Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File:                     CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier:          FSiQgasfRHxALUESvZ4xZ/AmDgiavbK+Zqd88T7eZb0=
Subject key identifier:   95:7A:19:85:03:27:99:D6:3D:ED:16:1D:98:C4:79:A3:C3:C4:C2:AA
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer:       /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial:       0190448CED4B13B6D615D73FB6EEF4BD8623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number:          11DD
Signing time:             Sun 23 Jun 2024 10:03:24 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:24 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:24 +0000
Files and hashes:         1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: jRjSuyEJsz49kpQWo3+mNduF1VA9zuxp/1jHDCAbm44=)
                          2: myyBpowF_dIMqdeZA8jOYddQHxA.roa (hash: yOD5e46EzMbWMmmSFZvoA5C2RzIcrFtOWimzNofTibA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:ed:4b:13:b6:d6:15:d7:3f:b6:ee:f4:bd:86:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
        Validity
            Not Before: Jun 23 10:03:24 2024 GMT
            Not After : Jun 24 10:03:24 2024 GMT
        Subject: CN=957a1985032799d63ded161d98c479a3c3c4c2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:30:1a:29:d5:17:85:8a:cb:40:b8:0e:f6:
                    07:55:d4:0a:ce:dd:7b:6d:e3:68:c0:8b:35:64:48:
                    a2:f0:b4:2d:aa:7b:bc:7b:5d:a1:66:21:24:05:0f:
                    57:0f:a8:88:63:96:dd:2f:fc:f6:20:63:c7:4b:fd:
                    3f:9b:f7:05:b6:99:bb:11:4a:3e:d8:1e:54:40:3b:
                    3a:2e:c0:74:0b:71:bb:50:5f:7b:32:c4:2d:49:05:
                    49:e8:b6:af:88:70:1b:b0:0c:fd:f5:74:1f:fd:22:
                    7d:cf:44:fd:9a:cd:75:b2:bb:f1:05:8d:1b:03:c9:
                    71:de:92:a8:80:b7:ea:b5:0e:43:45:f8:8b:1b:0a:
                    79:de:17:05:66:d5:02:0a:de:c8:19:19:97:ef:7d:
                    35:5d:5f:32:29:41:80:20:9c:b4:a5:a5:62:32:4a:
                    67:e0:67:d2:15:7a:77:f0:b9:58:cd:8f:09:a3:36:
                    2c:4d:80:e7:80:7b:45:c2:7e:8c:8a:dd:3e:7e:ea:
                    a6:23:75:e3:6a:e8:02:77:74:e9:1f:02:c0:8a:81:
                    55:02:e3:24:e2:9b:05:65:fa:2e:06:0b:0c:35:f8:
                    44:5e:cc:b5:ea:ff:c1:55:d0:30:36:33:39:29:b8:
                    65:d1:19:36:c8:e8:82:c8:70:31:dd:2f:8e:d7:cc:
                    0c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7A:19:85:03:27:99:D6:3D:ED:16:1D:98:C4:79:A3:C3:C4:C2:AA
            X509v3 Authority Key Identifier:
                keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:26:2a:93:b4:9d:06:7d:c5:49:ef:61:3e:b4:bc:8d:37:e9:
         17:33:0f:c1:9f:72:2c:2c:8e:31:f0:5e:57:98:b9:ff:16:a6:
         93:74:57:92:d1:61:34:81:67:ff:9e:d9:75:ce:55:ac:f1:37:
         8d:53:a4:a6:66:7b:7a:2b:d5:a1:0b:aa:46:64:c9:95:2a:40:
         50:3f:ac:07:7f:1c:e7:e8:7c:4b:45:9a:d5:fd:8e:78:db:5d:
         ed:01:12:1f:53:61:cb:3b:64:69:c8:17:2a:bf:78:10:36:d6:
         0f:c0:dc:82:ec:f0:04:a0:37:79:70:5c:82:53:c5:a5:5d:36:
         a5:29:d8:c2:8d:2e:9a:26:1c:fb:1e:4e:65:0e:ef:ad:2b:95:
         b6:0d:46:6a:cc:52:0c:53:b1:32:04:96:c1:1a:19:82:e4:ec:
         53:83:74:eb:60:18:ba:1d:1c:e5:1e:d8:59:7d:68:bc:dd:84:
         43:75:c1:00:00:f0:c3:b1:e1:62:af:53:d3:04:9a:1d:62:db:
         fb:4c:eb:31:e0:f9:20:c9:95:f7:56:ca:20:b3:51:4f:bd:82:
         44:44:d2:2b:a6:21:e6:0f:42:0c:fe:e8:cf:d6:bd:de:15:d5:
         4f:9c:1c:b9:c8:1f:64:e0:65:1b:27:f1:f6:5d:84:7d:11:ce:
         74:50:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:25:00 2024 by rpki-client on console-ams.rpki-client.org