Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File:                     2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier:          PIujtTX2RfhlFuw1NXis0TgrW6VSkQC5CM9DfQw3cUc=
Subject key identifier:   12:F6:80:46:B7:1E:01:15:EC:11:31:D7:F1:DB:D1:0C:BD:58:51:9C
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer:       /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial:       01901CD80FC4628FCD5B9F60C7B53E5A71B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number:          9A
Signing time:             Sat 15 Jun 2024 17:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:40 +0000
Files and hashes:         1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: ZrxKE1VQ7Opx7/DXHJRyxVVmlfEF/7gDakRlB22lj+Y=)
                          2: SBU2D1fv9-zKSTvXVOcCjj9xQVE.roa (hash: mlwImh9bGHkjLtwmbNB4w77DcXm7sRDKnJXDtwB03/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:0f:c4:62:8f:cd:5b:9f:60:c7:b5:3e:5a:71:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
        Validity
            Not Before: Jun 15 17:00:40 2024 GMT
            Not After : Jun 16 17:00:40 2024 GMT
        Subject: CN=12f68046b71e0115ec1131d7f1dbd10cbd58519c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:6e:20:4a:3a:59:36:c4:13:45:d7:30:49:
                    6b:b8:54:74:2c:9d:c1:6c:55:b9:54:f2:99:fe:a0:
                    bd:2e:dd:25:fb:ae:b9:27:b7:2a:3c:68:9b:2b:cf:
                    94:b6:5d:8b:88:0d:5c:9d:ab:41:9b:78:fa:5b:43:
                    0d:dc:44:24:dd:f9:bd:db:47:c7:bc:8d:c2:ce:a7:
                    01:f3:ed:68:4c:99:bd:62:8e:10:fe:c9:f2:f0:8e:
                    88:a8:d9:92:f2:1a:b1:7f:a2:2c:b6:4a:1b:9e:06:
                    73:ca:aa:a8:cd:ea:f7:fa:55:33:06:10:8c:df:d1:
                    ab:f6:ee:0c:02:50:0b:05:f8:7f:c1:2a:9f:25:b0:
                    01:cf:a1:82:65:b1:67:ec:9f:eb:8e:60:eb:c1:78:
                    52:5d:ea:6a:c8:ae:f5:19:29:bc:9a:f6:cc:4a:0e:
                    8a:08:3e:86:66:eb:34:a4:b6:c7:96:d4:d2:db:44:
                    3b:44:a8:11:29:2e:bc:bb:92:9f:9d:a7:49:70:5d:
                    1e:c5:44:c5:d6:4d:2e:67:33:b8:67:d0:d9:58:35:
                    86:ba:4d:09:68:6b:51:a7:eb:f0:17:dc:d8:73:8c:
                    1f:21:d1:cb:f5:db:97:7c:f7:b6:3c:dc:8e:20:f3:
                    26:05:21:5e:99:2e:22:29:5b:66:5c:35:4d:49:a0:
                    5e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F6:80:46:B7:1E:01:15:EC:11:31:D7:F1:DB:D1:0C:BD:58:51:9C
            X509v3 Authority Key Identifier:
                keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7d:85:51:6d:00:01:0f:ac:e3:05:8e:87:85:7c:29:75:92:
         00:0e:7c:35:0a:30:87:89:7b:72:62:8e:03:ab:9b:72:5e:7b:
         3c:91:92:50:63:cd:43:91:d4:56:96:66:0e:85:6a:a5:df:24:
         be:7d:49:33:48:77:54:d6:60:55:ff:d5:1a:d5:44:8e:08:d8:
         5d:c6:d8:01:b3:c1:4b:74:ce:e9:52:2e:4a:a4:f3:55:56:0f:
         85:d6:25:0e:37:29:e7:bf:85:66:85:f1:79:45:cc:b9:23:8a:
         85:a4:c0:c5:ae:1f:6a:75:92:3a:f8:c4:ad:2d:29:04:01:21:
         3d:3c:23:9a:cf:1e:ce:07:3c:7d:1e:bc:ec:3a:76:88:41:30:
         1a:0a:76:52:bc:bc:5f:d3:5b:64:5d:72:5c:04:68:cf:aa:34:
         1a:1f:a1:f6:c9:53:9c:58:7c:d6:28:3d:e6:82:69:ad:a8:c9:
         e8:32:be:c5:5e:b2:b4:17:ed:16:bb:d3:9e:0a:68:fc:93:7f:
         6e:1d:86:fc:80:db:b3:d3:dd:1b:94:cb:f0:f8:41:82:03:83:
         a1:8a:25:3a:01:75:3a:fc:37:5e:d5:94:60:f0:66:80:f1:22:
         4f:a9:f6:9a:46:15:98:32:e5:04:f1:30:9c:c5:f6:6e:23:18:
         c2:4e:d9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:52:04 2024 by rpki-client on console-ams.rpki-client.org