Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File:                     oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier:          9WPymj1WoXDDuuv34XNpjeKSUPhYSc9NJ7HZZK1p8eI=
Subject key identifier:   1F:79:CB:E6:E0:67:B6:79:58:73:C5:60:AC:2D:4B:6A:A5:86:EE:87
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer:       /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial:       01901CA19425B827F4DAE3EB63394CCEFEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 16:01:09 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:09 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:09 +0000
Files and hashes:         1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: 01Scxfpv7yJVrrzflkOwl6SN6ceCo+DS2bmXt7ldFSU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:94:25:b8:27:f4:da:e3:eb:63:39:4c:ce:fe:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
        Validity
            Not Before: Jun 15 16:01:09 2024 GMT
            Not After : Jun 16 16:01:09 2024 GMT
        Subject: CN=1f79cbe6e067b6795873c560ac2d4b6aa586ee87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:23:79:68:50:75:19:53:0e:f2:17:9d:9a:
                    65:70:49:79:90:ca:84:c8:bd:77:91:a2:b3:17:39:
                    56:70:c3:d8:a1:a5:a0:5b:42:85:e1:73:29:26:47:
                    81:ed:6c:d3:2d:84:d8:b9:f2:10:5f:0a:1c:29:99:
                    59:6f:0c:bc:bd:a4:5b:7f:be:a0:1e:d2:f4:3a:8f:
                    8e:2a:3c:23:ff:d7:05:b6:5c:33:56:a4:08:71:06:
                    5a:cb:98:75:07:9c:ea:1a:1b:73:ba:47:50:cb:a8:
                    e8:73:27:4b:bc:78:a5:9e:b2:0c:6b:b7:9e:57:26:
                    24:5c:a4:11:ca:41:ea:37:e8:46:df:5f:9e:01:86:
                    21:2b:93:99:72:54:2e:15:bd:32:e6:64:5a:d9:fc:
                    c0:c8:b9:38:b9:08:99:26:79:b8:85:86:30:cf:f6:
                    5e:f6:cc:20:0c:69:c3:66:15:93:3c:1a:0d:1a:f5:
                    82:df:e3:b7:2d:78:8c:dc:b4:d9:6b:49:bf:d5:2c:
                    39:15:9b:1d:a3:54:07:67:ab:28:73:bc:e2:ec:f4:
                    2b:87:63:ff:0c:37:af:23:9b:cc:1b:5c:85:93:0a:
                    5b:34:e3:3c:4d:82:9a:89:81:4b:99:69:d9:6b:0e:
                    a5:09:70:40:bf:a9:bc:e5:c6:de:7b:b1:82:08:77:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:79:CB:E6:E0:67:B6:79:58:73:C5:60:AC:2D:4B:6A:A5:86:EE:87
            X509v3 Authority Key Identifier:
                keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:86:e4:e2:3c:b0:cc:dc:1e:ef:13:b6:ab:77:65:26:67:7b:
         d2:ed:13:63:f0:a7:dd:5a:4d:f4:48:86:1a:23:8a:32:2a:e8:
         38:4b:28:a6:6e:a1:f7:48:50:03:b2:c3:47:24:17:92:30:da:
         a2:ef:bc:a5:9c:97:d2:6e:21:7e:8e:17:07:9c:04:2e:34:f5:
         c8:da:5a:55:e9:66:64:19:e2:c4:b2:9d:0b:23:cf:1b:d5:1e:
         ab:60:14:40:43:36:ce:71:93:15:5d:b0:d6:22:2d:60:98:31:
         87:ac:5d:9b:c6:7e:22:7b:d7:1b:3a:62:27:68:cc:f0:cc:0d:
         2f:76:d8:4a:9a:82:10:0b:33:84:2f:34:78:8a:b2:e3:18:c1:
         57:16:52:7d:ca:c5:7e:b3:ba:3a:b1:ed:d4:89:e9:31:ee:b1:
         90:be:6e:09:66:b4:55:8a:a3:f6:63:f0:59:84:bc:78:d7:25:
         b0:7e:2d:cb:a7:2f:e0:b7:e6:f6:9d:1f:bb:73:1a:0f:71:1d:
         3a:55:c4:ce:05:fd:a7:c1:41:29:2c:6c:86:51:4d:c0:d7:8a:
         64:f3:be:a4:ce:91:2f:a4:f1:bb:55:a5:a7:60:ae:d5:39:64:
         8e:cb:0a:37:37:6d:3e:0e:86:c2:c8:5d:7f:51:47:e3:90:67:
         1e:f3:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:37:46 2024 by rpki-client on console-fra.rpki-client.org