Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File:                     7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier:          xG3PCeKZHCLK0XtdxAWbY0ao0+zL3fOCeFJ0QHWT2K0=
Subject key identifier:   0B:38:F8:F9:31:2A:61:81:2A:36:FF:75:60:87:F5:A6:73:EA:BF:7F
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer:       /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial:       01901E59222440D9108F9FAC26A3FACFE178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 00:01:16 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:16 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:16 +0000
Files and hashes:         1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: XH2apUnU2EyRzyznKSEDVXvOk/4SSfR/MBfzqxWRyxQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:22:24:40:d9:10:8f:9f:ac:26:a3:fa:cf:e1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
        Validity
            Not Before: Jun 16 00:01:16 2024 GMT
            Not After : Jun 17 00:01:16 2024 GMT
        Subject: CN=0b38f8f9312a61812a36ff756087f5a673eabf7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:a0:0b:dd:4f:14:43:63:5b:ef:2d:11:a8:
                    6b:de:5c:af:74:1a:03:b7:03:d5:ee:03:6c:2e:d9:
                    c0:f3:89:ac:d7:a6:9e:db:57:be:1d:2e:bd:68:ef:
                    8d:db:22:ca:35:b2:cf:dc:3e:ba:41:4c:22:8d:e5:
                    4c:73:db:2b:c4:95:d6:2f:71:a5:ac:08:c1:58:86:
                    34:28:02:38:f6:11:52:e4:a9:8c:d0:ba:1d:42:34:
                    c9:88:ad:2a:73:d2:67:6a:32:3e:01:77:a4:c4:ee:
                    fa:f8:a1:1e:cf:51:6b:0c:ba:23:f9:77:9f:e5:ec:
                    be:fe:88:c5:5f:13:32:32:25:74:aa:e1:73:92:04:
                    a4:a5:38:d0:25:e6:d0:fd:5a:74:03:e9:6d:15:86:
                    50:10:68:a6:e4:4a:92:14:79:89:00:e8:83:b1:37:
                    06:4e:5e:e8:07:f6:89:c9:48:d9:9f:37:f3:b1:22:
                    55:0a:1f:66:8a:fd:6c:4c:ef:69:3a:0f:13:e3:a4:
                    8e:a1:c5:29:15:7b:35:3d:45:a9:d0:d7:5f:19:f1:
                    c1:06:22:f5:4f:8c:1b:fe:fd:05:00:d0:5c:f4:8e:
                    63:c0:82:33:72:63:d9:e0:56:7a:71:91:aa:48:c4:
                    3a:7e:32:5e:3a:3d:f3:98:70:e4:cf:95:31:8b:ab:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:38:F8:F9:31:2A:61:81:2A:36:FF:75:60:87:F5:A6:73:EA:BF:7F
            X509v3 Authority Key Identifier:
                keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8d:2e:7e:cb:94:c3:66:19:cc:70:9f:7f:32:ae:cf:a4:26:
         68:6a:5b:f3:5b:3d:4d:74:d6:b6:7a:88:db:a0:03:c1:fe:ee:
         49:a0:88:97:c5:93:60:bf:e9:33:06:fd:fc:0d:97:54:9d:a6:
         5f:a1:87:41:cd:16:c4:da:63:e8:50:a2:ba:e9:70:05:a0:cb:
         07:e7:7b:ae:10:a6:2e:6e:44:b0:04:df:40:44:a2:7c:54:05:
         d7:96:a4:41:03:d3:04:97:dd:64:b8:81:bf:9a:67:22:be:e6:
         e5:5d:48:8b:47:5b:f1:68:fd:19:81:d0:48:2f:b2:79:a3:49:
         fd:9c:a1:bb:2b:a6:a9:7f:6b:a7:6b:95:c4:7b:da:04:98:50:
         ec:38:33:53:e4:b2:d3:75:d6:f8:66:39:1b:54:88:40:b7:bd:
         bf:0b:c1:a8:b1:5a:56:5c:b9:79:2d:cc:e9:79:5f:d6:d3:ed:
         95:a2:16:45:17:16:15:15:ee:9c:61:23:be:17:19:0f:95:f3:
         08:21:9b:8d:ce:cf:d5:05:15:ee:9d:fd:4f:18:bd:6c:6a:9b:
         97:ed:7a:f4:bc:16:49:3c:e6:1c:d7:fe:da:85:b8:92:1b:83:
         22:a1:b2:3c:da:65:d3:db:a2:c5:3f:44:fd:9f:b7:0f:7b:f3:
         af:3b:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:14 2024 by rpki-client on console-fra.rpki-client.org