Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File:                     KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier:          49J10XTZP9o+mdFiZqyNkS+KO/7QSu+MrGsXBToXEQc=
Subject key identifier:   CC:34:54:71:E2:2C:90:DF:23:2C:EB:E0:CA:02:ED:EE:CE:34:36:6A
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer:       /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial:       01901E59329DCDDB4949D6A1F571C6B5E31C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 00:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:20 +0000
Files and hashes:         1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: iYRZQ6Dp8tQgLuAbYc5w8GoxmJles3kdDV3jz6XA8k8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:32:9d:cd:db:49:49:d6:a1:f5:71:c6:b5:e3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
        Validity
            Not Before: Jun 16 00:01:20 2024 GMT
            Not After : Jun 17 00:01:20 2024 GMT
        Subject: CN=cc345471e22c90df232cebe0ca02edeece34366a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:69:f9:70:ea:d6:d0:4f:fe:5f:25:9c:86:
                    93:6c:86:a4:34:09:c1:23:d7:e0:44:c6:bd:4a:b5:
                    80:ea:11:46:ef:23:5a:87:d8:b6:1c:07:97:61:ed:
                    c7:b1:e3:9b:b4:4d:51:08:f9:d2:56:6b:5a:14:11:
                    63:7d:d9:dc:6d:03:46:d9:eb:9f:f7:fa:b6:01:86:
                    48:7b:7d:01:1f:46:49:03:76:8c:8d:58:cb:dd:5e:
                    ff:96:18:2b:0e:5a:62:22:b6:b1:29:5c:5b:94:19:
                    56:ac:97:ff:a3:10:b8:cf:80:64:ac:db:9d:cc:00:
                    e7:26:e7:1f:89:90:b2:fb:88:d1:ec:a5:d3:17:6e:
                    ff:39:21:40:e9:f0:30:23:61:0b:a6:8b:63:56:6e:
                    17:89:01:3c:45:10:14:0d:16:fa:a1:89:bc:56:74:
                    fd:de:ea:59:b0:24:90:d1:78:83:a7:2e:cb:8f:3a:
                    89:44:73:e7:89:e3:9d:8c:09:61:4c:f1:78:01:ca:
                    c1:3d:c3:0d:40:32:6a:8e:8f:cd:8a:ed:1d:b1:a0:
                    20:70:b8:73:2e:cf:cb:3b:3b:a7:a2:9c:9a:6b:a9:
                    b0:22:e0:ac:e3:7a:15:e7:99:f7:10:4b:ac:b6:69:
                    d8:4b:78:79:6e:74:ff:5d:8a:34:98:97:15:86:cf:
                    4c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:34:54:71:E2:2C:90:DF:23:2C:EB:E0:CA:02:ED:EE:CE:34:36:6A
            X509v3 Authority Key Identifier:
                keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:0f:fe:77:c9:fa:43:5b:7b:9f:73:0e:a2:6e:76:47:ab:
         b7:bc:bf:1b:90:33:3d:88:3b:42:a1:2a:4f:2a:d7:c5:0f:55:
         1f:66:23:70:f5:35:20:95:d4:72:5d:79:be:79:34:6c:6c:37:
         be:c6:e9:f5:8d:cd:c4:50:85:94:08:2d:1e:d0:f3:ba:e5:77:
         39:1d:e1:98:8e:74:c5:e3:5e:3f:88:92:d3:e5:7b:33:9c:cb:
         bb:62:49:27:b5:44:84:6d:cd:b8:3a:f9:fd:34:15:7d:2b:cc:
         d1:29:f7:3d:d9:15:79:7e:27:6d:03:ae:40:5d:c3:f1:3e:ae:
         a1:e0:3f:65:26:fe:55:38:ca:8e:3c:f2:4f:3b:72:cc:dd:da:
         cb:e9:3a:1a:d9:bb:fb:49:86:f6:ef:73:72:f0:32:e7:34:fe:
         61:ac:0a:8b:c4:9e:c7:4c:a7:29:1b:57:22:27:54:87:4a:93:
         c9:37:67:67:26:fa:76:01:f4:06:b2:ed:10:df:4d:f6:22:c6:
         4f:f6:50:10:d3:d1:49:26:8a:8f:e2:cd:bd:8d:f9:ff:14:83:
         df:e4:1e:75:93:de:81:94:bb:dc:18:97:82:2a:68:30:15:86:
         90:c8:75:39:bf:08:47:0a:d0:ed:5f:ca:7e:1b:17:9f:09:c2:
         41:f3:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:15:01 2024 by rpki-client on console-fra.rpki-client.org