Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
File:                     j7ev7MJi-jz8WRYejpeLYo4_E2E.mft (raw, json)
Hash identifier:          1y1m4ITiCrqS2Fm5cKkpFbJzsQM/C0Udq+L+0v5TcXo=
Subject key identifier:   C9:38:E9:CE:A5:A2:E0:1D:39:D9:3F:C4:5E:21:D7:31:B7:AD:F1:4F
Authority key identifier: 8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
Certificate issuer:       /CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Certificate serial:       0190448A6A9101862AFC942687E9354C41EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
Manifest number:          11D7
Signing time:             Sun 23 Jun 2024 10:00:40 +0000
Manifest this update:     Sun 23 Jun 2024 10:00:40 +0000
Manifest next update:     Mon 24 Jun 2024 10:00:40 +0000
Files and hashes:         1: j7ev7MJi-jz8WRYejpeLYo4_E2E.crl (hash: /ppb7uGdvTM1HZOO/XfFIYCe7y3vi9pqUbl3JGJPs0A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:6a:91:01:86:2a:fc:94:26:87:e9:35:4c:41:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
        Validity
            Not Before: Jun 23 10:00:40 2024 GMT
            Not After : Jun 24 10:00:40 2024 GMT
        Subject: CN=c938e9cea5a2e01d39d93fc45e21d731b7adf14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:d5:fc:6b:89:66:9e:69:98:16:6a:e1:45:
                    3e:e4:22:a8:9c:0b:7c:a2:79:d2:ef:80:f2:ed:c4:
                    50:d1:60:82:6b:cd:9c:96:5b:e6:92:d1:ed:1b:4b:
                    f5:9a:b4:94:0a:00:62:84:5a:23:dc:6d:6d:60:69:
                    4d:ec:22:7d:36:ac:4f:bf:d8:1f:27:43:fc:d8:db:
                    5a:a9:bf:aa:f0:31:d6:e2:ca:ea:c3:fd:47:3b:6c:
                    ed:4a:90:6b:43:08:f8:c9:9b:c8:f0:fa:41:6d:9d:
                    46:b0:0a:4f:0a:2f:61:be:f2:e5:1b:a5:bf:7c:fd:
                    b7:93:25:a0:76:15:c2:38:21:55:5b:62:cb:f2:35:
                    e6:fc:e3:06:9f:f5:c6:13:77:07:35:ea:f7:85:56:
                    15:af:cc:7c:56:d3:12:08:b7:4c:5d:c0:04:fe:3c:
                    b1:4b:ad:83:a4:81:01:25:94:3c:ce:b6:b6:6c:5f:
                    3c:b2:6d:f4:12:a2:06:61:07:d2:dd:af:96:a9:d8:
                    b8:be:74:65:9c:c5:7e:6d:4e:11:82:58:f1:b1:e8:
                    29:52:0c:58:c9:d7:50:01:fb:2a:f8:59:6b:8c:9d:
                    6d:ad:24:bf:80:f3:d9:ae:0b:e1:79:72:a5:f4:91:
                    93:f1:82:76:ed:85:fe:3e:6d:c5:58:23:80:df:b3:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:38:E9:CE:A5:A2:E0:1D:39:D9:3F:C4:5E:21:D7:31:B7:AD:F1:4F
            X509v3 Authority Key Identifier:
                keyid:8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d9:e6:03:7a:9c:50:8f:24:70:4e:37:75:a3:75:89:53:10:
         2d:dc:6a:99:4c:4a:14:ea:25:28:cc:aa:36:77:3a:30:6d:7a:
         e1:cb:4d:7f:dc:c5:5e:9e:0e:0c:77:28:90:a4:48:fa:3a:a5:
         ef:86:7d:25:c2:9c:d2:1b:18:36:b0:18:32:3b:6b:3b:3d:cf:
         61:af:ae:89:54:73:2c:ca:8a:73:50:19:6a:fc:de:b4:68:30:
         81:71:b0:da:78:cc:dd:a1:c3:59:c5:ce:fe:77:74:7f:52:94:
         96:97:d6:b5:96:42:fe:37:f2:49:75:dd:5b:7d:46:11:88:40:
         f9:6f:e6:2d:2d:3b:eb:c3:87:c3:38:cb:90:45:e8:69:49:cc:
         b9:c7:4d:16:0f:11:21:f6:cd:71:31:10:8d:ea:9c:cf:ee:e0:
         7f:3f:b3:ec:f6:14:03:2d:13:52:ba:ed:b8:7d:25:9e:7b:8e:
         0a:bc:15:33:f6:7e:46:e4:a0:c8:91:12:ae:fe:c9:0d:f5:47:
         43:13:28:96:19:cb:b4:11:ce:d9:53:2a:1d:48:70:8e:32:c4:
         14:e2:a6:ed:9d:06:03:b7:3d:f5:7f:64:d7:89:2d:20:74:d2:
         a2:0a:37:60:4c:67:35:a0:1a:86:ac:f6:fa:8d:40:1b:e9:99:
         92:1f:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:50:41 2024 by rpki-client on console-ams.rpki-client.org