Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File:                     8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier:          v+S1NNAz9rWTc/dBSZVYLBoXbZmid6kVnZX17xCl4Y4=
Subject key identifier:   A7:50:57:3A:EC:92:9E:B5:36:F4:82:01:E6:6E:38:5E:B4:E0:42:6E
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer:       /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial:       019045668AFBBC787515DDC808EECEAFCD97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number:          116B
Signing time:             Sun 23 Jun 2024 14:01:06 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:06 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:06 +0000
Files and hashes:         1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: qmbRMYP94juCrGr+xfhKE4UsL4Mr5a7lv1f673WZE/s=)
                          2: q33QRvzty8QJXzB3z-qOc2cslrI.roa (hash: DgSG67MJQ4dH3pw/gd9rfZfw8b6Z/WOG3uzApAVVe+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:8a:fb:bc:78:75:15:dd:c8:08:ee:ce:af:cd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
        Validity
            Not Before: Jun 23 14:01:06 2024 GMT
            Not After : Jun 24 14:01:06 2024 GMT
        Subject: CN=a750573aec929eb536f48201e66e385eb4e0426e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d1:6b:fd:07:e9:de:55:9c:9b:e6:ef:c9:b5:
                    5a:09:74:2d:fa:94:c7:c4:a9:ef:27:05:77:16:cc:
                    08:b4:b8:e6:89:73:4c:2a:63:b4:21:6b:a8:29:bc:
                    35:44:25:14:8e:b9:50:78:5e:9e:e7:ed:e7:03:2d:
                    df:06:e2:85:a8:fd:e8:be:33:19:75:33:a0:a1:e2:
                    93:22:d8:fb:56:b6:7e:96:5f:1a:a1:51:42:53:26:
                    e8:b1:ad:dd:df:91:ef:18:61:15:7a:31:42:e0:89:
                    2f:21:76:e9:80:fb:38:aa:9e:d6:71:07:6c:b9:be:
                    70:2c:24:50:26:12:6e:9b:5f:3a:33:65:60:da:e1:
                    db:61:5c:b2:75:0a:26:0a:dd:d2:c3:84:eb:55:1c:
                    47:10:72:bd:b4:ab:9e:32:10:c5:34:30:cf:8c:9c:
                    55:56:6b:d0:57:fc:a1:94:c4:2e:9d:c6:03:01:e6:
                    32:5b:a2:0e:34:b4:19:e4:07:c1:c6:0a:b4:ea:23:
                    f8:6b:a2:53:39:d1:a1:55:8f:94:aa:af:db:7c:7f:
                    f4:34:b6:50:66:6f:c6:5b:5d:bd:e1:db:f9:04:4b:
                    7c:ac:b6:a8:d8:94:8a:92:b8:c5:ce:ec:cc:af:1b:
                    52:d5:94:6c:31:4f:96:a9:28:11:a0:45:e5:ed:fb:
                    6c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:57:3A:EC:92:9E:B5:36:F4:82:01:E6:6E:38:5E:B4:E0:42:6E
            X509v3 Authority Key Identifier:
                keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:55:a6:13:de:19:0a:7c:ac:c9:bc:75:5c:be:54:9a:00:d1:
         ca:b3:e4:54:15:5b:f9:a1:df:c2:2e:b3:4b:8e:bd:30:84:ce:
         a4:b9:88:11:09:2a:3c:31:d2:82:78:6f:de:d9:65:77:89:39:
         e8:1a:ad:3c:bf:c0:f7:63:50:97:8d:21:68:2f:9c:4c:7f:5b:
         9c:6c:36:4c:b5:d7:8f:df:c1:2c:11:51:14:cf:63:59:64:f8:
         5d:22:a6:fc:36:0d:bf:8d:aa:69:cc:1b:7b:8b:82:de:b6:3c:
         d5:34:93:06:eb:b7:57:f8:8b:8f:84:5f:17:13:90:ea:54:7d:
         f5:37:59:5e:ab:28:45:42:ce:6c:3c:f3:b1:a1:0b:ff:fd:4b:
         39:30:99:a9:17:75:5e:6e:fe:b6:94:5a:3e:d9:96:8d:06:10:
         7e:8c:ff:05:6f:cb:26:30:da:bc:3c:f6:e7:d0:db:eb:dc:ac:
         3b:f1:80:b0:88:9e:6b:ec:a4:7f:cf:66:74:3b:f4:9e:a1:95:
         17:09:e5:b8:a1:51:aa:d3:fc:cc:50:ec:5a:95:82:e9:d8:90:
         23:81:f6:e2:37:8e:2b:df:f5:65:75:35:a4:7f:bf:88:36:a8:
         bb:c0:7d:98:95:fe:9c:aa:89:41:a8:a3:a1:46:a9:a3:21:f3:
         7b:66:58:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:31:38 2024 by rpki-client on console-ams.rpki-client.org