Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File:                     9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier:          53b+PNIvoVXu4tckWR3ng5bWKt7R9cSP3vpGa2n5IM4=
Subject key identifier:   FD:EB:76:9C:0C:07:A5:19:D8:88:BC:9A:79:7C:88:56:60:25:B5:15
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer:       /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial:       01901EFD96EE99E71F3CC19598B1F9FBDF8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 03:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:53 +0000
Files and hashes:         1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: CjUX9yunJU5KXhdwaUhup2gx/gszV+wFNknKZpDvecI=)
                          2: XOKDLrkBEQpa-cDlmHYmtXnAHsY.roa (hash: 6ChnoXQLw0XNJNhH/OMKB/An4kpuJ/y2+g7uT8Bx6Nw=)
                          3: fZc7_iqNcMUZXKuTKLhweLRnrpQ.roa (hash: Zi2hh3OekyKPVxppEb3wWupy67EAINYKI5VSqy6GLFY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:96:ee:99:e7:1f:3c:c1:95:98:b1:f9:fb:df:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
        Validity
            Not Before: Jun 16 03:00:53 2024 GMT
            Not After : Jun 17 03:00:53 2024 GMT
        Subject: CN=fdeb769c0c07a519d888bc9a797c88566025b515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4f:2c:a8:e9:3b:03:9b:e2:89:57:24:d7:8a:
                    09:8d:04:0c:96:a9:01:4d:95:a6:0a:7c:be:67:53:
                    e1:fa:aa:ec:c4:64:47:45:39:9b:d5:28:c3:df:84:
                    85:4f:02:37:ab:1b:8d:ba:23:99:89:1a:5a:43:9e:
                    9a:78:32:f8:6c:02:c3:a4:b1:1f:09:57:ce:f0:06:
                    23:87:ac:f9:b5:0c:fc:36:dc:20:3e:be:45:70:8d:
                    64:ac:6d:20:61:aa:3c:a3:17:7f:9a:d4:95:49:f1:
                    d7:b8:f6:b8:21:de:7e:a1:d0:84:ce:83:27:8d:b4:
                    3c:be:44:00:fb:64:a8:8f:29:1c:e6:db:d1:61:64:
                    b0:94:d6:3a:6f:03:73:86:84:26:a1:45:76:ec:19:
                    54:cd:8c:2a:cf:b4:50:a5:2e:f9:32:83:df:2e:b4:
                    40:77:60:95:35:55:51:af:49:0e:1d:c2:ce:b0:bf:
                    fc:0b:bc:06:f9:4d:ff:07:ec:53:3d:1c:35:d0:bb:
                    56:3b:4b:94:48:d6:8d:1e:b0:64:fb:a1:2e:07:bf:
                    fc:33:4a:19:3c:8d:22:fa:94:b5:66:dc:b6:08:09:
                    b0:27:97:ce:4d:10:48:5e:a6:6f:85:07:f0:2b:32:
                    f5:6d:4d:e8:74:81:5d:5e:0f:7f:78:9a:5f:64:ab:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EB:76:9C:0C:07:A5:19:D8:88:BC:9A:79:7C:88:56:60:25:B5:15
            X509v3 Authority Key Identifier:
                keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6c:8f:b0:1c:7f:d7:46:40:f6:4c:87:29:9a:cd:cb:72:c9:
         2b:d1:06:9c:1b:99:fb:dd:9a:56:4a:58:d0:e9:10:56:b5:ad:
         cc:ac:b4:df:c8:8f:52:28:e8:a9:a0:5a:27:cd:d4:62:97:6f:
         66:9c:09:95:61:06:a5:68:34:1d:49:9a:f1:f6:31:b6:38:72:
         9d:47:f6:92:8a:fc:bb:2b:ad:43:a5:aa:9e:11:06:f9:02:8b:
         7a:13:c4:fa:85:34:74:45:78:96:bd:11:ef:34:7a:a8:ae:1e:
         85:9f:18:6e:01:05:e9:9f:ae:65:db:b2:7b:f3:60:b9:13:61:
         c2:5f:9d:4a:b2:b4:ff:ed:e1:18:77:fb:45:db:70:48:90:e8:
         75:04:9a:74:91:fb:98:7d:6f:38:28:bf:8d:ec:ae:12:73:b2:
         b7:b2:10:66:50:33:78:44:ac:e5:a3:90:0f:19:81:a6:f1:5e:
         ba:63:72:e0:f1:da:ac:4d:6c:27:52:24:8c:f8:8f:88:53:0e:
         d4:52:4c:7b:dc:11:4a:bf:d9:99:cb:06:8c:a0:b9:36:08:8d:
         ca:90:4e:0f:fb:ba:24:96:cb:be:5c:b3:cb:cf:cf:27:97:ee:
         68:cb:1e:43:da:aa:af:2c:dc:0e:56:1e:fc:bb:b1:4b:b0:58:
         59:79:c4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:19 2024 by rpki-client on console-fra.rpki-client.org