Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File:                     Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier:          pWSKHWiyc8298Gug5qtdrbygQYihaVD1fJSR4RAX7mY=
Subject key identifier:   1F:BB:6F:7F:E1:5B:48:7F:54:C1:EA:CB:0D:82:14:5E:40:ED:89:40
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer:       /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial:       01901BFE22F907FBA7FBFF323CC69F03EACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 13:02:38 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:38 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:38 +0000
Files and hashes:         1: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: 3DE8pQ4I2tW6LClsyN2qJz345gTonUwTfWDX/UGKbWs=)
                          2: ytByduVv07fOh6Oy5Gc9pKytyMM.roa (hash: AYRT7qL4gnhuUC9DKqgcUrWrex1VzEfRF70IBTcMxaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:22:f9:07:fb:a7:fb:ff:32:3c:c6:9f:03:ea:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
        Validity
            Not Before: Jun 15 13:02:38 2024 GMT
            Not After : Jun 16 13:02:38 2024 GMT
        Subject: CN=1fbb6f7fe15b487f54c1eacb0d82145e40ed8940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:0e:68:e1:90:de:36:b2:6e:57:36:b4:89:
                    47:b5:8f:4c:f6:91:03:5f:96:0e:0b:0a:0b:b7:99:
                    96:e7:24:03:f2:d9:c2:40:8a:85:15:9f:28:72:0d:
                    b6:d0:5f:b8:51:f8:b7:03:2f:6f:74:60:4c:b0:1b:
                    bd:da:ab:d9:a2:dd:29:39:18:9a:e6:92:2d:12:4e:
                    ea:db:8e:ac:46:7e:b9:76:4b:d7:df:8c:b3:e9:36:
                    a3:1f:cd:d1:cc:a0:6f:86:2f:1a:0a:5f:07:85:de:
                    1b:3e:a7:91:e9:f5:12:de:a4:9a:1f:dd:c1:02:a8:
                    2d:f6:d8:97:9d:32:80:f4:7a:3c:1e:dd:5f:42:b5:
                    49:7b:3d:48:75:56:2d:01:32:fe:d8:9c:42:ec:2c:
                    1a:9c:04:83:61:58:ef:da:45:1b:c0:ca:b0:62:f9:
                    66:1d:90:5f:0b:57:af:49:e9:f8:ca:43:e3:ab:36:
                    c3:26:95:9d:08:57:2b:00:dd:0f:ac:73:46:4c:a4:
                    8f:b6:68:37:a2:fa:1b:99:6f:9e:f9:fe:cd:16:a9:
                    ab:21:99:38:2b:64:fa:8d:5b:2b:12:56:7e:21:9f:
                    4d:a7:77:cd:69:ef:4d:93:7c:0b:19:c2:37:c4:5d:
                    41:69:c2:87:52:f9:47:9d:7a:1e:c9:7d:e5:1f:ab:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BB:6F:7F:E1:5B:48:7F:54:C1:EA:CB:0D:82:14:5E:40:ED:89:40
            X509v3 Authority Key Identifier:
                keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:0b:74:32:ae:da:6e:74:30:d3:16:6f:f5:05:31:ef:bf:f4:
         67:55:29:d7:76:3f:62:6c:a0:fc:b4:31:8a:89:40:83:b7:cd:
         f8:70:8d:17:c7:87:bd:87:61:cf:e5:13:29:dc:28:c5:cb:26:
         1b:7e:bb:2d:2b:28:2a:65:32:b9:8a:34:c1:d5:ce:6f:df:c5:
         7e:5f:ad:02:62:78:53:51:24:12:fd:2f:b6:56:b1:62:48:f1:
         50:a1:c6:b3:d2:87:0f:fc:a8:e5:1e:20:f4:90:3a:5f:3e:ef:
         4f:98:f5:55:f7:40:2d:5a:4b:ad:32:df:6f:be:58:04:f7:7b:
         07:aa:19:35:67:60:41:34:7b:cf:59:23:ec:a0:36:72:f4:6a:
         91:3e:01:d3:91:0f:0e:df:98:75:12:8a:07:45:d9:01:6f:e0:
         91:6c:8a:7d:35:1e:08:a5:d4:3c:e2:fb:01:85:f3:f1:86:21:
         a3:38:2a:11:f3:e2:c5:61:bb:3a:c4:a8:57:4c:32:fd:d7:43:
         d5:63:d0:09:42:f6:65:34:38:db:3c:6a:6f:41:58:cc:f4:b4:
         34:f7:77:3d:d7:12:15:a8:ca:dd:26:66:26:13:94:3e:3f:b2:
         0f:13:5d:17:0b:90:2e:32:e5:35:b1:89:cb:45:91:b4:18:c8:
         c3:d2:87:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:21:40 2024 by rpki-client on console-ams.rpki-client.org