Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File:                     2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier:          NJAmVu7FR24sx8kOqH2ZJjfVfc7Q8qRGJsR/biKDUaE=
Subject key identifier:   3C:13:43:E6:AF:DA:16:8F:97:02:F3:DE:8D:8E:82:51:4E:CD:48:55
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer:       /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial:       01901EC66D6B7BC5A1461658F94C4127C947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 02:00:38 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:38 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:38 +0000
Files and hashes:         1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: geY30qz4eQI9cWBKw2L9R9PYVQBf64seZncpnsE+g14=)
                          2: ABLd_GhkY3vakEeuFHvoMmFguBA.roa (hash: 3PTn1zmCH8kuJUSoOyMk4VBESvJfeeNo1ozAN35MB0Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:6d:6b:7b:c5:a1:46:16:58:f9:4c:41:27:c9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
        Validity
            Not Before: Jun 16 02:00:38 2024 GMT
            Not After : Jun 17 02:00:38 2024 GMT
        Subject: CN=3c1343e6afda168f9702f3de8d8e82514ecd4855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:d1:20:46:76:11:7a:bc:76:45:50:a4:c1:
                    4d:cb:5c:d1:87:5c:f9:6e:6f:dd:cb:f1:83:a5:96:
                    d6:4d:78:c8:93:d2:46:a4:43:69:d4:3c:e7:30:01:
                    95:16:51:2e:ee:13:ac:63:07:60:32:90:ba:69:fc:
                    90:a1:d0:da:62:24:8f:53:8f:b6:45:cb:b1:26:c7:
                    97:73:1f:45:2f:da:02:05:bd:b3:4f:9e:08:b0:5c:
                    7a:bd:7b:c1:7d:51:a6:27:68:3c:5e:ae:8f:80:3f:
                    bd:75:7b:ac:a4:71:22:96:4a:da:7f:ec:2f:23:e0:
                    f8:c7:75:35:0c:23:2c:72:94:ae:36:ac:4e:07:65:
                    22:51:e1:8d:39:ad:7a:6f:5e:01:b3:46:76:e3:8c:
                    85:7a:22:21:65:7e:25:f5:a8:c2:33:2c:fa:83:c7:
                    ee:32:11:96:b5:46:bb:63:29:f1:aa:25:8f:20:02:
                    da:6c:a8:21:17:e6:9b:1e:26:c4:48:40:77:e6:55:
                    d8:a1:37:9c:e1:9b:c1:a5:66:5b:eb:50:37:0b:4c:
                    86:b3:fd:70:fc:c1:82:33:1b:fe:ab:0e:f5:e4:a8:
                    23:1b:28:d7:e9:66:00:c8:73:1b:98:f7:01:9c:c0:
                    5a:5d:d7:21:4a:09:63:38:c1:d0:c9:3d:d0:c9:bb:
                    6d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:13:43:E6:AF:DA:16:8F:97:02:F3:DE:8D:8E:82:51:4E:CD:48:55
            X509v3 Authority Key Identifier:
                keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:5a:6c:f6:8e:51:5c:09:5c:7d:60:65:51:2f:d1:e8:4e:ab:
         dc:e9:b6:ba:8e:c6:aa:56:e4:00:0d:ed:b2:f7:d2:38:62:c5:
         96:d7:9b:f3:70:30:ce:20:ca:e7:62:75:52:78:00:6a:7f:7e:
         d4:da:83:36:82:ab:c3:1e:55:ef:79:92:27:bf:d7:41:2e:8d:
         3e:9c:f9:96:94:bc:3d:e3:16:68:84:34:3e:b7:a7:db:f4:eb:
         ce:2c:4a:f9:84:d1:a2:5c:b5:92:5a:d0:81:48:91:f6:ab:81:
         02:4c:23:7f:e4:a3:84:85:54:51:ba:6a:9d:1a:a4:1b:a9:37:
         c2:49:e0:e8:20:20:8f:86:11:73:e1:ca:c9:b2:07:86:05:64:
         f4:81:ee:a4:b0:80:93:6c:1a:65:c1:70:b8:92:e4:73:4d:a2:
         93:f0:fd:e4:cb:7c:82:98:15:76:78:ab:34:7a:1e:7b:eb:d2:
         ca:b2:26:a3:19:2c:c1:f6:a9:9f:9d:e4:a6:57:ac:1c:45:70:
         1b:a6:85:e1:3a:24:89:32:af:11:38:fb:fa:9a:ef:b6:09:3b:
         89:07:c2:0c:4d:2e:43:7c:d3:59:b4:c3:fd:f7:61:a7:b1:dd:
         ea:23:14:de:c7:ed:90:51:82:be:18:8e:d7:a2:e6:a9:f4:f6:
         8d:2e:b1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:16:09 2024 by rpki-client on console-ams.rpki-client.org