Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
File:                     aaEKEpVYyDgLwT2axFQB0h2rnfA.mft (raw, json)
Hash identifier:          SVYPM6JDhMihViIVbpPGL81KS3FPIn3JvyPROEh8NTk=
Subject key identifier:   45:84:0B:88:45:EE:D0:8B:BE:FC:CD:1B:C4:16:C5:05:AA:46:56:19
Authority key identifier: 69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
Certificate issuer:       /CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Certificate serial:       01901DEAB70854F07CC52A8830522BFB9802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:39 +0000
Files and hashes:         1: aaEKEpVYyDgLwT2axFQB0h2rnfA.crl (hash: AhGPE1turoL/uZV67En6/ULWfD+B0VDt17ldbjch2KQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:b7:08:54:f0:7c:c5:2a:88:30:52:2b:fb:98:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a10a129558c8380bc13d9ac45401d21dab9df0
        Validity
            Not Before: Jun 15 22:00:39 2024 GMT
            Not After : Jun 16 22:00:39 2024 GMT
        Subject: CN=45840b8845eed08bbefccd1bc416c505aa465619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:29:b2:17:d5:90:dd:a0:94:6c:b3:a1:fa:
                    1f:6c:d8:c8:03:70:5a:bf:9c:73:21:53:04:1e:7e:
                    6c:8c:27:d0:38:2b:1f:71:f9:b6:fa:f2:a0:87:1e:
                    ab:db:65:3d:a6:1c:e6:38:a8:a3:74:b6:96:ef:eb:
                    06:6f:e2:53:4a:17:7c:35:2c:83:9c:8e:f0:39:be:
                    27:38:11:50:75:ab:ff:58:5e:0c:9d:53:03:c3:89:
                    fb:d3:9c:67:0d:d2:1b:42:51:23:06:ad:9d:7e:60:
                    9a:ba:0d:bc:f9:ed:94:ee:14:32:db:57:8c:df:0e:
                    0a:a6:d0:20:b6:4e:96:27:fe:02:d3:03:2b:f1:36:
                    1f:09:ac:1a:5f:c3:d2:18:43:b0:25:3c:69:c1:d5:
                    d1:3d:17:b1:0f:b2:f0:fc:36:93:63:64:da:c2:97:
                    ab:e2:24:91:08:59:12:8f:cc:f2:3f:7d:94:01:c1:
                    d3:b0:8a:8e:1c:ec:5a:7d:3f:78:61:19:91:e4:9d:
                    d2:7d:b8:1c:2a:56:f7:54:3d:78:18:d4:69:97:e9:
                    bd:1f:3e:e3:a0:e2:cd:83:23:a3:d0:2c:50:6f:d3:
                    69:11:3c:d0:fa:69:de:f9:ed:bd:d6:c9:be:3d:9e:
                    b4:5a:26:b3:c1:80:cc:c5:47:f8:45:95:96:93:3c:
                    8e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:84:0B:88:45:EE:D0:8B:BE:FC:CD:1B:C4:16:C5:05:AA:46:56:19
            X509v3 Authority Key Identifier:
                keyid:69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d6:af:e2:0e:16:6d:ad:92:82:84:8e:33:9c:f2:c9:23:e9:
         82:e8:ac:cf:a5:74:ab:48:05:21:ce:20:d0:79:9e:8f:9f:fb:
         62:c3:c1:29:64:3e:de:39:c6:22:95:1d:fd:a6:3f:67:f9:2a:
         9d:ab:33:70:5c:8e:c5:c0:b7:a0:ea:99:9c:57:3b:ca:24:f6:
         14:18:01:90:00:30:74:8d:dc:c8:cf:a7:79:e1:f0:a4:1a:08:
         5d:ac:3b:98:ab:50:67:74:21:d9:04:12:58:9e:3b:f2:d5:92:
         f5:e3:eb:fa:86:c5:df:6f:d0:a3:33:f0:a7:11:87:df:0b:ed:
         22:90:cf:90:1e:ad:24:1d:15:92:be:bf:7d:5c:ff:7d:95:a8:
         d6:4c:6a:9a:12:a6:9c:e7:af:bb:39:0d:7e:1b:6e:55:2d:b4:
         ee:ec:ef:a0:23:57:70:ac:69:8a:04:44:67:b9:b3:6a:2b:22:
         5a:89:ba:26:ce:aa:fb:33:0b:a1:f2:65:af:c7:65:d6:f2:27:
         4a:bf:32:f5:37:30:a8:a6:b9:0f:01:b9:76:80:6a:bc:c5:ff:
         9c:b1:9f:6c:bb:1f:76:dc:7c:f8:d0:f7:01:1d:9e:b2:37:b3:
         5a:96:63:56:49:43:2c:cc:e2:9a:e3:2e:f5:6f:99:e8:53:9d:
         ed:0c:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:00:45 2024 by rpki-client on console-fra.rpki-client.org