Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
File:                     pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft (raw, json)
Hash identifier:          L+YvlHAPTFGRFpTwyyaU+Dv9xTQVWFQWPMKr9ekbhR8=
Subject key identifier:   0F:DD:35:77:87:9C:79:E9:70:4B:DE:7B:C3:D5:9B:1C:CA:2B:5D:66
Authority key identifier: A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
Certificate issuer:       /CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Certificate serial:       01903705AB9BD7AF41B340A1A1841A6EF877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
Manifest number:          11CF
Signing time:             Thu 20 Jun 2024 19:00:36 +0000
Manifest this update:     Thu 20 Jun 2024 19:00:36 +0000
Manifest next update:     Fri 21 Jun 2024 19:00:36 +0000
Files and hashes:         1: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl (hash: +ip4LKzrlzvZs85zIWWTMJkvsgfUYXXKT0UbwGU+0Bw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:05:ab:9b:d7:af:41:b3:40:a1:a1:84:1a:6e:f8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
        Validity
            Not Before: Jun 20 19:00:36 2024 GMT
            Not After : Jun 21 19:00:36 2024 GMT
        Subject: CN=0fdd3577879c79e9704bde7bc3d59b1cca2b5d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:58:69:11:95:55:5d:52:ed:c3:10:41:14:5b:
                    e6:38:80:41:d0:e4:02:76:d7:ba:d2:f4:18:21:7f:
                    e7:11:06:28:86:67:24:49:ab:2f:6f:4a:66:db:8b:
                    c1:b3:50:f8:86:eb:a5:22:8e:67:1f:74:43:3a:08:
                    ce:3f:a0:34:a8:ba:48:b1:78:c7:56:62:02:44:ab:
                    af:02:ab:7a:55:39:4b:0f:d0:a5:81:59:51:79:23:
                    61:2d:42:01:72:0b:fa:af:fb:a8:5b:cb:a2:b7:a4:
                    cc:19:31:b6:b7:67:05:c8:57:65:36:f3:87:51:fa:
                    17:8b:79:e7:75:2a:f3:57:d7:cf:d5:be:04:25:c1:
                    de:6a:db:19:04:81:ae:c6:62:58:1b:82:87:bd:58:
                    60:5e:6e:00:65:f7:1d:55:a2:ab:16:0b:1f:b0:5a:
                    4c:c0:a2:76:e5:57:12:ed:21:c2:4d:ab:37:a9:3f:
                    70:26:2b:15:8f:66:09:51:7e:c7:ec:8d:42:26:9f:
                    1c:bb:17:5a:ff:9f:74:41:28:ad:bc:a9:90:6d:5d:
                    30:fa:11:af:be:12:94:bf:cd:a2:c6:0c:5e:64:3f:
                    38:89:54:95:f8:11:6b:4d:75:fd:f6:e7:0e:e3:db:
                    83:86:b4:ec:1a:f1:0a:28:a5:e9:74:78:ed:50:ad:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DD:35:77:87:9C:79:E9:70:4B:DE:7B:C3:D5:9B:1C:CA:2B:5D:66
            X509v3 Authority Key Identifier:
                keyid:A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e5:c1:72:cd:68:6a:81:28:6e:b9:47:fd:3d:dc:bf:38:a9:
         99:f8:85:f5:ff:62:32:cc:b5:64:60:81:08:ff:03:8f:c7:22:
         60:95:bc:2d:df:01:13:27:28:e6:b9:69:26:6b:ea:43:83:2e:
         7a:80:62:2f:c2:cb:06:c3:fb:56:bb:ae:43:22:84:63:d3:3e:
         f5:d0:b5:fc:8a:be:fc:bc:57:c3:ff:e9:5c:26:32:c9:64:68:
         33:58:d0:90:54:8f:bf:34:c1:08:84:99:aa:aa:22:c4:af:4c:
         7c:fa:81:23:65:56:86:27:27:45:f0:81:05:09:3f:ab:ea:51:
         60:e9:5f:3f:35:98:9b:48:43:52:60:96:00:99:4a:43:85:45:
         77:c3:cc:d6:a7:68:c8:2c:90:79:7a:11:ce:e7:3f:61:99:8c:
         77:e7:4d:66:d5:0c:6d:24:b5:b9:98:2e:0c:92:4e:81:ee:84:
         76:71:d6:5d:9b:eb:4a:2a:6d:6a:60:b7:97:32:8e:1e:c5:2f:
         eb:d1:a1:f2:64:13:12:82:af:d5:2a:e4:3f:0e:ea:b0:8a:bc:
         3a:c5:17:e8:80:54:16:7c:2a:13:e8:dd:96:e9:1e:3f:6c:dc:
         eb:53:c2:c6:c1:3d:3f:c6:90:40:40:d3:a7:67:91:32:4c:4a:
         6d:9c:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:39:28 2024 by rpki-client on console-fra.rpki-client.org