Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.mft
File:                     Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.mft (raw, json)
Hash identifier:          q463zfoDXTftkBPkLpYP4m4nBLhcOGr6MrwQMR5UGVw=
Subject key identifier:   B5:DE:87:71:AA:55:82:C3:A7:CA:02:E8:75:6D:12:66:B1:AE:C0:18
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Certificate issuer:       /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial:       01901E8F91E95E7F572311366CBE93A3B2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.mft
Manifest number:          11DD
Signing time:             Sun 16 Jun 2024 01:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:43 +0000
Files and hashes:         1: Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl (hash: IWK51nwNTDOB5szG0Oj+UlzuuaaNvIBO4hlh08Pzff8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:91:e9:5e:7f:57:23:11:36:6c:be:93:a3:b2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
        Validity
            Not Before: Jun 16 01:00:43 2024 GMT
            Not After : Jun 17 01:00:43 2024 GMT
        Subject: CN=b5de8771aa5582c3a7ca02e8756d1266b1aec018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:70:00:fa:93:1f:1a:ea:f7:01:2b:dd:98:
                    17:04:ff:28:13:a9:58:b4:b9:59:0a:ba:5d:7d:cd:
                    f2:a0:df:b7:da:f8:75:f7:da:91:b2:43:ad:d0:5f:
                    b5:a5:2e:3c:93:af:cb:40:b3:98:0e:1f:93:4a:8f:
                    ac:7e:c6:bb:58:f3:cd:dc:0b:c9:38:f6:9a:a9:cb:
                    26:76:aa:cc:6f:ba:73:df:7d:f6:29:69:13:f7:d6:
                    60:97:93:75:06:5e:99:7a:fa:38:66:36:46:1a:1b:
                    ba:c2:1b:94:fa:dc:20:b1:90:2d:e8:7c:a2:ba:35:
                    44:e2:98:24:6d:0f:68:43:72:19:35:d2:19:ea:bd:
                    93:bd:96:94:d6:d7:c2:8f:08:9e:c1:84:89:ba:f1:
                    d7:55:51:fd:29:ca:02:d8:67:5c:86:48:27:b7:96:
                    1b:36:18:b5:7d:fd:ee:cf:c9:31:6a:51:3d:a2:0f:
                    b3:4f:da:e1:93:22:05:1e:9d:8b:90:78:67:94:e4:
                    34:0c:a2:1c:99:67:c5:f4:29:77:8d:a7:7b:96:08:
                    2e:b3:f2:af:b8:ec:2d:bf:c9:62:d7:98:bd:9f:ca:
                    63:57:a2:e4:1f:e1:a6:a8:fb:7e:0a:96:be:e6:58:
                    d4:68:5f:ed:ea:aa:ec:5e:5c:f7:6d:9d:bd:98:92:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DE:87:71:AA:55:82:C3:A7:CA:02:E8:75:6D:12:66:B1:AE:C0:18
            X509v3 Authority Key Identifier:
                keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:28:c5:c5:97:9e:d5:95:46:f7:c7:2a:67:3b:e1:34:0e:f0:
         7b:2b:cc:63:6f:a9:73:37:33:fe:45:d9:32:7f:81:72:47:76:
         d5:fa:93:cc:6e:5b:cf:68:9d:12:69:05:34:fa:cc:9a:12:0e:
         4f:4b:8a:02:a8:89:e1:61:94:42:88:95:65:b9:fc:fd:3e:24:
         1d:67:e3:60:8a:00:70:3e:d2:fc:e0:23:20:4f:d7:97:48:19:
         31:ee:f6:c3:cd:1d:17:5d:7e:7c:eb:9c:b8:91:d9:4c:41:e7:
         1b:bd:e2:12:77:80:d5:07:00:f3:88:42:d8:03:87:19:f3:c2:
         e6:e8:a6:ce:c2:b1:8d:b5:2a:38:22:2a:95:c8:d5:a5:17:ab:
         ec:50:0f:8d:67:03:8c:80:14:d2:25:b7:a6:ef:8f:6c:93:4f:
         2d:8b:94:a1:cd:81:af:c3:a4:99:d2:43:7a:14:79:dd:2e:68:
         17:15:b9:e7:8a:9d:3c:ff:ae:9b:5a:42:1b:7e:01:59:54:11:
         16:0b:eb:5a:82:05:d2:28:ab:35:60:f1:be:10:d6:05:82:2e:
         34:9f:de:64:d8:15:cb:9d:3b:c0:35:6e:c0:f4:75:6a:90:90:
         88:3d:de:25:4e:ef:e4:d4:8b:78:55:17:4a:f8:7c:89:09:40:
         c4:79:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:11 2024 by rpki-client on console-ams.rpki-client.org