Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File:                     2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier:          /F3zZEOlXaWZFcEIevl1zPR+TTLwrYa7OQArrkZRw6c=
Subject key identifier:   F9:AE:7F:03:9F:E5:D7:B4:12:52:29:FE:88:4E:73:4C:1E:62:5D:3E
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer:       /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial:       01903707C96498671DD10E0C6E004D780811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number:          0FC3
Signing time:             Thu 20 Jun 2024 19:02:55 +0000
Manifest this update:     Thu 20 Jun 2024 19:02:55 +0000
Manifest next update:     Fri 21 Jun 2024 19:02:55 +0000
Files and hashes:         1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: xUjSZSnbM0KesHYoGYfXgsed4VkBceSO17teeE1OF6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:07:c9:64:98:67:1d:d1:0e:0c:6e:00:4d:78:08:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
        Validity
            Not Before: Jun 20 19:02:55 2024 GMT
            Not After : Jun 21 19:02:55 2024 GMT
        Subject: CN=f9ae7f039fe5d7b4125229fe884e734c1e625d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:83:2f:e1:12:09:65:fb:48:ea:ac:5b:9c:
                    29:38:ff:0e:a3:d6:6b:31:6f:be:34:23:de:e1:79:
                    be:b1:16:db:b4:72:cb:b6:df:3e:34:6f:8d:80:6e:
                    d0:3f:48:37:d9:e8:44:5e:8d:d2:db:3c:e6:a3:25:
                    98:cd:66:ea:aa:6e:b5:a9:e7:bb:6a:03:40:5b:e2:
                    39:21:d4:af:6c:dd:2e:fa:f9:65:53:d0:19:8e:c5:
                    13:43:b1:99:cf:12:dc:fd:b5:af:6a:de:35:2b:11:
                    17:b7:78:95:92:7d:c9:7b:df:99:4f:cc:3b:e8:99:
                    11:2f:9a:92:e2:cb:5e:a2:71:24:91:d5:a7:4c:b4:
                    c2:6d:e8:f5:0e:c7:e7:97:d9:e7:0e:c2:26:5c:9f:
                    c6:5e:11:5f:33:79:16:4e:82:8c:a2:f2:c7:f3:8e:
                    aa:e7:0d:3e:74:43:ee:b0:e1:be:80:71:a2:7b:cb:
                    02:e3:ca:29:56:41:60:3e:cd:3e:f3:d9:46:46:23:
                    20:94:da:e5:22:7d:31:5d:c9:c0:01:77:9c:b3:9c:
                    69:8b:eb:83:91:1e:07:5f:2c:2e:d9:4f:05:cc:0b:
                    82:55:ee:36:cd:a9:6b:ef:9f:3a:a9:f0:b8:0c:a1:
                    f4:f4:d0:25:f9:4a:4a:fe:7b:31:a6:eb:c9:f2:8c:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AE:7F:03:9F:E5:D7:B4:12:52:29:FE:88:4E:73:4C:1E:62:5D:3E
            X509v3 Authority Key Identifier:
                keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:28:4f:43:ee:59:75:8f:b5:59:26:10:85:35:92:06:33:a9:
         4f:a8:87:bf:07:9b:a2:b2:3c:63:43:38:bf:b6:03:0b:42:d5:
         ed:f3:be:34:6c:b9:b3:f8:6a:bc:6c:7f:7b:03:26:86:c2:61:
         e7:d4:62:7f:26:6d:2b:89:54:3e:84:3b:ef:1c:db:d2:ae:00:
         2e:e8:4e:37:4e:2d:3e:f0:68:aa:00:27:30:94:1a:af:dd:34:
         6c:24:e0:9d:e0:41:48:56:84:a1:06:0b:48:92:0f:f9:1d:4a:
         e3:9c:ff:0e:a4:9e:d6:59:72:d9:68:32:28:be:bd:a7:78:06:
         32:e5:29:03:35:b1:b4:08:03:3f:85:77:72:2c:eb:dd:6d:fc:
         99:bd:1e:22:6c:cb:11:fb:7e:94:be:0d:d5:44:9a:d0:40:48:
         6c:df:9c:d5:a5:70:b5:02:5e:d5:12:43:b4:a6:34:b1:0b:13:
         fa:60:30:9e:ed:e5:67:89:5d:14:24:b5:da:fc:ac:d3:c9:38:
         89:99:9f:11:d4:7f:ee:7a:b7:a4:70:24:fd:3a:5a:2f:fb:1f:
         6c:3c:25:a8:94:35:56:ef:b9:27:63:45:59:87:a2:d9:64:40:
         5e:de:e0:2b:75:52:c6:d9:06:0d:a6:75:15:17:2f:fd:c3:59:
         65:e4:db:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:34:57 2024 by rpki-client on console-ams.rpki-client.org