Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File:                     J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier:          a+ZAszpW4VMBx8JLSZoG04n7Sc9ElAkObix0JwOkFwg=
Subject key identifier:   CD:10:AA:9C:BE:C7:E2:58:37:08:82:73:DA:0B:D2:B3:3D:96:8B:12
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer:       /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial:       0190452F90B9A84C86407B8D8504C600251B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number:          0E52
Signing time:             Sun 23 Jun 2024 13:01:03 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:03 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:03 +0000
Files and hashes:         1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: fuHU3HUBnlysxmgbZ5oqxiq4J5u/IMu8atr/hvnTY9w=)
                          2: qj-pruHeLbc0wHkoEiYC8-tlhwo.roa (hash: p7bTCMU1mPH+tbtx83DEKQt5EMVpNoSCNiMDdNAZXX0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:90:b9:a8:4c:86:40:7b:8d:85:04:c6:00:25:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
        Validity
            Not Before: Jun 23 13:01:03 2024 GMT
            Not After : Jun 24 13:01:03 2024 GMT
        Subject: CN=cd10aa9cbec7e25837088273da0bd2b33d968b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:4d:1b:5a:bb:5d:cb:10:fc:86:92:8c:4f:
                    2a:25:25:78:6a:85:2c:d3:41:2d:bd:cf:d0:9f:c8:
                    6e:4e:98:f3:35:c1:98:3c:ea:9c:1e:70:9b:01:be:
                    43:13:34:38:06:7d:6f:9f:84:3f:2f:6a:02:3f:1f:
                    36:cd:7c:fd:2e:12:38:9a:27:ea:e5:1b:05:77:41:
                    11:47:20:fe:86:32:ee:38:9d:25:ac:b3:d1:67:4b:
                    8a:ab:d1:9b:b6:6f:93:a5:df:e4:88:86:d5:c2:ce:
                    ee:7e:8e:a0:6e:e0:07:7f:d9:02:86:9d:79:16:87:
                    04:41:b6:03:b6:1a:aa:d6:0b:99:62:46:40:ce:3e:
                    a8:d0:6c:8b:1f:f8:00:ad:8d:b9:2e:cc:33:ad:50:
                    1b:87:5b:fa:a0:c9:1d:46:93:06:6c:c6:87:da:92:
                    b1:7a:27:32:79:b5:eb:2f:83:f0:20:c7:ae:37:4c:
                    43:f2:0c:2e:65:54:33:8e:b5:66:86:20:b6:a0:ea:
                    53:90:05:26:bf:e9:e0:f5:52:2b:d8:75:fe:49:21:
                    f1:59:c0:7c:e2:65:4e:c1:95:58:9e:b5:ff:b0:08:
                    39:f8:80:66:f2:f0:3e:e3:a0:66:fc:9c:51:66:19:
                    3f:3d:d0:e4:1b:01:63:de:18:f9:71:5b:0e:1e:2d:
                    00:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:10:AA:9C:BE:C7:E2:58:37:08:82:73:DA:0B:D2:B3:3D:96:8B:12
            X509v3 Authority Key Identifier:
                keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:52:ef:de:dc:95:b7:5e:32:3f:76:85:5e:fa:45:e2:f7:b9:
         e3:e8:37:56:a8:ba:65:af:02:c1:95:0e:e9:56:f5:7a:cd:c5:
         e0:61:c2:0d:a0:f8:52:e4:0d:5f:ba:ae:a5:17:8a:12:7b:46:
         e6:36:de:50:27:aa:52:da:71:b7:d2:69:91:bf:d9:0d:52:c3:
         29:55:23:84:b1:0a:3b:0e:94:c1:75:68:c7:79:2b:44:d9:89:
         41:0f:e3:19:22:e2:37:ab:02:c0:bc:39:e6:f2:fa:e7:0b:69:
         85:2d:83:f5:24:b7:49:a0:c6:e9:4b:41:7a:87:28:6a:3b:e9:
         bf:1b:60:35:69:0b:fa:ac:12:a1:9e:5a:f4:4c:dc:2d:b8:54:
         c7:e7:dd:e5:7d:f8:e1:67:34:83:99:83:03:a7:0f:02:60:c3:
         a1:1b:2c:64:7f:50:61:58:49:39:11:b1:6d:b1:77:a2:ba:e5:
         30:6b:25:07:c3:a2:d3:54:f0:88:f0:4b:20:f3:89:0c:9e:28:
         60:e4:20:23:d3:d9:e1:45:bf:da:aa:4d:9c:98:cf:5e:a5:67:
         a0:24:82:9f:9c:ba:29:dc:72:c4:dc:93:87:60:aa:b3:92:f6:
         ef:62:0d:b5:c8:0c:62:c7:41:05:f1:c5:66:fa:32:d7:53:97:
         35:39:87:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:08:43 2024 by rpki-client on console-fra.rpki-client.org