Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File:                     brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier:          kLNHqVFI0I23Z/cEyMgUkoGjPiNl1ZCtahULMcWbqXY=
Subject key identifier:   F7:9F:9D:6E:63:84:1F:9C:EA:F6:39:EC:EB:15:6B:E0:08:D0:2C:45
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer:       /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial:       01901CA19D66ACC6E953CBFE4BFA72C1E036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 16:01:11 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:11 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:11 +0000
Files and hashes:         1: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: uBXMxDiDxBQQ2WOUB0OOOnmlW8s9XVwuDAdy8yqCMWk=)
                          2: pl46FT2ZP1KRarrCdrwXpA8bmN8.roa (hash: f9SpzOybPJ0oSReeSamUbkiu/F/YcnucEO1o38cqVMw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:9d:66:ac:c6:e9:53:cb:fe:4b:fa:72:c1:e0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
        Validity
            Not Before: Jun 15 16:01:11 2024 GMT
            Not After : Jun 16 16:01:11 2024 GMT
        Subject: CN=f79f9d6e63841f9ceaf639eceb156be008d02c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:63:8e:59:be:90:db:44:fd:ee:2f:17:18:bf:
                    7c:f9:88:5f:85:57:f8:40:f3:cc:d2:ea:2f:65:17:
                    d4:4b:d0:a6:c4:f2:d3:ec:71:a7:c5:f9:20:5e:54:
                    8d:2f:89:60:9a:2a:0f:ae:78:f8:86:c8:f9:cc:89:
                    52:eb:62:0e:51:94:10:2d:e1:c8:9c:02:29:6b:2e:
                    2e:e9:37:ea:b8:6a:b3:28:30:00:a4:7a:1c:12:cc:
                    86:13:ba:50:79:df:95:df:b2:94:69:f5:7a:f9:1f:
                    34:ae:ed:dd:52:a5:2d:c3:80:ef:fe:6e:81:23:41:
                    d5:bb:77:d9:3e:ec:10:f4:ef:e2:92:48:5e:b9:0e:
                    2e:e9:ca:a4:33:02:02:21:c2:02:fa:4f:a7:15:43:
                    63:28:d7:d1:64:1a:05:66:05:c7:6b:06:4c:6d:a9:
                    db:6e:77:f8:aa:f7:e1:f5:2c:35:c2:92:f3:b8:e3:
                    1d:c6:69:84:33:96:49:8f:5f:ff:ad:e4:1f:83:18:
                    61:c3:cd:85:4d:21:a5:1d:f8:aa:8c:85:7e:a0:b8:
                    64:b2:f5:55:8b:e9:3a:14:95:bd:03:00:5b:50:06:
                    3e:99:5f:5f:c9:41:be:ff:21:58:5e:00:69:3a:bf:
                    12:a5:c2:74:f5:9b:6f:71:bf:b0:88:32:8b:c2:ca:
                    c7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9F:9D:6E:63:84:1F:9C:EA:F6:39:EC:EB:15:6B:E0:08:D0:2C:45
            X509v3 Authority Key Identifier:
                keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:db:3c:da:86:1c:38:d8:08:82:a5:06:6f:45:1e:c4:a4:9e:
         9b:78:99:f9:6f:77:7e:29:e6:fa:53:2a:f1:53:c6:8b:96:e3:
         c4:f2:f0:98:40:f8:6c:34:4d:87:6f:6c:ee:90:04:53:c7:31:
         53:ab:74:c0:c1:f5:57:b0:c2:7a:a9:77:91:31:2d:e2:16:a7:
         4c:36:53:72:f9:16:ab:0a:b5:8e:2e:65:a9:1b:82:f2:3b:d9:
         57:9b:0b:54:9d:60:7f:e8:31:5d:3b:d1:6e:99:fa:93:9b:d3:
         0b:be:a7:f0:64:67:7e:d6:bb:a1:54:28:c5:af:6f:e5:ab:55:
         a4:eb:66:1a:90:4d:48:31:a0:89:a9:ab:ec:41:5a:be:ad:e8:
         95:2a:5f:32:2f:51:81:4c:4c:51:63:2a:fb:78:46:18:b3:78:
         07:a0:1e:3a:bc:11:6d:87:56:75:c0:14:df:db:8d:d2:ac:6e:
         92:48:db:84:0a:af:5b:bf:1f:e0:20:90:e9:b3:9f:8f:40:be:
         88:e7:09:da:63:c7:79:d7:a7:97:e7:3d:b4:38:0a:1b:3f:ad:
         1d:cf:42:17:a3:65:e9:2c:42:75:29:97:b8:64:8d:b0:ab:96:
         20:fe:94:36:df:7d:94:36:ec:38:dd:52:16:7c:45:04:f9:ff:
         92:c8:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:57:01 2024 by rpki-client on console-fra.rpki-client.org