Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File:                     9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier:          xcB3pDLUULUikuHCwM/yl/3MXU41O17buh7qAgP3ylU=
Subject key identifier:   A2:20:3D:88:F3:FC:EC:96:7D:97:13:C6:1A:0C:8B:CA:D5:6A:44:1C
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer:       /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial:       01901DEBF9DB635C67DC1B9957516B384E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 22:02:02 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:02 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:02 +0000
Files and hashes:         1: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: HdEGRTxdoD+/b5ccWN+tOatml+FZKziXRqzLwvO+tDM=)
                          2: OC2ArZeCkW5fCZbVrfhbtoWwUHA.roa (hash: 9or06xxzzKXYd2M5UmA4YrVS1Qdx/q/ATnRIIkT21z8=)
                          3: grW0VjOUxJOsPGC_DkEveZ6FuD8.roa (hash: 4wFAA3Klt2IABPrvkjBj7mOCsKvnEqBCKviA6jwI5I8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:f9:db:63:5c:67:dc:1b:99:57:51:6b:38:4e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
        Validity
            Not Before: Jun 15 22:02:02 2024 GMT
            Not After : Jun 16 22:02:02 2024 GMT
        Subject: CN=a2203d88f3fcec967d9713c61a0c8bcad56a441c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:3a:b4:3d:b3:a2:93:99:c6:ce:86:f7:66:
                    8a:f5:01:0a:71:6b:2d:87:93:a1:b1:d6:6c:e0:d2:
                    45:07:3b:d1:99:21:90:27:89:d2:df:85:23:9d:d3:
                    90:b0:39:4c:a8:c8:2d:77:da:88:5d:a5:44:68:b8:
                    2b:45:f0:bc:25:f6:68:4c:ed:10:22:3d:8c:af:34:
                    3c:5f:38:86:d2:0b:4e:7d:32:6e:3a:3a:de:f8:3d:
                    0c:09:6c:35:03:71:a3:b1:29:a0:30:82:5b:54:34:
                    74:42:8e:29:05:16:d2:5c:c7:67:35:76:02:fb:d0:
                    33:8d:af:35:8e:6d:b5:3c:36:90:7a:33:45:52:a6:
                    d6:05:0c:3e:dc:28:88:18:5f:23:dc:96:ca:a0:3c:
                    d3:6a:55:71:5d:bc:32:a5:74:e7:4d:e3:7c:fc:aa:
                    6d:a7:ba:6f:ed:ea:d1:fe:b7:b6:72:3d:15:3d:6c:
                    ab:c8:6a:d0:d1:4f:99:e0:45:96:81:0f:d2:8e:60:
                    28:99:d3:e2:cb:49:e9:60:9e:57:09:15:fd:57:20:
                    98:f0:b7:83:4d:f8:e7:fc:ba:ba:e9:a9:6c:ac:73:
                    27:50:29:3f:00:53:c3:dc:ac:7a:f8:da:6f:b1:87:
                    7f:76:25:28:00:07:21:e0:bf:f4:17:d8:4e:23:ac:
                    bc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:20:3D:88:F3:FC:EC:96:7D:97:13:C6:1A:0C:8B:CA:D5:6A:44:1C
            X509v3 Authority Key Identifier:
                keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0b:58:df:0a:eb:4c:63:c8:79:c1:61:b4:e3:34:0b:47:73:
         1d:61:2a:cc:c5:12:a9:09:05:42:3c:67:c7:bc:1d:67:ba:5b:
         a2:0a:96:ce:83:5e:40:61:0a:1b:1e:17:23:46:18:14:2a:97:
         9f:40:ec:be:d2:f5:df:72:6d:b0:c9:6b:0c:e7:f1:03:9f:4d:
         5f:47:8e:34:34:2e:e4:ab:8c:29:e9:3f:b2:5e:c4:8a:04:82:
         1b:46:f4:82:4d:0b:65:45:9e:67:ef:30:70:a6:74:db:fa:a7:
         ac:39:4d:0c:a8:f6:58:ee:2c:fc:9b:bf:67:0c:08:a3:f0:d0:
         f5:50:5b:3f:ce:f6:80:8d:71:79:84:0e:e4:53:e3:c0:bc:47:
         ec:da:a0:6e:d6:72:7d:c2:73:b7:5d:b1:de:2d:82:2e:b4:f9:
         cc:36:29:43:e6:b1:33:71:2f:e9:46:a9:85:94:14:85:bd:3b:
         3c:84:f6:e8:39:5d:99:3a:e4:f5:33:b7:80:1c:d9:cd:35:b2:
         69:15:74:a2:53:9a:4a:5c:01:f5:77:59:f3:37:a8:23:f9:79:
         3e:6a:48:43:83:f3:1c:42:bd:3d:c4:ee:ab:63:4e:40:62:3d:
         00:1d:65:00:fe:41:df:20:53:35:3b:96:60:de:63:de:c1:26:
         37:fa:3b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:16 2024 by rpki-client on console-fra.rpki-client.org