Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File:                     4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier:          GZRs0fvblhhyIhUaUsbnCpIYrZ4oUhwBKdEKHgpb/7A=
Subject key identifier:   93:B4:AD:4E:47:DE:9C:5C:E7:F8:39:82:18:4A:23:DF:03:5B:AD:AE
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer:       /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial:       01901E593D5129FF7B51FFA357DDC01C087B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number:          11C2
Signing time:             Sun 16 Jun 2024 00:01:23 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:23 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:23 +0000
Files and hashes:         1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: FV8lSWH5ZmhceVvZgnY8HSp26JH+yWWYo3f2737Z078=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:3d:51:29:ff:7b:51:ff:a3:57:dd:c0:1c:08:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
        Validity
            Not Before: Jun 16 00:01:23 2024 GMT
            Not After : Jun 17 00:01:23 2024 GMT
        Subject: CN=93b4ad4e47de9c5ce7f83982184a23df035badae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:33:db:76:7f:a6:b2:ea:b0:61:93:bc:ff:
                    e9:86:05:f2:fa:97:06:47:6f:72:fc:64:09:3a:fe:
                    01:53:48:04:2a:ee:5e:de:8d:24:6b:81:b4:ef:90:
                    62:aa:a0:83:23:bc:fd:d8:64:c0:6f:16:78:88:e5:
                    30:a3:ea:48:26:2a:2c:b1:87:40:55:e2:d3:3f:86:
                    5c:be:8b:24:c0:07:3d:83:73:a5:db:ec:ac:df:a8:
                    8a:4f:6f:0c:29:d0:e9:e7:71:c9:fd:44:99:58:b6:
                    fb:39:77:45:f3:92:25:78:77:d0:11:12:c6:69:0f:
                    2a:8d:6d:d7:56:8d:44:94:04:04:4b:3c:d4:7e:78:
                    72:db:5d:eb:19:64:68:e1:94:bb:7d:fe:bb:25:69:
                    a6:f7:d0:76:f6:da:c1:d7:7c:86:35:bb:5b:29:e4:
                    b2:54:ae:7e:c1:1f:a4:8f:8b:23:b4:ad:b9:9b:47:
                    f0:84:f0:de:fb:75:ec:6c:88:03:fe:20:4b:6a:f5:
                    f6:95:2c:fd:7f:36:49:84:f7:4a:b5:b8:95:32:ab:
                    bb:4b:fb:14:f5:36:ad:e3:ad:cd:85:b0:6a:e5:c0:
                    21:bf:3b:6e:88:3c:ac:58:45:c8:9c:f5:63:ee:dc:
                    e6:3c:62:e0:a0:78:6d:39:a5:1f:22:45:75:93:2a:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B4:AD:4E:47:DE:9C:5C:E7:F8:39:82:18:4A:23:DF:03:5B:AD:AE
            X509v3 Authority Key Identifier:
                keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a9:03:ef:9e:9c:ca:ad:32:87:df:3b:53:a1:52:72:d0:06:
         72:33:78:3d:35:e1:49:42:b2:3a:62:a7:31:11:df:2a:09:d7:
         45:b5:f9:b4:a9:9f:b1:ce:1a:5e:29:87:0e:31:2d:9f:83:0e:
         4f:d5:e2:45:e5:d7:db:e7:50:16:d0:2a:7d:1c:5a:09:a9:64:
         54:a7:66:dd:e6:2c:d8:07:66:73:93:ff:23:ca:dd:99:97:06:
         1e:2c:8b:c8:81:85:17:17:d5:c1:19:63:99:30:5a:ac:20:a4:
         cb:d5:c3:3b:7c:96:ba:f7:23:22:62:4b:ef:b3:3b:0b:d2:87:
         c3:ef:73:01:b4:e9:67:c9:dd:39:ce:18:e2:c9:3d:51:57:13:
         f6:bc:13:89:76:4e:c9:34:0b:b1:79:39:1c:96:88:0a:05:bc:
         9f:54:53:f0:f9:64:9f:99:98:91:87:cb:68:d7:71:eb:59:58:
         d4:58:d9:24:85:dd:25:a4:ff:67:6b:3c:04:ef:0e:ea:cf:f1:
         47:bc:d0:b9:68:db:f9:8e:1a:de:50:b2:aa:e8:bb:18:76:e8:
         e2:eb:af:70:87:b2:fd:c0:94:53:6e:9f:35:f7:50:35:22:5d:
         5d:6a:b3:59:6a:7d:fa:65:f3:65:ed:76:e1:45:21:48:c5:a6:
         47:7e:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:11 2024 by rpki-client on console-fra.rpki-client.org