Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File:                     1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier:          VyNH62P1qlnopISbjqmAJLflob63OxAd+jM05o600ac=
Subject key identifier:   AC:B2:03:35:89:52:38:77:F5:14:81:61:1D:81:07:69:A4:27:95:16
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer:       /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial:       0190448ABDA5EEBA2D71ADA08902B4F8D8C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number:          0A73
Signing time:             Sun 23 Jun 2024 10:01:01 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:01 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:01 +0000
Files and hashes:         1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: R1LlKkjOhl6R3uOQPCQC/rLC2fHvGYBzFV8PKAEjifY=)
                          2: SQR_PCGGPtI-7S2Zes3_1VAWFWw.roa (hash: 9trz3+K+ov764Jc30Z2MdXh71td4q1Lvo2th19Cmg9w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:bd:a5:ee:ba:2d:71:ad:a0:89:02:b4:f8:d8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
        Validity
            Not Before: Jun 23 10:01:01 2024 GMT
            Not After : Jun 24 10:01:01 2024 GMT
        Subject: CN=acb2033589523877f51481611d810769a4279516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:3e:9d:be:a5:65:bf:21:48:25:68:94:70:
                    aa:dd:cd:16:b2:9e:50:a0:48:e0:44:1b:73:ba:fc:
                    02:d4:ac:8b:39:37:46:2c:61:23:44:e1:63:bf:52:
                    7c:e1:f4:fd:aa:78:ca:60:d9:bc:64:9e:7d:9b:4a:
                    8d:c4:fc:df:8a:06:50:14:2a:c0:39:69:5c:50:64:
                    83:3f:b0:ea:0b:3a:d6:eb:37:2c:3f:d6:cc:40:ea:
                    46:65:ec:3f:3b:fb:33:b3:11:6c:ef:30:83:45:2b:
                    f1:9d:92:14:d5:d5:35:0c:76:80:6d:a6:69:30:08:
                    05:f4:08:9a:5c:0d:de:f4:47:4b:b1:4c:62:00:52:
                    2c:c6:f5:4d:2e:8b:8a:e0:ef:78:22:23:46:ec:4b:
                    8e:bf:0c:6f:99:81:22:7b:90:57:b2:8c:0c:18:03:
                    5a:8d:77:95:7b:02:df:28:54:fd:a6:f1:a5:a7:83:
                    46:72:2a:dc:3e:65:e8:89:f4:af:44:69:e4:0f:15:
                    0f:3d:03:e9:3b:b4:83:7e:b8:9b:f8:4a:4c:61:7d:
                    d0:8a:af:40:bb:1d:89:95:9a:e5:a4:ae:9a:bc:2e:
                    40:b9:b9:f7:8a:10:5e:d9:96:91:f9:7c:c9:cf:39:
                    69:35:ce:41:48:b4:15:fc:7f:4c:be:83:38:45:7c:
                    5a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B2:03:35:89:52:38:77:F5:14:81:61:1D:81:07:69:A4:27:95:16
            X509v3 Authority Key Identifier:
                keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ce:c6:f9:4a:11:f1:cf:b5:51:0c:a0:0a:20:b5:ed:6c:fe:
         a2:b3:73:eb:22:5d:60:d5:c4:ca:a0:1c:4b:a3:db:02:31:ed:
         7c:45:f5:f1:2c:aa:e0:0a:16:94:00:59:59:04:57:11:4d:f6:
         1d:a2:a2:99:f8:15:1f:fa:79:f8:bd:0a:0b:c9:53:71:78:7c:
         50:13:9e:4e:28:c6:96:4d:71:9a:19:f0:7b:6b:b8:11:d3:25:
         67:2d:71:3a:8e:86:44:98:f3:ba:53:c0:f9:6f:41:07:00:80:
         26:c5:19:1b:60:cb:e6:ac:60:ea:f1:f6:04:1a:08:bc:0b:46:
         62:03:e4:7b:5a:6d:f0:d0:fc:37:7c:7f:a6:13:c9:df:57:81:
         01:d6:33:45:ea:28:89:be:3c:2d:e2:9e:2d:8c:9d:d3:09:f3:
         ce:29:ec:32:ba:26:f7:75:50:90:81:b7:ab:4f:6d:95:b5:b9:
         03:32:a6:59:2c:6a:56:fb:33:4f:11:04:bb:4d:92:65:59:99:
         68:5d:ae:5d:a2:6a:bc:cd:0f:e6:d6:0d:d4:12:ad:2e:54:fc:
         b5:9a:94:8e:9a:dc:ed:8a:84:79:22:b1:e4:c1:b7:52:d2:4b:
         20:b8:f5:91:6b:92:39:6e:6a:6b:4a:cd:22:5e:84:3c:f8:d8:
         d9:11:cf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:08:15 2024 by rpki-client on console-fra.rpki-client.org