Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File:                     VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier:          XqkKMPgkbS9przeD/5o4NgiGvv8JUGYjYrJIxtJUXFg=
Subject key identifier:   CC:90:98:16:09:EC:31:1C:FD:53:8C:4E:9E:D8:54:7C:BC:EF:CD:7A
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer:       /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial:       019040AE89FCAFBBF218C68B47CCC276B5AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number:          11D8
Signing time:             Sat 22 Jun 2024 16:01:38 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:38 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:38 +0000
Files and hashes:         1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: RpS5p+2NpVsoBj4ZuvnXX66NcxzPWP1yi4U5vTztBkk=)
                          2: xQqJbenqVEn3-3PBK_om6FEiaV8.roa (hash: HtNsq0GCr5Z71uEvAJX45waX3t/ZCJpuauEYwT7014A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:89:fc:af:bb:f2:18:c6:8b:47:cc:c2:76:b5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
        Validity
            Not Before: Jun 22 16:01:38 2024 GMT
            Not After : Jun 23 16:01:38 2024 GMT
        Subject: CN=cc90981609ec311cfd538c4e9ed8547cbcefcd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:22:e2:8a:eb:b9:a5:ec:de:01:ce:11:df:
                    fb:cd:f3:6a:71:e4:89:02:77:8a:6f:b1:61:24:ae:
                    7b:11:02:2b:0e:91:98:41:5c:15:c2:3f:b7:41:e0:
                    70:b2:4a:b0:b5:4d:d3:e1:ec:7d:c9:d5:bd:4a:23:
                    70:a2:df:f5:33:e6:c0:ca:b2:54:8b:f8:ce:51:6b:
                    60:d7:2a:fe:b9:ea:cf:df:3b:d2:dc:b5:de:4f:f7:
                    6d:78:91:b8:43:71:bb:9b:20:64:2c:ec:e1:6b:be:
                    14:69:8a:54:73:01:f4:e0:0a:06:6d:e3:0a:7f:83:
                    44:33:64:b2:42:28:00:32:09:b0:58:4b:ad:f9:2e:
                    df:a8:d2:df:c5:e9:69:88:27:fc:a7:da:5c:46:36:
                    c1:f3:66:f4:eb:f7:70:84:62:a9:9f:bc:51:72:47:
                    e3:29:37:9f:da:4a:87:98:ab:b2:60:a0:d2:58:15:
                    72:dc:01:87:a7:26:48:5f:7e:4b:7b:27:39:ea:8c:
                    5d:51:c3:ca:a3:dd:01:03:68:be:8f:e0:aa:a1:60:
                    9e:4f:f6:6b:f7:57:59:73:79:24:42:1b:f8:5d:e6:
                    76:74:48:8f:fd:41:13:7e:44:9d:87:31:11:c2:6b:
                    be:7d:72:77:5b:dc:84:d0:3d:bc:82:0b:bf:ca:4f:
                    83:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:90:98:16:09:EC:31:1C:FD:53:8C:4E:9E:D8:54:7C:BC:EF:CD:7A
            X509v3 Authority Key Identifier:
                keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8c:fb:82:4c:50:0d:06:6c:9e:59:b9:bc:1e:cf:09:2b:4a:
         5a:d1:42:fc:a5:17:ce:c8:f1:b0:b6:4c:23:76:8e:c6:d8:ca:
         06:07:20:f4:c6:3f:98:d7:c3:10:77:f6:98:0c:ca:ae:de:07:
         f5:ea:fd:99:1e:06:7a:f0:39:7b:d3:b8:48:b3:85:c9:dd:33:
         04:c0:0f:9c:a9:6b:cf:47:15:5d:4e:4b:e7:eb:57:76:b4:2f:
         1b:70:8c:fd:22:10:8b:75:cb:f8:b0:28:e5:be:a0:a8:78:99:
         e2:12:8e:61:58:64:39:87:54:e4:61:56:a9:c8:4d:fa:ea:59:
         01:54:ef:19:b2:f0:34:b5:b3:f0:50:60:f1:f4:10:41:ed:fc:
         62:ae:14:6b:57:c4:03:1c:b2:93:f8:2f:84:bc:60:cf:36:34:
         ca:3e:a7:41:75:da:47:9c:0c:8a:9f:84:d4:29:af:95:7d:66:
         b6:13:0a:43:9c:bd:64:03:7c:04:8e:d2:e5:53:a3:49:9d:f4:
         a0:6c:01:19:36:ba:e6:95:44:23:03:31:02:52:46:a4:a5:8d:
         e6:0c:a0:c0:e7:3c:91:f4:b4:dc:96:dd:9b:fb:75:8b:44:3f:
         2f:94:d9:a8:d4:47:47:b3:57:55:ca:1e:2a:ef:14:87:49:5c:
         ad:62:c3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:21:51 2024 by rpki-client on console-ams.rpki-client.org