:c5:32:d0:71:b5:71:e7:a7:f3:b6:7a:ff:06:73:29:57:
         31:0b:9f:a1:b5:20:ee:f9:97:3d:69:08:8f:05:af:36:32:44:
         93:ad:c0:c1:8d:ff:52:06:72:69:17:87:61:73:24:2b:31:e6:
         10:a2:fe:39:8e:b8:7d:14:17:f6:11:8e:11:b2:e3:28:10:26:
         92:98:dc:60:52:2e:a3:55:31:35:d0:a2:f1:dc:69:bd:36:c2:
         ac:7b:ed:df:39:11:07:a5:2f:9c:7a:18:c9:f8:e1:af:5b:c4:
         39:28:45:7d:b8:89:a5:a8:f2:b2:dd:ac:12:f3:66:b2:30:07:
         75:59:43:3d:d7:dc:9b:0d:fb:03:65:ce:73:c0:e8:d1:21:c3:
         74:38:ff:d4:f6:16:df:2a:fd:5b:ab:10:b7:b1:aa:f0:0e:49:
         4b:2c:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:23:08 2024 by rpki-client on console-ams.rpki-client.org