Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File:                     pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier:          u1W9o3U1zY66c/dVrcq83whaDcItGLIEEq/5ToAIaZU=
Subject key identifier:   24:78:1B:83:57:2C:BB:F7:A6:73:10:04:17:6D:20:3C:F0:8E:32:B8
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer:       /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial:       01901EC6FFD9026C22BB113212C34C41FE2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number:          089C
Signing time:             Sun 16 Jun 2024 02:01:16 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:16 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:16 +0000
Files and hashes:         1: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: UIo2pRQ9uA32upIhRFQNZ8eomK7XrkON1G0uOg4SAzs=)
                          2: px6_-QljpN30eJitM7MVFky8_fc.roa (hash: XWsoa64wMzOEpaPi5z08PCmsw53FQDmbBP9D5t/H41c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:ff:d9:02:6c:22:bb:11:32:12:c3:4c:41:fe:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
        Validity
            Not Before: Jun 16 02:01:16 2024 GMT
            Not After : Jun 17 02:01:16 2024 GMT
        Subject: CN=24781b83572cbbf7a6731004176d203cf08e32b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:15:81:fa:00:fb:a4:40:32:21:8b:06:ef:4d:
                    28:31:69:00:3e:86:81:d4:d0:0f:e2:16:6a:aa:82:
                    01:a5:6e:93:7f:41:0f:44:95:e5:9c:6b:b7:b5:ce:
                    7a:28:ec:2f:22:85:7d:ef:eb:34:3d:c8:95:38:8a:
                    1b:8b:03:a3:c1:38:b3:d0:ff:6b:06:5f:ff:8c:a6:
                    db:81:46:15:56:c0:62:94:1a:c8:24:6c:38:f0:a0:
                    37:42:09:c2:5c:aa:2c:c6:37:f3:fa:82:e7:ba:ec:
                    5a:97:f8:38:ba:1c:f9:89:5b:5c:ef:02:a5:64:83:
                    f8:0b:d3:e3:eb:4e:fa:34:1a:5c:aa:09:54:fb:93:
                    41:55:56:81:50:cb:1e:ac:7e:f6:f2:60:ee:f7:04:
                    1d:c0:48:10:19:48:e1:a5:34:01:af:50:09:4c:f2:
                    c3:b7:49:0c:c8:f7:74:ee:0a:08:ab:48:a1:a1:e1:
                    2f:9e:93:fb:f7:61:a9:4e:ea:12:d4:7e:52:12:5e:
                    3f:c1:f5:a8:e8:58:ae:5c:36:92:75:9a:99:81:b3:
                    b5:01:0f:cc:a4:6e:90:1f:40:4f:32:8e:58:2a:79:
                    f0:73:25:52:38:93:6c:a9:79:bf:9e:f3:fe:37:b5:
                    e8:5a:6d:d7:33:df:d4:f4:0f:b9:ce:3d:bc:f3:09:
                    89:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:78:1B:83:57:2C:BB:F7:A6:73:10:04:17:6D:20:3C:F0:8E:32:B8
            X509v3 Authority Key Identifier:
                keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4b:71:9d:ca:c2:51:ee:89:24:4a:4c:bc:d1:7e:44:36:b0:
         c4:cb:6d:93:5f:da:48:9f:f9:7d:ff:57:b0:08:2a:73:43:17:
         43:2b:32:35:77:91:8e:01:93:d5:4c:97:b9:55:b6:cd:8e:5b:
         e4:ee:e2:88:09:13:72:55:9a:46:cb:a6:53:81:20:6a:19:ee:
         e8:b0:44:a4:2e:ec:02:6e:ac:c9:12:06:53:30:25:c9:62:c4:
         fb:1b:80:4b:de:94:8b:7c:b9:10:03:bd:71:76:52:93:ee:6c:
         3b:d3:20:15:04:23:c0:7d:a4:9e:20:a7:bb:e9:63:c3:09:81:
         f7:2c:e7:03:b9:f1:e1:f7:32:7a:a4:27:94:ef:5e:90:c1:cd:
         02:6b:fe:13:be:25:54:ad:fc:66:43:ae:7a:7d:b6:a2:af:09:
         a5:21:c9:c4:fe:7d:2a:af:7f:50:dd:a4:7e:cb:7e:d3:1a:d3:
         16:21:1d:5f:4a:94:d5:6a:19:15:0e:65:19:2f:f2:2f:ee:85:
         b1:6a:b6:9c:ea:ec:1e:d4:cb:ad:ee:e5:e1:c0:e1:ac:73:9e:
         8d:dd:d6:ba:67:19:3f:34:fe:2b:45:a8:2b:a8:0c:de:eb:5c:
         f8:4c:58:85:06:e7:b2:09:5e:b2:29:6b:ab:a2:bc:25:fc:fa:
         77:ee:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:47:21 2024 by rpki-client on console-fra.rpki-client.org