Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
File:                     8iyKma2nf70-JAFPXiTxr2lQXCM.mft (raw, json)
Hash identifier:          wGrbCmSHAVBjs99IQxxe1zxmvbiDWFLwxqoBz35nRx0=
Subject key identifier:   2B:A3:EE:C9:14:E8:31:D7:9E:6B:1A:93:C6:C9:1D:A0:B0:8F:F4:7A
Authority key identifier: F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
Certificate issuer:       /CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Certificate serial:       01901DED0069A3D631DD46667545D0BB35F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:03:09 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:09 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:09 +0000
Files and hashes:         1: 8iyKma2nf70-JAFPXiTxr2lQXCM.crl (hash: lkGXcqn5rIflLZ+0gbnvsjG57XqlzUmaztxBpkJhhoY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:00:69:a3:d6:31:dd:46:66:75:45:d0:bb:35:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
        Validity
            Not Before: Jun 15 22:03:09 2024 GMT
            Not After : Jun 16 22:03:09 2024 GMT
        Subject: CN=2ba3eec914e831d79e6b1a93c6c91da0b08ff47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:0c:29:5f:39:8c:40:84:b5:d6:b8:e0:d9:
                    f6:af:dd:2a:49:6d:a6:82:5e:72:b0:0f:21:4a:db:
                    4f:9e:a6:d4:1f:fd:b8:aa:8e:78:32:98:c4:bf:01:
                    43:5f:6f:b6:13:96:99:b9:38:77:01:89:21:28:f9:
                    4b:aa:b8:36:20:d8:20:67:0b:79:42:6e:f6:f6:df:
                    19:a1:af:d1:66:c1:33:c3:50:78:ac:77:3d:71:ce:
                    5b:61:22:b5:be:be:3b:85:ce:e5:51:31:f6:0f:a7:
                    02:bc:03:40:98:17:8e:d5:d1:60:d3:9a:0f:2f:ba:
                    6b:d5:b3:07:7b:a7:8c:a4:fe:8b:ac:19:62:97:85:
                    35:29:2d:7f:e0:72:c3:6a:81:6f:3d:5b:82:fd:ae:
                    45:9d:cb:d7:14:f7:75:ca:e7:76:94:51:d9:6e:32:
                    58:d6:3c:cc:2b:f0:d8:cc:c2:48:07:6b:94:41:ee:
                    71:75:a0:44:01:7d:21:df:79:3f:c4:c6:5c:81:d7:
                    20:28:f8:f7:09:18:7c:6b:44:73:58:be:8d:80:13:
                    9d:ca:67:ab:fe:61:86:ab:4f:b8:7e:4f:eb:2b:01:
                    24:cb:b9:cc:c5:90:0d:60:1a:9b:1d:7e:67:e4:c3:
                    f5:a9:ac:f1:a0:c0:50:bd:af:dc:22:79:55:22:08:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A3:EE:C9:14:E8:31:D7:9E:6B:1A:93:C6:C9:1D:A0:B0:8F:F4:7A
            X509v3 Authority Key Identifier:
                keyid:F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1f:69:02:35:6b:e2:f2:e0:e1:53:ac:af:5b:b7:cd:a2:42:
         01:93:8c:04:63:1a:cd:5a:11:a2:c8:b6:90:1f:76:4f:81:5a:
         ed:2b:97:e8:da:6f:4c:73:35:78:84:43:4b:b2:82:ee:24:a1:
         30:95:35:0d:92:90:71:3b:9e:dc:56:f7:62:3b:1b:fd:e1:17:
         fe:9f:65:3a:0d:44:e8:61:09:6b:f4:f2:fd:c1:b1:7d:a2:c4:
         65:17:79:8d:3d:cc:a4:bf:ec:8c:06:74:75:2d:fc:65:40:51:
         eb:e5:27:84:4a:11:a2:d8:00:37:41:14:75:af:e5:74:2a:d6:
         11:e7:d8:8e:d9:2d:9f:59:c3:0c:38:ac:f5:64:1a:5e:2c:4c:
         df:fa:6d:f1:85:39:ec:27:be:7a:7a:5c:a9:00:6d:3c:8e:ac:
         57:b9:d9:30:46:0a:3f:01:aa:25:e3:46:ea:ff:9c:35:fe:dc:
         b6:60:49:ad:fd:7f:26:d0:bf:8d:2c:30:ed:c0:2c:fe:58:2d:
         6b:7e:2d:eb:ae:2e:04:b9:89:2a:e1:72:53:14:72:fa:2a:64:
         71:2d:2d:56:05:bd:01:ee:86:15:fb:27:1e:c6:95:31:13:f3:
         16:84:b6:4e:34:26:38:d8:35:ea:37:52:c1:c0:b1:8a:7d:27:
         6f:04:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:52:37 2024 by rpki-client on console-ams.rpki-client.org