Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File:                     Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier:          AoTaZKjHCRR5ShZYiFCVauG2Q74hghg1vrRs08iWmfA=
Subject key identifier:   6D:AD:34:11:CA:5C:DC:AF:E4:99:C1:1A:D2:41:43:67:7C:D3:BB:BD
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer:       /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial:       01901D45D800E718DDBC21F684680B17F31D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number:          0AF7
Signing time:             Sat 15 Jun 2024 19:00:34 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:34 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:34 +0000
Files and hashes:         1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: PDCX12ym5fF8CAiY1WOzmGtZtEGTx8qeZ+m6WdC03b0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:d8:00:e7:18:dd:bc:21:f6:84:68:0b:17:f3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
        Validity
            Not Before: Jun 15 19:00:34 2024 GMT
            Not After : Jun 16 19:00:34 2024 GMT
        Subject: CN=6dad3411ca5cdcafe499c11ad24143677cd3bbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:b3:63:23:3a:22:78:86:c2:7a:18:24:7e:
                    d8:7d:e4:9c:08:9b:bd:3d:52:44:d6:10:66:a4:cb:
                    65:93:e3:0a:d0:8c:3d:df:b9:cb:3b:87:fc:c6:44:
                    9f:7b:48:cd:b9:22:53:22:8e:4a:c4:ba:cd:7b:45:
                    c4:35:56:5a:ae:46:83:bb:5a:4f:66:58:1e:13:d6:
                    48:ae:a3:88:df:ac:11:4d:c8:fd:e5:0d:be:f1:27:
                    a0:1c:3c:0f:2e:51:93:9b:10:93:6d:6f:7a:21:3d:
                    78:03:53:ac:a9:9e:12:f7:c1:41:17:2d:b4:05:6d:
                    d0:91:7e:07:bc:6b:bf:8c:c4:b1:ca:12:74:9f:f8:
                    dc:d3:9b:27:f6:d2:4e:3b:f2:a0:aa:11:64:3f:5b:
                    64:3f:b9:a2:02:3c:4f:e1:2c:5a:ba:9b:1e:2a:93:
                    94:40:7a:ee:b1:5d:22:49:ab:9d:ad:47:4c:33:5d:
                    c4:7a:cf:43:26:99:77:e2:90:68:8f:5e:a7:6e:61:
                    ec:ca:33:a7:1a:f3:87:c2:bf:43:dc:7b:1c:55:c9:
                    6c:85:df:8e:3c:59:db:1e:e9:80:2a:83:96:9d:34:
                    00:bd:e4:e9:a8:55:fa:9b:6a:12:38:c1:3b:34:22:
                    77:d7:5c:ec:8a:63:86:56:21:ef:9a:df:ab:e2:82:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AD:34:11:CA:5C:DC:AF:E4:99:C1:1A:D2:41:43:67:7C:D3:BB:BD
            X509v3 Authority Key Identifier:
                keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:93:ae:9f:74:0f:ec:5f:7f:45:a8:9b:4b:bc:31:bb:eb:dc:
         cd:44:5f:b5:9f:57:2d:3e:f3:e5:a7:0b:da:22:22:95:e7:e2:
         01:df:56:f9:06:81:9d:b8:1d:c6:06:c4:ef:2f:25:69:5a:fd:
         94:8e:24:b0:6c:34:cb:f9:c6:43:85:e3:30:df:ce:43:81:64:
         cd:20:90:e4:e5:78:52:e0:ac:4e:34:c7:e7:03:f0:1f:56:fb:
         34:d9:5c:9f:ae:80:6c:91:ba:d6:d9:94:0f:46:73:06:6c:2c:
         b4:40:4e:53:ed:81:c3:a5:be:25:c0:ed:52:a9:d3:36:cb:85:
         5a:6c:e2:95:a3:f2:85:bb:be:1d:c2:6e:45:1c:96:33:c6:46:
         68:2d:48:78:2a:e0:a9:b5:12:30:a3:ec:4d:5f:bd:4e:57:92:
         85:35:a1:ef:05:5c:ff:4f:7f:1b:0d:b5:d5:1c:be:7e:10:a5:
         47:2b:4d:b0:ae:9a:c0:44:6e:52:fc:c1:1e:7b:e4:32:8c:89:
         58:a6:a3:b3:49:ec:82:dc:eb:f1:1a:fc:82:19:af:19:83:57:
         02:00:9b:f9:12:5b:0b:48:87:e3:20:14:63:67:74:74:ef:13:
         90:13:21:75:24:f1:e0:48:00:f4:c2:5a:65:cb:c2:a9:3e:b6:
         22:b7:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:18:01 2024 by rpki-client on console-ams.rpki-client.org