Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
File:                     kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json)
Hash identifier:          tiFyRPeXnHbqhPdLtEazqz3q/+Q9GgDlowyF2KFd4kc=
Subject key identifier:   6A:20:C0:80:E5:C2:83:20:E7:B9:A6:49:0B:7D:69:3B:76:A8:99:90
Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
Certificate issuer:       /CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Certificate serial:       01901E58E3691D3FC1C1F71B78EA26F528BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 00:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:00 +0000
Files and hashes:         1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: PzbCLXBea8ssk4OthJsXr5Bu/S2P4O+VIQuF6j1cbkw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:e3:69:1d:3f:c1:c1:f7:1b:78:ea:26:f5:28:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163
        Validity
            Not Before: Jun 16 00:01:00 2024 GMT
            Not After : Jun 17 00:01:00 2024 GMT
        Subject: CN=6a20c080e5c28320e7b9a6490b7d693b76a89990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:1a:cd:4a:5b:7e:e8:12:21:c0:6e:fe:4c:
                    3b:57:f1:8d:4c:3a:1a:f9:61:9b:a2:0c:d4:a1:43:
                    74:f3:d0:bf:e4:6b:a4:f7:fc:5a:ae:52:ca:70:e8:
                    a6:37:0a:70:2a:6e:ca:cb:20:f0:37:fb:21:37:b9:
                    93:d7:4b:35:ad:ba:b5:0d:2b:3c:6c:64:2c:f6:48:
                    8d:4a:eb:2e:a9:53:31:2a:9c:b7:d9:a9:f1:e4:63:
                    70:f3:87:18:bc:79:35:82:d1:29:be:50:30:1a:22:
                    ba:30:81:e0:94:f3:9c:4e:7c:13:0b:a0:44:c8:09:
                    57:51:5c:4d:3a:4f:9b:cd:68:60:c0:e1:e5:ef:8b:
                    e7:f1:25:d0:79:48:b9:ca:50:50:2a:24:f2:83:a6:
                    c0:0a:44:3b:8d:b0:66:9a:c1:bc:10:33:7b:98:86:
                    44:b7:dd:cf:b2:b3:40:44:4b:fb:a0:8a:77:2d:d7:
                    ce:a4:01:06:ec:0d:be:3e:5c:8d:49:ae:06:a1:ba:
                    a2:e4:4c:83:93:e5:2b:24:fd:37:2b:5c:9c:61:f1:
                    d0:47:c1:31:57:d7:59:8e:15:ee:0f:25:15:17:62:
                    f1:fd:66:e9:5a:a3:2b:01:4b:8b:05:eb:15:b9:6c:
                    64:8b:a9:ff:6d:0d:40:0d:3a:1f:c3:ff:d1:8e:15:
                    8d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:20:C0:80:E5:C2:83:20:E7:B9:A6:49:0B:7D:69:3B:76:A8:99:90
            X509v3 Authority Key Identifier:
                keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:ee:9b:c9:b5:79:05:97:6b:10:b6:d2:e3:1b:47:ae:90:
         1a:f6:e3:b7:ba:b3:bc:cd:10:49:c5:22:c0:d7:75:c7:8e:57:
         c3:15:62:36:bc:3c:9b:0c:81:6e:b4:c9:db:f8:c5:59:38:1e:
         5e:d4:8a:d8:77:72:3d:c3:9a:e8:82:18:c1:e5:2d:da:f3:d3:
         9c:ef:4e:9e:f9:97:fb:96:dc:41:61:68:05:cc:9f:f4:08:85:
         a7:11:ae:36:b5:e3:ae:18:ec:70:c3:af:22:b3:a9:a2:e2:09:
         28:7d:5c:99:90:f0:07:6f:79:af:66:05:77:49:d9:65:1a:49:
         f1:de:6e:b0:57:c6:66:bb:93:32:00:ac:f2:bc:80:35:d2:ec:
         4f:91:f7:b3:e8:d6:39:ba:3e:7c:f1:4f:cd:97:5d:77:3f:60:
         6b:ce:f0:d7:da:e7:ea:35:17:e3:24:43:8b:c0:0d:b7:eb:c8:
         ff:5f:7e:46:4a:ab:e4:7d:82:b1:91:bf:be:f8:e1:83:b0:08:
         aa:7a:0f:a3:ec:29:0f:10:fe:d1:0f:c5:58:25:bd:d9:64:84:
         2c:ea:1d:3c:f4:4d:c1:30:31:1b:10:97:95:0f:d8:16:96:36:
         9c:17:34:51:fe:a3:cd:38:0a:ca:1d:bc:66:11:d0:a0:42:bf:
         9c:64:08:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:38:35 2024 by rpki-client on console-fra.rpki-client.org