Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File:                     9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier:          BW+0yxZsMk6g54XKSIcVYyZGT+abWEWg7uKpBaDb6lw=
Subject key identifier:   01:42:65:C0:71:CC:70:90:2E:BE:3D:70:E4:30:05:E7:5A:B8:B5:D4
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer:       /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial:       0190527D027E348E4739929117DCE31BF515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number:          11DE
Signing time:             Wed 26 Jun 2024 03:00:42 +0000
Manifest this update:     Wed 26 Jun 2024 03:00:42 +0000
Manifest next update:     Thu 27 Jun 2024 03:00:42 +0000
Files and hashes:         1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: DDocqQp4GywenKzMtfF5WCfhOSA78chwjLhS3SFelwU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 03:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:7d:02:7e:34:8e:47:39:92:91:17:dc:e3:1b:f5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
        Validity
            Not Before: Jun 26 03:00:42 2024 GMT
            Not After : Jun 27 03:00:42 2024 GMT
        Subject: CN=014265c071cc70902ebe3d70e43005e75ab8b5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:19:03:cb:cf:44:d9:37:8f:0f:18:b1:3d:
                    1a:72:a6:0b:c9:eb:ae:fd:d4:13:08:0d:ef:d3:bc:
                    61:19:28:48:f4:39:86:2a:17:47:8b:83:b1:4b:a8:
                    dd:48:22:75:ca:b7:56:23:27:d2:38:61:8c:67:88:
                    63:d4:01:9c:93:4e:57:7c:2f:3b:9f:33:b7:c4:53:
                    1a:bc:f0:14:4b:15:96:23:98:5f:bc:c7:0e:c0:fe:
                    91:7d:ff:7a:0b:4a:5f:26:3a:f8:b3:81:c1:ac:24:
                    af:08:ac:4d:65:74:62:b5:b7:41:69:25:ca:56:97:
                    8f:03:f5:58:43:49:59:63:8e:95:c0:3e:50:55:26:
                    aa:ae:25:ca:83:46:e5:43:6d:e7:39:9b:ce:64:60:
                    f0:d4:f3:60:69:18:ba:e4:1c:c4:2f:d4:8b:9f:98:
                    ec:3b:32:a2:54:f9:18:df:42:77:f7:d9:07:23:ac:
                    45:40:90:50:23:6e:bd:ff:84:4b:67:d5:c7:7e:21:
                    ff:e2:e9:fe:7a:49:af:4f:c9:54:88:9e:a2:45:95:
                    65:d7:63:af:2e:bd:83:5b:ba:5f:b2:f6:e7:20:ea:
                    b5:d8:6c:ff:a8:22:11:2f:95:22:2a:dd:9e:eb:83:
                    28:06:a0:27:28:c0:84:61:24:5b:05:ea:f6:ee:99:
                    82:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:42:65:C0:71:CC:70:90:2E:BE:3D:70:E4:30:05:E7:5A:B8:B5:D4
            X509v3 Authority Key Identifier:
                keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:04:26:01:fd:e1:cb:30:41:11:4d:89:34:48:cc:e3:e8:59:
         bc:b4:1b:d4:95:68:df:62:bf:a5:c4:83:b4:5a:d1:91:0f:a2:
         7e:a1:44:fa:c4:cb:05:4a:2d:6b:68:52:b4:f6:62:1b:93:38:
         51:4d:ae:82:5c:42:d5:42:72:89:e1:2e:9c:5a:31:60:3b:9a:
         ed:ef:82:c9:00:33:71:21:60:cb:25:e6:67:89:b6:07:71:34:
         6d:ef:c7:15:65:c9:f4:4b:5c:3a:fa:b1:2c:2c:2a:4a:64:7b:
         0d:dd:49:dc:1a:3a:51:56:66:56:ca:ee:bb:ec:ed:00:f7:25:
         50:2d:b6:e0:32:d4:63:99:18:a8:cf:5a:01:57:93:2c:b9:75:
         68:52:04:08:7a:57:ab:69:93:38:da:4e:2d:c0:14:92:99:4e:
         a3:35:2e:83:44:31:b7:e0:a3:2d:c0:56:d7:2a:24:ce:4c:90:
         eb:1d:5f:34:81:58:42:35:7f:a8:1e:f6:10:3a:35:4b:85:1e:
         cf:67:96:f3:30:11:aa:74:3c:3d:88:a8:b8:67:8d:fa:93:e6:
         a3:d2:ba:00:32:70:d5:84:f1:e7:52:46:54:3b:ef:ec:d3:fc:
         4f:d1:c4:ff:d8:c0:80:34:fa:31:9f:c6:11:e2:ef:fc:07:fd:
         18:7a:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:43:18 2024 by rpki-client on console-fra.rpki-client.org