Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
File:                     EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json)
Hash identifier:          yt9L9/9wdcncxGy2J1ZKK5X2T5Tu6Kxksn2fVErEY0I=
Subject key identifier:   40:62:51:EC:BA:77:38:D6:C3:24:30:F5:6E:B5:5A:7B:C8:B9:23:1E
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Certificate issuer:       /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial:       01901DEC1D601D41C5909293F1E32F1F46A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:02:11 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:11 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:11 +0000
Files and hashes:         1: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: tzj9drNpBFDwMc+ujPNmIZeTjrMlgzw6Gn2DtXp7W1k=)
                          2: FS2lsR98pR75ViABEAlpdMiY6NU.roa (hash: JFgI4n4dvrtEvW3XQxXG7RBIw/AoHDMP52hfqYTfZpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:1d:60:1d:41:c5:90:92:93:f1:e3:2f:1f:46:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
        Validity
            Not Before: Jun 15 22:02:11 2024 GMT
            Not After : Jun 16 22:02:11 2024 GMT
        Subject: CN=406251ecba7738d6c32430f56eb55a7bc8b9231e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:a6:4e:bf:1d:1c:e3:21:a3:ba:98:3e:52:
                    51:c8:db:d2:c7:3c:a8:a8:f6:32:34:b9:1d:fc:5d:
                    7d:f5:92:e4:2c:4a:46:23:d0:2c:63:0c:78:23:c5:
                    72:5c:4f:69:b2:43:46:b6:cb:7b:87:78:33:90:ff:
                    e9:fb:15:58:dd:ad:3b:bd:33:a4:a8:81:58:cd:9f:
                    f6:d2:18:34:87:5a:f3:06:ae:fe:57:f3:e0:2a:28:
                    2d:12:3c:84:77:eb:75:86:da:23:9b:69:28:e4:97:
                    e3:4d:84:73:e0:06:77:07:26:c6:75:d1:fb:02:3d:
                    02:3b:88:6e:5a:41:4e:89:f8:45:36:d9:35:5b:7a:
                    92:fb:f4:9a:ef:0d:c9:38:ed:68:72:70:4b:69:75:
                    98:d6:81:60:09:77:73:81:18:43:fd:69:b8:5a:7d:
                    60:ce:bc:cc:d0:ef:d4:dd:7c:fe:b5:e1:c1:21:e2:
                    19:4b:cd:ee:7e:cb:e5:f9:dd:83:ea:c5:12:ce:ed:
                    5a:0d:b0:c5:ad:1d:32:1a:ea:8d:9e:63:f1:b4:e3:
                    bd:c5:a5:4d:8b:ba:8f:c6:21:88:4a:a9:c1:f3:6d:
                    39:1b:e0:4c:ea:e9:44:18:65:87:2d:83:f7:51:a3:
                    95:34:f6:ff:67:2b:3e:74:1a:35:e6:de:c0:ea:16:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:62:51:EC:BA:77:38:D6:C3:24:30:F5:6E:B5:5A:7B:C8:B9:23:1E
            X509v3 Authority Key Identifier:
                keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:47:26:35:30:04:b2:72:03:58:cc:ca:d1:8a:ff:3f:68:98:
         6b:76:a7:15:eb:5d:12:b7:13:8e:26:36:9c:8d:3c:19:be:0c:
         9c:0a:2d:c8:58:7b:bd:7d:92:3d:e0:c5:19:21:56:3d:71:80:
         aa:71:29:5a:77:18:e2:8a:45:5a:37:2a:57:60:ac:f0:9c:7e:
         1d:1a:f8:b8:f7:e5:cf:7b:01:5a:eb:45:28:ef:92:78:e2:94:
         6c:12:b0:21:b9:47:01:0e:ab:e8:b5:db:e8:a5:7b:64:40:e9:
         b4:82:ea:20:a9:33:62:a1:f2:59:f6:ef:41:73:ee:17:b0:79:
         34:de:41:e7:c1:65:87:cc:07:cc:d2:d5:2d:2b:4e:ad:ff:46:
         5a:8d:3e:77:8c:5b:e9:24:86:41:0f:43:66:eb:d1:70:b7:d0:
         48:45:13:5c:ad:b4:04:9d:b3:15:d4:23:7f:a5:0e:ee:be:54:
         8f:39:82:0f:e8:79:aa:32:52:59:de:a4:19:e2:22:e3:f0:c6:
         df:e0:03:7e:a1:8a:e6:45:23:a8:d5:10:76:9c:8b:13:ae:ff:
         75:bd:8e:f6:f0:04:29:96:24:d6:9e:ec:f9:bb:48:c5:f5:ba:
         e6:0d:a8:84:9e:f4:3e:bc:74:be:ba:b3:98:3a:e2:2f:1d:3f:
         5f:ea:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:47:19 2024 by rpki-client on console-ams.rpki-client.org