Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
File:                     d411kki9lFxs44QujWQtzScxM00.mft (raw, json)
Hash identifier:          IGQn521z6CeFdSWuf1L7fGStYC0dUvJfXAEYQSS2JHA=
Subject key identifier:   26:96:2B:F7:EA:60:A0:58:C9:DD:AB:43:BE:D4:E4:22:E5:46:49:7A
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Certificate issuer:       /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial:       01901DEDB37BDE5DD6EF107045703C3DF01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 22:03:55 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:55 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:55 +0000
Files and hashes:         1: d411kki9lFxs44QujWQtzScxM00.crl (hash: LPqCoYVDjSuX2DGAbQN5xHd1/PTQoNJbCINFNyObxwg=)
                          2: i105MaFe2cBwmm1c6uzctfNLUIM.roa (hash: EkMeJOIKk+JgwVc4LtdTu0F81IJdjUddm8jC4ArRfTk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:b3:7b:de:5d:d6:ef:10:70:45:70:3c:3d:f0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
        Validity
            Not Before: Jun 15 22:03:55 2024 GMT
            Not After : Jun 16 22:03:55 2024 GMT
        Subject: CN=26962bf7ea60a058c9ddab43bed4e422e546497a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9e:d6:0c:07:b4:06:e9:42:43:ed:20:56:dc:
                    e1:32:7b:4d:82:e8:56:19:13:63:32:bb:dd:18:6a:
                    67:dd:5c:59:63:3b:08:b4:58:e9:52:bb:a6:b2:57:
                    cb:4d:43:c9:79:0f:27:2f:08:76:6b:f8:76:e8:55:
                    c4:c1:19:8b:7f:13:f2:17:18:2b:ef:91:b3:3e:d2:
                    6d:16:c3:9e:18:fc:21:7a:e5:1c:62:c8:4b:fd:1b:
                    07:54:65:e5:07:69:8b:26:46:6c:aa:3a:69:69:9f:
                    fa:0c:57:0e:23:dc:f0:8d:53:0d:d1:62:47:5f:4e:
                    e3:5c:af:70:09:fd:49:40:b0:93:72:3b:26:d1:c9:
                    b2:12:1c:e7:38:56:77:a9:e7:4e:40:ec:9e:9f:5e:
                    8f:2f:d0:06:ef:90:66:49:d8:ed:4c:99:af:a3:98:
                    b0:29:40:9b:36:91:7f:c7:5d:77:07:58:83:6c:87:
                    ec:b4:f0:0d:64:90:45:3e:d0:30:6a:5f:73:cc:82:
                    b2:a3:04:53:37:e5:84:b9:e1:b0:cd:12:63:19:8a:
                    66:ff:9e:12:2c:2a:37:21:19:b9:f5:54:5d:3c:4c:
                    63:74:ca:3c:9b:80:ee:2b:c0:41:de:a7:26:e6:de:
                    66:bb:c2:83:4a:b2:6f:7f:d4:47:78:0c:f8:b6:11:
                    60:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:96:2B:F7:EA:60:A0:58:C9:DD:AB:43:BE:D4:E4:22:E5:46:49:7A
            X509v3 Authority Key Identifier:
                keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:25:08:cd:44:da:03:a0:a2:6f:4b:6f:52:72:b6:83:e2:c6:
         99:14:9e:13:10:e9:f9:89:18:31:55:5a:32:a5:cf:09:4a:e2:
         a9:30:88:4b:f1:ef:1c:bf:17:b0:13:43:a6:3d:bd:18:af:6e:
         e6:80:43:af:0c:b3:ab:13:b4:d9:ff:eb:20:8a:f6:ca:0a:d4:
         9e:d5:f0:fa:63:33:34:10:87:78:17:33:c2:e4:ef:99:a4:c4:
         bf:88:f7:90:bf:ab:81:59:be:c3:e7:36:58:66:a7:8e:dd:5d:
         0a:86:83:88:db:0d:0d:f7:8c:41:62:92:c7:a2:59:4b:66:01:
         ed:4f:98:43:f7:b4:61:c7:d5:d4:70:c1:03:56:77:c4:ab:6b:
         ca:ca:63:0a:8c:54:ad:43:8d:31:d9:bd:0f:96:f4:72:74:a1:
         af:d8:0a:fc:4d:9e:6a:26:61:2b:fb:e6:0c:13:03:a8:12:6a:
         68:a0:11:93:cb:0a:08:a1:93:11:1c:39:6a:a7:8b:55:2c:a6:
         2f:4a:6d:40:bd:9c:dc:84:ec:d3:b4:f9:ad:35:f8:e9:06:75:
         fa:1b:c9:9e:2d:ee:3c:5f:91:03:8f:81:f4:4f:4b:bf:3c:e4:
         08:c4:f5:48:5c:31:41:37:17:5c:1c:76:31:c3:bf:71:0a:75:
         7c:f6:b0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:51:30 2024 by rpki-client on console-fra.rpki-client.org