Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File:                     1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier:          NprZHk5kRNuUeH5J5HR14HCVvStGYRIb/prK7ADA2Kg=
Subject key identifier:   98:0D:46:DD:EB:35:7F:D6:16:80:B0:53:0B:E5:33:12:23:85:6B:FD
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       01901E590E760D40256CA5F870430A6A419B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 00:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:11 +0000
Files and hashes:         1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: GQdh+VuBcHsH5IS/oCUKMFGPO5DPpkKe5o2AMqSjWNo=)
                          2: CwXd1ocGF9MexZhojtLy6gZlnLM.roa (hash: abyVFKH5ZZ/QjvSxsJNVQ44saDRFiqtMd1zHPg8245E=)
                          3: nsgjsLQ1u9WJcMoqZUQjIA3sNjQ.roa (hash: 720NSTQm5TnUMN1hAiCnNHj1sFtrLDz82QV+zw8VceU=)
                          4: ug3YEI2JcAs7KyRkCFHKuJydM5g.roa (hash: AMXLKOtb4A80zG8lsXgsgr8+AM+4BVm7idovhVs46Bg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:0e:76:0d:40:25:6c:a5:f8:70:43:0a:6a:41:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Jun 16 00:01:11 2024 GMT
            Not After : Jun 17 00:01:11 2024 GMT
        Subject: CN=980d46ddeb357fd61680b0530be5331223856bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:a4:b8:a6:91:07:25:25:a8:d0:8b:b5:80:
                    b3:3a:9e:fe:fc:a8:10:a3:20:04:ab:85:c0:ba:99:
                    3c:a4:f7:7e:fc:28:66:16:c9:19:b3:22:ad:3c:0e:
                    ef:ab:8b:1c:35:87:db:5e:b7:07:5e:09:9e:e8:48:
                    30:32:f3:d4:b4:ad:69:7c:d9:7f:36:b3:df:da:03:
                    17:bc:39:4c:db:17:cf:cb:ed:0a:c7:f8:7e:70:ce:
                    74:fb:92:a8:80:5d:76:6f:94:76:c4:65:24:af:e3:
                    c8:07:d7:b7:b0:ab:09:8f:c0:1d:d8:59:f4:78:bc:
                    1c:c2:0a:8f:ff:bc:43:21:b0:83:a0:0c:80:ce:0e:
                    70:24:50:27:c4:f7:95:ac:a0:c3:11:c2:48:bd:00:
                    60:80:f3:3c:d7:65:a4:79:1b:b8:80:55:a2:a8:60:
                    ce:c4:bf:65:35:eb:cf:f3:1b:b7:7e:0f:69:1b:f8:
                    7e:4f:c7:44:bc:24:b5:3e:f3:fa:7c:c3:4c:c6:ad:
                    ce:32:c8:6c:55:82:5d:19:74:54:91:66:4f:5b:71:
                    41:a4:e0:54:0d:6e:59:51:0e:b8:9d:70:67:60:8e:
                    7b:45:b2:06:44:3c:c4:77:f8:9e:9c:32:fc:7b:db:
                    ab:c8:98:bf:3e:f9:5d:33:c2:f8:35:37:ba:4a:46:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0D:46:DD:EB:35:7F:D6:16:80:B0:53:0B:E5:33:12:23:85:6B:FD
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:33:9d:d9:cf:2a:aa:57:93:d7:2f:cc:ee:19:90:7b:1c:5a:
         30:a7:b1:b1:67:1c:e6:23:e9:00:34:39:05:cf:59:4c:45:57:
         24:3c:5a:c5:f6:b4:c7:c0:b6:89:12:aa:51:0f:c3:44:14:88:
         5c:2b:36:25:bc:19:b8:89:72:db:e7:2f:3b:79:0e:e1:fb:19:
         00:2e:e6:93:e4:56:fc:59:1c:ce:6b:2b:e4:fb:71:2b:6c:3f:
         90:52:5d:db:7d:b0:64:b8:de:4a:08:36:1c:40:bf:ca:8f:95:
         81:a6:6d:2d:89:3e:e4:a1:ea:11:eb:00:b9:ba:3f:33:87:a7:
         b0:e3:dd:2f:3f:28:28:8c:d8:49:da:c4:79:5d:48:bb:51:1d:
         ab:61:43:e1:3e:dd:fa:37:06:1d:c9:3f:75:d6:41:d2:56:dc:
         a4:4b:89:65:3c:89:1f:4b:ec:26:53:51:96:92:e3:ef:88:eb:
         e0:86:5e:77:6f:62:29:73:23:01:70:0c:8d:00:74:d5:1c:14:
         a1:24:dc:52:8a:c0:76:80:33:f6:71:dc:b9:f4:ac:cd:53:93:
         0e:de:47:eb:33:75:99:39:aa:a9:b6:b9:65:9c:0f:14:5d:b2:
         74:56:c4:27:4b:60:30:6e:d8:d4:6d:86:7b:08:cc:ea:4b:89:
         d9:41:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:02:31 2024 by rpki-client on console-fra.rpki-client.org