Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
File:                     3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json)
Hash identifier:          ntkgrhPF3y3GWqf+1ZrOFmkD4T7g/qi5Q1E3PX9rB2w=
Subject key identifier:   EF:FD:61:DF:6D:AC:5B:7C:11:E2:94:B2:AC:3F:CC:60:18:19:72:78
Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29
Certificate issuer:       /CN=dc273e1e21841ce2c335fe1c961ce768017eee29
Certificate serial:       01901DED7BFF3456E061B0DD2840DB0DBAEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:03:41 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:41 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:41 +0000
Files and hashes:         1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: PadZyX2ek3sjDmxxjI0ZIJT9jGsYXv+L60/WDRWYcc4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:7b:ff:34:56:e0:61:b0:dd:28:40:db:0d:ba:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29
        Validity
            Not Before: Jun 15 22:03:41 2024 GMT
            Not After : Jun 16 22:03:41 2024 GMT
        Subject: CN=effd61df6dac5b7c11e294b2ac3fcc6018197278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0d:f9:bf:69:cb:4a:41:cb:14:cc:12:95:91:
                    3a:c1:73:a0:eb:f7:52:f1:a4:06:8b:9e:bf:91:60:
                    32:9b:a1:31:70:b8:e1:05:1e:fb:cd:39:2a:5d:56:
                    98:44:3a:98:cf:b8:ce:73:35:51:97:d2:59:cb:eb:
                    3a:d1:36:0b:c9:b8:57:97:a7:51:8a:82:b0:f9:62:
                    68:64:d0:af:5e:4c:7b:77:32:42:d6:9b:a3:1a:48:
                    97:7d:09:14:e8:54:6c:07:37:a7:d2:1e:29:93:52:
                    bf:c9:05:5f:a7:64:39:8a:25:41:5c:a4:f2:2f:dd:
                    b5:c6:8f:f2:4d:e1:08:46:54:76:a7:3d:1b:45:b5:
                    4f:20:9a:40:b0:65:33:22:ff:56:44:e4:f8:d0:02:
                    d5:22:6c:6f:06:dc:bc:d8:e1:e7:f0:f3:f3:86:fd:
                    0f:ed:64:0c:fb:17:40:a2:69:0b:e3:39:ad:fa:01:
                    2f:44:20:21:0e:95:70:16:6f:f1:81:a9:b9:d4:5f:
                    c1:76:1c:6a:e1:89:e9:df:32:75:89:c3:05:85:6f:
                    2c:3f:21:de:db:74:9c:fa:cc:2f:33:90:8a:9a:e9:
                    47:83:b3:e9:aa:86:b4:7f:c3:a6:d2:a7:60:c0:69:
                    aa:9e:51:9d:96:ed:fa:ac:72:0a:66:0d:c0:67:93:
                    26:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FD:61:DF:6D:AC:5B:7C:11:E2:94:B2:AC:3F:CC:60:18:19:72:78
            X509v3 Authority Key Identifier:
                keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:61:5f:b6:0a:fc:e8:0a:7d:ed:88:45:e5:31:28:fb:93:f6:
         62:76:de:5a:49:be:7a:8f:fe:16:48:49:ee:31:da:11:99:1f:
         d3:39:2e:4f:75:2b:d7:d5:7b:6e:6c:a0:cb:b4:24:10:5f:7b:
         1a:e1:70:0f:fb:c4:1d:b4:fc:e6:dd:9d:52:97:a8:48:e6:3e:
         16:ec:49:63:44:4b:04:36:76:12:4e:70:0c:bb:23:db:c4:c3:
         80:11:f3:e1:03:95:98:43:cb:0e:67:65:72:11:32:85:da:56:
         3b:15:14:94:66:03:2d:a4:51:3d:d9:5e:99:2c:d4:d1:84:e6:
         12:67:de:cf:2e:ad:33:c2:6b:51:9f:e8:9f:3e:ed:ef:f6:3b:
         56:97:51:fc:13:fb:3b:0f:f4:3a:c8:36:81:67:c6:4c:6c:00:
         da:e3:db:03:92:21:a1:83:76:cf:90:b6:1f:3c:cc:48:50:33:
         f2:61:6e:a4:f9:2d:3b:aa:f5:b7:fd:ff:ed:64:72:96:1e:2a:
         cb:20:40:e7:8c:b5:43:71:37:1c:67:22:24:ca:e1:9f:51:1e:
         30:df:69:27:d3:48:fb:68:18:fe:b7:3d:c2:9e:9f:b7:0b:a6:
         77:aa:40:3f:5c:f5:90:72:49:1a:96:57:9b:38:bc:90:ef:b9:
         7c:c0:ce:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:02:49 2024 by rpki-client on console-fra.rpki-client.org