Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File:                     1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier:          gLU9ZsS/3D0s1WGHft89SYfbYjd04bIBunGeQ9VqaA0=
Subject key identifier:   C0:BA:4C:B5:6D:33:3E:48:33:5E:BC:46:D9:C4:0B:8F:9F:69:D0:98
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer:       /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial:       01901DEC8B246F703669C8B7AAACB11CD994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:02:39 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:39 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:39 +0000
Files and hashes:         1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: kwhZW9/l0Uwqi7wRxs4mOEWoTUocoAj54RARNXNQz0E=)
                          2: g-Hf0dYSPXRhEg3IlBB6c4bDNzM.roa (hash: 6n1LnisbFYxB1TAjgxigzaB0pUB4Gvh3wYbPsApesGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:8b:24:6f:70:36:69:c8:b7:aa:ac:b1:1c:d9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
        Validity
            Not Before: Jun 15 22:02:39 2024 GMT
            Not After : Jun 16 22:02:39 2024 GMT
        Subject: CN=c0ba4cb56d333e48335ebc46d9c40b8f9f69d098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:6a:a9:a8:76:2c:84:96:f6:73:0b:68:95:
                    bb:c8:27:f6:1b:26:ec:f3:06:97:d7:47:de:4c:d4:
                    d9:73:e1:b6:03:39:bc:73:30:51:cb:47:c7:e5:31:
                    58:dd:35:ae:21:2d:9d:05:ca:f8:22:7e:bd:06:85:
                    56:00:ea:88:46:73:15:d7:11:9b:2b:85:15:b4:f9:
                    f1:01:2b:97:68:c1:eb:98:91:09:27:07:63:61:29:
                    df:50:2a:30:5c:54:9a:7c:b8:cd:91:c4:a6:0c:42:
                    f8:7d:bb:df:ec:48:e8:84:67:ef:f5:b0:85:38:2e:
                    7e:7b:59:57:5a:ad:09:a0:6c:c7:a1:c5:8b:fe:93:
                    f2:ba:6e:e0:b6:c3:66:f7:a6:2d:8f:50:7c:d7:06:
                    14:1b:60:eb:47:8b:3c:55:a1:6c:f8:c4:09:29:c4:
                    d6:f2:8e:2d:42:2a:fc:2d:8f:05:f4:20:44:a4:9e:
                    cb:f0:11:3a:5e:54:9d:f4:e4:d9:9a:0b:a2:29:ee:
                    be:fc:da:c1:04:33:c3:3c:ce:63:d7:cb:f7:bd:63:
                    16:30:70:f2:66:7e:d0:39:04:a3:a3:d8:63:15:21:
                    36:39:b6:98:37:2a:82:39:a5:ac:94:32:c8:2e:9c:
                    73:73:60:1d:81:05:71:37:60:21:ea:43:4c:40:2f:
                    db:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BA:4C:B5:6D:33:3E:48:33:5E:BC:46:D9:C4:0B:8F:9F:69:D0:98
            X509v3 Authority Key Identifier:
                keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:1e:20:56:68:3c:a5:17:75:7b:71:98:3e:50:d4:b6:1f:6d:
         a3:84:8f:d4:0e:e0:22:dc:12:6c:31:d7:ee:f9:47:42:f9:51:
         5d:80:a8:f0:4c:81:c6:03:da:ea:7f:22:c6:a8:e1:2e:11:76:
         f6:67:61:19:c9:dc:95:c3:45:a2:85:d2:a0:28:f1:8f:70:e8:
         c6:b2:36:75:de:74:2e:23:e4:5f:24:1d:60:01:8d:1c:72:f9:
         f5:4a:51:d9:5d:c3:4f:d5:37:6c:d9:f7:92:0a:82:87:63:80:
         56:30:2b:f3:e1:c3:4f:9a:a7:cc:20:b2:a7:88:c3:96:79:76:
         2c:b2:5f:cd:8e:70:2f:0a:95:dd:e1:d3:39:7b:24:20:8b:2c:
         3a:5f:d9:58:14:ea:68:16:a7:3e:9e:24:80:1f:0e:fd:91:0b:
         68:44:16:e7:10:87:73:7e:e4:b0:d3:49:18:f2:3f:ac:41:af:
         15:b9:06:54:39:ec:df:04:dc:63:99:7f:6c:6f:37:ac:1a:28:
         c8:a0:63:64:f4:4c:e3:5d:1a:c3:f8:6b:9e:d3:54:3e:ef:5a:
         b0:60:2d:35:e2:06:0e:b9:53:99:1b:97:d9:0e:26:1f:6f:8d:
         f8:fc:d4:af:4b:d3:67:0d:3b:21:ff:56:b1:fd:97:99:47:d3:
         d9:90:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:02:50 2024 by rpki-client on console-fra.rpki-client.org