Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File:                     2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier:          P4KBNEIrNlhrpvXj50xjdY18RT63co07lh4K4dqkxO4=
Subject key identifier:   9E:6F:2E:BA:13:F1:C3:F5:E8:0F:6F:FC:0C:ED:39:07:90:0C:3A:EC
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer:       /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial:       018F215C48EE29212591ADE579BEF1436CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number:          113F
Signing time:             Sat 27 Apr 2024 21:00:47 +0000
Manifest this update:     Sat 27 Apr 2024 21:00:47 +0000
Manifest next update:     Sun 28 Apr 2024 21:00:47 +0000
Files and hashes:         1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: FOGKLl5arw6vaGQiumQcZRXbML6yAlaSReL+8lqU6Uo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:5c:48:ee:29:21:25:91:ad:e5:79:be:f1:43:6c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
        Validity
            Not Before: Apr 27 21:00:47 2024 GMT
            Not After : Apr 28 21:00:47 2024 GMT
        Subject: CN=9e6f2eba13f1c3f5e80f6ffc0ced3907900c3aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:7c:fd:db:02:2e:1c:fd:13:a0:bf:99:fa:
                    fc:47:85:1a:e9:c6:39:cf:4d:88:1e:97:5b:e8:1a:
                    c2:59:15:97:c4:15:6b:c7:ea:0f:22:6e:85:81:17:
                    69:9f:07:d4:9f:06:55:45:3f:22:50:6c:51:bd:f7:
                    ec:46:0a:8f:d0:07:62:23:7b:96:64:42:c2:64:2b:
                    07:1e:25:99:f3:91:f7:ac:9f:42:bb:43:4c:87:da:
                    e9:d7:65:06:72:c6:a2:65:b6:4c:f9:be:29:99:6c:
                    5f:3d:4b:38:7d:9f:a3:8b:a2:85:16:13:4a:68:8e:
                    52:90:ea:5d:da:68:c3:33:49:dd:d8:da:dc:f4:48:
                    b6:e2:46:e7:a0:dc:07:08:14:4e:51:54:8d:e3:c2:
                    c9:c2:3c:70:b3:5f:88:3f:b2:34:72:05:c1:9d:f1:
                    0a:e8:e7:fe:7d:1c:bb:de:00:5a:6c:94:f8:ce:84:
                    0e:18:0f:cc:cb:58:72:54:fa:3d:19:c9:7a:0f:31:
                    11:9f:67:aa:aa:da:ff:06:3e:27:f1:11:52:00:8d:
                    d4:c1:47:77:0c:7f:6b:bd:1c:b3:d7:1c:36:bb:cd:
                    54:2a:fa:9a:cf:5c:0f:11:b3:4d:55:f1:c4:0a:76:
                    5f:25:bd:ef:12:b8:65:a2:42:39:27:88:5b:aa:39:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6F:2E:BA:13:F1:C3:F5:E8:0F:6F:FC:0C:ED:39:07:90:0C:3A:EC
            X509v3 Authority Key Identifier:
                keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:01:a7:0c:8e:7b:f4:d1:5e:05:3c:16:4b:26:19:89:5e:
         57:02:01:2e:68:27:e5:e5:e3:bc:e4:86:80:a6:5f:35:d3:97:
         0e:48:01:d1:11:c3:f8:d3:f6:bb:c0:8a:0b:48:c7:ed:b6:9d:
         b9:60:7d:20:91:e1:a5:34:1d:a9:ad:de:ec:ca:7e:cf:81:8e:
         fd:b0:27:78:d6:73:15:72:f6:ae:b4:11:1e:44:60:d4:41:e4:
         7e:9e:d8:38:8d:b8:e8:f2:44:04:ad:22:54:c1:87:a1:2a:7f:
         b6:ac:78:18:e9:71:f2:e1:80:ee:6c:09:17:57:5b:d5:18:af:
         ab:2a:4a:f5:fb:d0:70:9e:68:0a:55:5b:ba:7a:c2:d4:59:a1:
         47:99:d7:c3:ca:c1:ed:0f:be:3e:3f:1a:fb:09:51:33:4f:24:
         fa:22:1c:89:58:46:d7:8f:45:10:0a:a3:91:bd:d3:bd:80:c4:
         f3:c3:db:1e:90:31:e7:03:c3:b5:a3:b8:d2:13:71:31:9f:59:
         bf:54:9e:1a:6a:98:7a:b7:e4:cd:ae:16:f4:12:66:7c:10:92:
         60:cb:a8:62:35:e8:c5:46:b9:2c:46:3c:cf:ad:f5:68:1b:4f:
         c4:59:7f:cc:6f:cd:f9:4a:eb:a9:c4:87:ad:51:62:53:14:c4:
         0e:6d:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:47:27 2024 by rpki-client on console-ams.rpki-client.org