Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
File:                     mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft (raw, json)
Hash identifier:          tZ6wICgEIAw64nULtEko86IM5Yv/m3+xwEQ+JqEGSY0=
Subject key identifier:   DD:2E:67:55:2B:D5:C7:15:95:38:71:5D:DF:31:2C:76:22:95:7E:BD
Authority key identifier: 98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
Certificate issuer:       /CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Certificate serial:       01903404D142E919B41506CCE1168E100B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
Manifest number:          11D2
Signing time:             Thu 20 Jun 2024 05:00:49 +0000
Manifest this update:     Thu 20 Jun 2024 05:00:49 +0000
Manifest next update:     Fri 21 Jun 2024 05:00:49 +0000
Files and hashes:         1: mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl (hash: dtoJDr+SJ7Uh1FcINNHaymAadny/xqwR/uprflZPjq4=)
                          2: pacupbQuLL3QCqrRavOE6krOlhk.roa (hash: jGaMgMrGTM/f68fZUdp4XuuiNzgERV1TDM11xNdwWNc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:04:d1:42:e9:19:b4:15:06:cc:e1:16:8e:10:0b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
        Validity
            Not Before: Jun 20 05:00:49 2024 GMT
            Not After : Jun 21 05:00:49 2024 GMT
        Subject: CN=dd2e67552bd5c7159538715ddf312c7622957ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:db:69:a3:b0:10:8a:af:07:27:d0:e8:83:
                    1c:e3:3d:bb:34:17:f5:94:d2:1a:06:07:6e:9f:2c:
                    0c:96:c3:b8:4a:73:95:e0:a4:14:36:af:10:47:87:
                    31:6f:5d:e5:e0:20:73:a3:37:d1:85:a6:bf:18:96:
                    0b:15:7e:53:d8:b8:e5:89:e1:e4:a5:cb:10:0e:16:
                    5e:1e:8f:47:a7:e2:ee:78:ad:47:c3:51:e5:85:a4:
                    70:89:5a:f8:43:96:b0:58:80:80:96:18:16:07:10:
                    23:a3:14:e0:94:04:c8:36:1b:4d:15:73:b0:01:2f:
                    de:7d:e5:e3:b8:54:ba:14:b7:85:7d:20:30:4c:1a:
                    ec:ca:5b:6d:d9:c9:bb:24:4e:91:1a:f9:78:99:31:
                    35:ad:7e:81:e9:51:39:c2:49:dd:73:fa:5c:6e:69:
                    2a:f9:5f:e2:2d:b5:33:b5:a5:38:c2:7a:ca:b3:74:
                    1a:b8:f9:f4:6c:3f:d3:2c:56:3a:de:93:b5:fc:c9:
                    39:81:13:27:23:0a:b8:1a:59:2a:59:6b:49:da:1a:
                    5c:8a:9a:d5:ce:c4:1a:a8:fd:b7:70:b4:a4:ed:ab:
                    5b:94:9b:e3:7e:ce:da:ae:5c:e5:6b:7f:45:cb:1f:
                    78:92:38:d4:1c:50:87:f9:47:72:51:65:83:2d:4c:
                    83:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2E:67:55:2B:D5:C7:15:95:38:71:5D:DF:31:2C:76:22:95:7E:BD
            X509v3 Authority Key Identifier:
                keyid:98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:57:3a:dd:23:94:b7:09:05:f4:13:22:60:db:10:64:76:
         a0:98:dc:56:11:7e:0f:b9:30:a6:b6:4a:90:04:36:b5:e0:2c:
         84:35:02:a7:e7:35:b4:76:d7:14:ff:13:d9:33:84:2b:b6:fb:
         61:60:49:74:cf:7c:56:38:82:d0:b3:ef:ea:09:86:8a:d3:c4:
         f6:79:7a:6c:bb:da:3a:a6:01:9d:ea:6e:f3:0e:22:cd:03:b6:
         6c:70:82:30:a6:e4:b5:5f:ee:2c:af:d2:dd:c2:cc:00:07:61:
         08:94:07:b9:f4:24:90:4f:20:0d:fa:d1:8a:0b:b5:53:cc:c0:
         95:a8:f4:40:8e:8d:72:c0:b7:35:4a:af:35:a6:be:80:f0:52:
         38:4e:31:01:e7:d4:c2:5a:58:24:c4:0b:61:16:f8:d7:03:a7:
         93:a4:f8:3d:5c:d9:2c:c5:93:89:55:0f:5f:25:e7:dd:da:7d:
         81:64:71:ef:9c:17:7a:ff:d1:39:12:e6:80:10:24:ed:56:9b:
         24:81:5b:21:76:e9:d4:55:99:72:7a:34:32:9a:27:d2:db:92:
         e4:9c:d4:90:8f:59:f2:7d:17:1d:77:3c:12:fe:85:70:6f:47:
         7d:47:15:78:58:63:7e:59:98:a1:4c:90:a9:af:25:38:65:74:
         92:fc:5f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:32:03 2024 by rpki-client on console-ams.rpki-client.org