Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File:                     AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier:          ufWOqTXMiuQ3B17t9vLPXWX9OcZJ3RTLrPOS3JxG358=
Subject key identifier:   72:BF:CA:92:54:6D:70:6E:38:F5:52:B7:0C:C9:42:F6:FB:4E:FE:88
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer:       /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial:       01901E8FD3738BA2945147D029EC183D9A2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 01:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:00 +0000
Files and hashes:         1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: 0D06KTFuukAbChIhXBz4cXJvKxDnjCjGSjS3csrD7lw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:d3:73:8b:a2:94:51:47:d0:29:ec:18:3d:9a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
        Validity
            Not Before: Jun 16 01:01:00 2024 GMT
            Not After : Jun 17 01:01:00 2024 GMT
        Subject: CN=72bfca92546d706e38f552b70cc942f6fb4efe88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:1c:76:b9:92:b6:95:49:ac:b1:a9:32:34:
                    8d:45:95:f4:48:cd:97:df:34:85:ff:54:61:01:9a:
                    85:a2:f0:bb:8d:0e:6a:7d:55:da:0b:31:ba:80:dc:
                    0e:f8:81:81:63:ca:2c:1a:ea:5a:ac:44:2d:8e:9d:
                    c9:77:a9:1b:84:4f:bf:19:c7:da:32:0a:49:2c:3b:
                    9d:b6:6e:6f:b9:50:09:3a:0f:d6:80:aa:31:d1:36:
                    a7:cb:2b:d4:32:a6:e4:7f:3c:59:15:e2:3f:ca:75:
                    60:a7:76:80:9c:85:97:86:b7:db:4b:b0:de:38:53:
                    9b:bf:20:2d:91:b6:18:32:36:b8:e0:51:b2:a3:fe:
                    6f:46:cd:6b:c4:70:60:0d:84:5f:7b:d1:80:0d:16:
                    8f:33:61:7d:98:49:aa:8b:c7:cc:61:c6:47:8f:91:
                    ec:3c:7b:f1:db:ba:84:7a:a8:70:a2:16:2a:ac:e7:
                    23:54:da:2e:fa:18:42:fa:0b:72:3a:7c:ac:8c:92:
                    98:26:30:c1:8d:2f:2e:d1:fa:cb:b8:c6:c6:c0:fb:
                    54:0a:0d:ba:ea:d1:d5:f2:b6:83:98:dd:f2:5f:bf:
                    66:be:17:e1:3a:61:59:4e:d1:b6:21:85:d4:c8:e1:
                    dd:f9:36:fe:d9:ca:69:af:e1:88:77:b2:a9:78:f6:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BF:CA:92:54:6D:70:6E:38:F5:52:B7:0C:C9:42:F6:FB:4E:FE:88
            X509v3 Authority Key Identifier:
                keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3f:f9:57:65:4b:15:d0:45:ce:0e:49:54:8d:62:39:86:ba:
         39:ad:2d:52:dc:2e:2a:cd:9a:d6:34:ea:d7:b0:b8:57:86:d9:
         7f:50:e3:d4:cb:16:14:25:68:c6:d1:4f:72:6e:10:a4:89:d3:
         7e:ed:af:9a:b6:dd:da:03:a8:63:73:2c:c0:ad:84:8d:c3:06:
         fa:15:40:e3:e6:80:20:68:58:fe:6c:49:8d:a3:92:31:72:50:
         99:68:f4:df:24:46:9b:4b:72:1f:ee:cb:ae:2e:d3:aa:e9:2e:
         a2:ff:e2:8e:0b:7e:dc:0e:15:b3:7c:63:24:05:c0:95:e4:5d:
         62:ed:d0:b1:73:02:3b:4f:5a:46:8c:16:9d:5c:2a:59:df:56:
         7a:6d:a5:fb:aa:55:7c:fa:53:a5:99:db:f6:97:a6:be:a6:60:
         15:8a:78:45:ab:32:94:98:75:90:45:51:83:a4:b2:9c:09:02:
         ba:31:f3:b8:1a:c3:81:eb:6b:1e:68:eb:4e:f2:6a:66:c6:3d:
         63:77:dd:af:db:b8:a1:a6:6e:29:68:a4:90:f8:8f:87:1f:97:
         cb:28:45:c1:85:e5:94:40:e7:1b:08:38:2d:7f:ba:fd:fe:ab:
         68:3c:85:26:74:fc:5b:cd:98:38:8d:32:2c:bc:2a:f5:e3:ae:
         9a:5c:bc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:55 2024 by rpki-client on console-fra.rpki-client.org