Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
File:                     V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json)
Hash identifier:          S4YYGKNT6zaQt/8QkY3aELpw2OWDOm1gXIi9+pqyh1c=
Subject key identifier:   CF:52:66:65:A3:97:64:A6:1E:32:E2:41:0A:FE:C9:02:28:44:9C:A0
Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
Certificate issuer:       /CN=57d011b577f90aa7e8e0cc5229e1f29983824593
Certificate serial:       019044F8FDECAAADB444F66C1845CBB08F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
Manifest number:          11D7
Signing time:             Sun 23 Jun 2024 12:01:26 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:26 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:26 +0000
Files and hashes:         1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: oC2F8WZ5TBdN4FsDwGs/zc78IrOICkgTyG9FAqPxXno=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:fd:ec:aa:ad:b4:44:f6:6c:18:45:cb:b0:8f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593
        Validity
            Not Before: Jun 23 12:01:26 2024 GMT
            Not After : Jun 24 12:01:26 2024 GMT
        Subject: CN=cf526665a39764a61e32e2410afec90228449ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:e1:a4:9a:87:6f:4f:ae:ce:c5:cb:2a:68:
                    ea:10:14:41:ea:c6:c0:cc:e9:37:7e:36:cb:49:2f:
                    85:04:cb:15:9f:0f:74:3a:d8:d4:0d:62:6a:90:e2:
                    b5:70:bb:d1:d4:3f:6f:56:c2:a1:f7:9a:2d:03:d0:
                    66:85:0b:e9:37:94:98:16:9f:35:23:4b:e4:d4:97:
                    6f:f3:99:d0:26:ba:79:ff:9f:e1:4e:6f:ef:4c:05:
                    6c:33:22:c0:30:7b:2d:a3:8a:12:b8:5d:0a:32:07:
                    f2:78:2b:76:4a:5c:3d:5f:5b:5a:91:3f:85:35:a8:
                    07:8e:19:67:e2:af:4f:06:a0:3c:92:80:dd:f1:0b:
                    a6:e1:3d:8a:06:71:96:9c:6d:ec:33:56:a6:41:d5:
                    c9:e0:02:2c:3d:29:3d:87:5c:ad:84:56:1b:10:1a:
                    09:1e:ac:91:60:c1:6d:56:ce:d4:bc:cc:2d:34:0f:
                    3c:0d:a1:6f:97:31:b9:fe:90:33:a8:10:b9:bd:e8:
                    b0:38:1c:e0:d4:7d:9d:1f:c0:d4:34:eb:bc:3a:33:
                    8c:3d:fa:01:88:0f:e4:90:90:12:ce:1b:e0:76:c7:
                    e4:a7:f7:42:59:61:4a:84:e2:c5:5c:e1:b3:02:ed:
                    93:78:6a:a3:25:bd:ab:7d:60:18:92:7d:21:9c:23:
                    f6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:52:66:65:A3:97:64:A6:1E:32:E2:41:0A:FE:C9:02:28:44:9C:A0
            X509v3 Authority Key Identifier:
                keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:82:7d:30:75:8e:a2:fa:06:2a:40:91:52:d4:c9:76:6d:a1:
         15:73:e2:d0:b0:cc:23:54:84:df:f1:c7:68:1b:b4:23:20:e2:
         2e:a5:c6:29:f6:86:5e:cb:3f:b3:66:98:77:0f:5b:8c:94:85:
         9a:fc:76:35:6b:8f:b6:b4:22:cb:9f:88:47:d8:1d:46:14:43:
         ee:bf:c4:d2:93:25:49:a3:06:16:56:22:ec:f0:d4:60:dd:8b:
         a4:d0:ab:9e:0f:54:e1:8e:2d:72:52:00:4a:5b:2e:fc:d5:6e:
         db:ad:f8:18:7e:42:57:5e:15:e8:e9:85:4a:80:a5:d9:f6:30:
         36:76:16:b7:7f:b3:8c:0f:65:a7:90:79:61:75:65:f3:fb:45:
         5e:69:fa:fe:f0:6f:38:83:77:74:2c:41:00:33:9d:aa:83:72:
         0b:70:28:87:0c:c6:45:96:85:76:09:9e:de:e3:72:22:ec:67:
         7e:fa:12:85:16:0e:bc:da:35:62:59:33:fa:6e:d5:b9:4e:b5:
         70:45:7a:06:9e:ac:db:18:ac:6b:92:28:5e:1c:e3:01:97:6e:
         34:a6:aa:ab:1f:06:b7:e4:e4:de:59:0f:ed:ac:e8:25:03:4b:
         2e:c6:a6:4d:a8:2a:1b:b9:d8:8c:c1:13:1c:17:32:c4:cc:7f:
         b1:e3:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:28:47 2024 by rpki-client on console-ams.rpki-client.org