Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File:                     XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier:          WS1VkRzYJ8QTjaIjohqs2E2ewF30q4aA/oRSxrV+3sg=
Subject key identifier:   BF:9C:EE:D4:95:B3:3A:E0:75:A0:6C:13:78:49:D2:8F:51:10:1D:94
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer:       /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial:       0190411BF499907FF229D9E14B0A1B480836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number:          01A9
Signing time:             Sat 22 Jun 2024 18:01:09 +0000
Manifest this update:     Sat 22 Jun 2024 18:01:09 +0000
Manifest next update:     Sun 23 Jun 2024 18:01:09 +0000
Files and hashes:         1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: z8rcb1rySA1jwCJvku3pXTeeuacepdzcq8lsFFPk/AM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:f4:99:90:7f:f2:29:d9:e1:4b:0a:1b:48:08:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
        Validity
            Not Before: Jun 22 18:01:09 2024 GMT
            Not After : Jun 23 18:01:09 2024 GMT
        Subject: CN=bf9ceed495b33ae075a06c137849d28f51101d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b0:18:64:db:a2:c3:4b:f8:63:2b:42:ea:b5:
                    c1:90:10:df:73:7f:ec:7e:df:a8:4a:20:4f:83:19:
                    49:27:88:ae:9d:ce:20:00:79:47:60:45:b5:65:3d:
                    e7:be:6c:20:a3:af:26:bd:c7:4c:32:d5:09:5d:44:
                    eb:6e:5a:77:60:5e:80:ea:f2:4e:dc:20:d0:74:2e:
                    30:35:36:c6:26:7b:c5:40:93:cc:60:37:c5:f1:02:
                    f6:1d:3c:7b:cb:e7:e4:c3:7d:d6:d5:aa:6e:52:4e:
                    df:db:55:8d:94:b1:21:44:58:b8:47:ad:7f:c9:04:
                    f9:b1:b2:20:31:7c:1e:19:56:71:1f:1e:d4:a7:3a:
                    a6:0b:b1:cd:81:d0:65:6e:bc:0b:a3:15:80:2a:34:
                    61:e4:54:8c:b3:40:98:3e:26:a5:d5:8e:02:3d:1d:
                    71:6b:d2:67:29:dd:3a:38:8b:90:a5:1d:9e:fe:16:
                    1f:10:cc:68:90:e0:e5:b1:fe:b1:54:11:52:4c:e2:
                    c5:b2:ed:6f:c7:7c:1a:57:90:57:08:f6:03:c0:73:
                    65:5c:a1:14:58:b6:e7:d2:8b:4c:fd:af:05:6d:bb:
                    9a:25:c3:2d:ed:7e:59:36:df:78:67:84:82:85:11:
                    96:51:f4:5e:89:72:24:ce:2e:5d:05:bd:d5:e2:77:
                    bd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9C:EE:D4:95:B3:3A:E0:75:A0:6C:13:78:49:D2:8F:51:10:1D:94
            X509v3 Authority Key Identifier:
                keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:90:9b:77:e4:77:1c:23:53:a7:6e:a0:0c:45:b9:b5:1d:9d:
         99:45:9d:c8:08:23:c8:e4:61:7f:b0:f6:c6:9f:53:dd:40:bc:
         4a:fe:8f:97:cf:a9:a5:b4:b6:64:03:0a:fa:80:94:bb:67:22:
         84:8b:c7:7c:8b:cb:35:77:b0:f0:8e:8a:9b:dd:ed:e8:05:a5:
         bf:8c:3e:8b:2f:5c:ea:81:1d:ba:5b:66:5b:e3:6b:03:4f:55:
         11:67:21:9d:66:ba:64:3d:f7:3f:d8:ce:43:39:7b:c3:72:a0:
         ed:ec:28:88:8b:4b:5d:5b:2c:0c:91:e2:10:3b:b3:c3:80:32:
         00:db:10:0a:d4:70:67:54:e3:34:6f:49:7a:de:3f:3f:33:5b:
         d2:70:d6:ab:44:a9:15:3b:8f:c4:18:5d:43:a1:50:0e:63:a8:
         df:30:5f:88:b4:c1:f3:b8:a6:19:3d:16:1a:42:f3:f4:a6:bb:
         6a:31:de:a8:bc:75:dc:f2:d1:c3:dc:b3:77:f7:38:9d:1f:2b:
         27:d2:27:4e:b0:33:cd:e8:c9:1e:97:ec:a2:6b:2a:d9:8b:63:
         4e:26:30:19:63:13:db:24:46:31:5d:cd:7a:5a:43:17:fc:72:
         4e:6e:30:1d:2c:b3:8e:4e:92:3c:27:55:dd:e8:dd:72:7e:07:
         df:c6:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 18:53:17 2024 by rpki-client on console-fra.rpki-client.org