Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File:                     11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier:          36EpQv+6Zkw16JjaBMbZvsBVNftWxdAafdkw7Cfnx8M=
Subject key identifier:   49:2D:2A:28:BC:97:61:59:E0:2F:CE:25:2E:B7:5E:05:F7:5F:01:F7
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer:       /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial:       018F4B6E4F73C312694BEE897B6BB418A1A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number:          1155
Signing time:             Mon 06 May 2024 01:04:31 +0000
Manifest this update:     Mon 06 May 2024 01:04:31 +0000
Manifest next update:     Tue 07 May 2024 01:04:31 +0000
Files and hashes:         1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: mohPl+4sf5aSLysMYQgAq7XW6RXWmiQ7ohzaF9l1isE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6e:4f:73:c3:12:69:4b:ee:89:7b:6b:b4:18:a1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
        Validity
            Not Before: May  6 01:04:31 2024 GMT
            Not After : May  7 01:04:31 2024 GMT
        Subject: CN=492d2a28bc976159e02fce252eb75e05f75f01f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:c4:23:ee:7d:05:37:7d:7b:19:7b:8f:99:
                    d0:7f:c7:d5:44:03:fa:be:63:e7:50:8d:65:91:99:
                    17:48:32:31:8c:36:bd:d7:94:24:39:3f:0f:e1:dc:
                    73:2e:60:5f:16:08:1c:f1:62:7c:83:ad:cf:cf:1d:
                    cf:73:0c:e8:a6:24:f6:1e:04:13:d5:12:9f:76:75:
                    36:ab:a4:ef:e7:20:c6:73:00:af:b5:8a:f6:79:85:
                    ae:db:69:7b:81:0d:db:b5:bd:33:71:d2:c5:9b:52:
                    63:cf:f2:9e:53:d6:6e:2d:ec:05:34:a0:1d:57:aa:
                    07:0c:4b:94:af:3d:51:f5:12:94:28:7a:a6:87:13:
                    82:01:a0:a2:fd:1a:f7:17:e4:17:03:8e:a1:51:ce:
                    b7:db:14:a5:da:fc:bb:a1:dd:6b:a4:d4:38:38:57:
                    91:c3:24:de:6d:f9:bd:86:de:24:a5:08:70:c5:bf:
                    38:8a:63:cb:11:2f:54:b8:93:90:6c:a2:ce:ae:17:
                    93:2b:82:d7:14:f9:c6:f8:e4:27:8f:c2:61:a0:70:
                    b6:08:13:f5:5e:06:85:8c:74:4a:60:bb:3b:b1:19:
                    5b:05:fe:70:fe:2a:5e:79:67:84:cf:cf:67:6b:9f:
                    75:a4:aa:e2:97:56:2a:69:d6:b2:6c:ef:54:27:fa:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2D:2A:28:BC:97:61:59:E0:2F:CE:25:2E:B7:5E:05:F7:5F:01:F7
            X509v3 Authority Key Identifier:
                keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2f:1c:67:ec:a3:4b:21:40:3e:f0:52:8e:7c:3e:02:8c:ae:
         20:cf:ef:52:ea:be:70:cd:e6:ee:19:48:17:66:19:3f:d1:c5:
         8b:7b:4c:92:82:7f:9a:fe:02:15:de:8f:b8:30:f0:6b:20:bf:
         a0:db:11:25:5f:e2:09:93:ea:78:51:2f:1e:7d:5f:fc:f4:07:
         ce:2e:de:ae:a9:44:36:5d:ea:db:68:ce:27:7c:f3:6c:c1:56:
         dc:f3:80:22:e6:84:80:81:a1:c0:b2:6a:86:84:3a:d3:7c:57:
         e5:2d:39:66:b2:c0:bb:f1:b4:80:24:8a:8b:fb:57:ed:ef:66:
         79:ff:c7:3e:c9:74:f7:91:3b:9d:d8:fe:3e:f0:0f:e3:95:d4:
         7f:fe:7e:5f:a2:ec:71:3b:8c:82:e8:cb:2e:36:9b:c6:b6:f1:
         a5:61:b8:fd:e1:5b:6c:40:d5:af:37:a3:d4:df:2f:27:bf:c7:
         b9:9e:b9:47:80:09:00:03:c5:5a:51:d7:51:bf:14:78:d5:34:
         d3:d9:18:91:52:7e:a4:80:1e:92:93:08:ea:dc:0c:93:c0:f2:
         82:d5:51:a1:64:47:25:a8:d6:1a:9e:31:d5:df:bb:23:ac:cd:
         a5:28:d0:88:57:bb:33:96:d2:9a:18:d0:cd:d2:19:4e:4f:f3:
         a0:a5:c8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:47:05 2024 by rpki-client on console-fra.rpki-client.org