Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File:                     bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier:          ChOYM5JWuX5wYEuyKzeie9uzR3gS/6zCKZEf8IELXDA=
Subject key identifier:   04:E5:EB:73:2A:CC:75:48:A0:FD:5F:F4:7D:CE:BA:9F:26:1E:3A:5E
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer:       /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial:       0190411BEF3147A7DAA502F718A9C0AA7B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number:          11D4
Signing time:             Sat 22 Jun 2024 18:01:08 +0000
Manifest this update:     Sat 22 Jun 2024 18:01:08 +0000
Manifest next update:     Sun 23 Jun 2024 18:01:08 +0000
Files and hashes:         1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: YjCR0UgJASWdp64s14vFP2JIdP/6xmwC3AOcv1ATick=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:ef:31:47:a7:da:a5:02:f7:18:a9:c0:aa:7b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
        Validity
            Not Before: Jun 22 18:01:08 2024 GMT
            Not After : Jun 23 18:01:08 2024 GMT
        Subject: CN=04e5eb732acc7548a0fd5ff47dceba9f261e3a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:f2:e7:64:61:5b:cf:f1:91:51:22:d6:ec:
                    1b:8d:17:6c:c2:13:0c:07:cf:88:5e:5c:eb:89:41:
                    15:3d:1a:19:5a:5c:fc:2e:a8:a1:86:05:16:b9:7b:
                    ca:9d:8f:13:ff:c3:10:72:51:86:96:82:a6:39:59:
                    0f:92:64:ad:23:b9:5c:3a:66:bf:dc:1e:4e:85:ab:
                    ed:10:ac:5f:7b:7a:ad:3c:ad:e0:97:02:04:71:d6:
                    76:59:9d:c8:74:36:ee:fc:33:c5:b9:86:24:ca:3e:
                    3f:76:f3:35:2b:98:23:27:38:55:a4:59:82:3e:41:
                    6d:40:8c:51:35:5b:ea:c6:1b:e8:5f:c6:9e:a5:1e:
                    a4:60:63:4d:38:71:a3:b4:b2:2b:7c:1c:10:f7:04:
                    11:1b:4a:93:31:51:e6:5f:02:52:96:32:0f:2e:fb:
                    f4:41:87:01:a1:9f:44:1e:8d:85:16:57:d0:0f:f6:
                    28:66:9b:40:9c:eb:96:f1:39:12:e4:3d:6a:05:f3:
                    a1:cd:8e:2d:53:93:d4:c2:81:b2:79:87:a4:da:9a:
                    b0:64:3a:37:29:aa:df:44:fc:98:5e:03:94:95:3c:
                    19:fd:be:2c:a5:3d:76:57:05:1c:ab:62:84:50:5d:
                    d8:44:4b:af:d7:42:7f:b7:d1:45:cb:cf:84:40:70:
                    49:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E5:EB:73:2A:CC:75:48:A0:FD:5F:F4:7D:CE:BA:9F:26:1E:3A:5E
            X509v3 Authority Key Identifier:
                keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:63:90:99:07:e5:6a:7f:02:b7:3a:44:24:cc:36:5b:ce:f3:
         46:c1:68:e2:63:6f:c0:fb:02:a5:df:55:e9:79:9d:27:1f:3f:
         dc:4d:dd:16:ee:17:64:73:b0:97:16:e6:2c:b0:eb:88:25:8e:
         84:18:60:8b:ea:dd:dc:f2:8d:00:0e:fc:14:73:8f:3f:b6:01:
         d6:95:4a:9b:e5:9d:a1:2f:77:e7:45:62:8b:06:75:39:c7:7f:
         31:a7:42:86:4a:78:b4:c4:1e:ed:42:e8:20:d3:bb:2e:d0:79:
         e3:a9:eb:85:7f:5c:1c:a3:a1:a8:dd:33:97:1a:f3:19:9e:91:
         ca:b7:35:da:dd:19:71:03:fe:e2:5e:23:18:45:5d:e5:6b:34:
         63:e4:b3:6e:52:be:86:92:95:6c:95:50:5c:64:a8:23:bd:62:
         0c:15:84:26:5f:31:d9:0d:c9:35:4f:2e:dc:ce:e1:15:bd:20:
         9a:aa:3c:72:74:0b:35:a5:67:20:30:84:be:c4:15:19:05:e7:
         15:6c:c2:a9:c9:86:da:b3:06:96:40:1c:20:b2:d7:89:20:bd:
         fe:56:40:b6:b8:68:a5:48:6b:45:8c:56:f1:ba:a2:5e:c9:94:
         aa:d3:fb:13:a7:a5:4a:27:e2:c2:5b:34:00:6a:93:ec:e8:91:
         b8:85:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:13:12 2024 by rpki-client on console-fra.rpki-client.org