Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json)
Hash identifier:          cIoc/J/xpSMKmsA18oHVBK0QQAzzOKRl73yJaxFvNCs=
Subject key identifier:   3C:1C:01:07:CE:3E:19:F4:80:E8:90:33:37:F3:45:B1:92:0D:F1:30
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Certificate issuer:       /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial:       019035198AE5159252F1351BBE5746C84D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
Manifest number:          11D7
Signing time:             Thu 20 Jun 2024 10:03:04 +0000
Manifest this update:     Thu 20 Jun 2024 10:03:04 +0000
Manifest next update:     Fri 21 Jun 2024 10:03:04 +0000
Files and hashes:         1: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: bwWNKR2XZzPAUrzZkMcXXhrl3GLPJHe89qqNfhRp1qM=)
                          2: AmulEq34E5ioacYzNAAHO5Bx4j8.roa (hash: q9ufjJtKCOFUedU4D/NiE/TMwb/5BdulUQqNFRauYkY=)
                          3: Jxa9S4YiEUO2lP2akFFsy67vlYk.roa (hash: xFerZuh8bHl9rVLcfXG2nYbxooRjAQGO2Rt92DELTls=)
                          4: aExIHfZFEI4g8RNFo8RNvYYLF4E.roa (hash: WJNi1Z8fUFXzUnvSCVSfyDm+JVuUGuTSlH4JVIClHXA=)
                          5: eESvGgxD2gdyKlZq5QiJCi1mP6w.roa (hash: F9X6GXskhhq1C4QI6GWWPnXNMGuFZLyDCnxRY6kUX70=)
                          6: xCv6Um_kr0ojcJdnegz0VKWhEVc.roa (hash: zJ+TIXiRmN3YbrDApcVvqZwlqoo95+W7uUj7tukkIPQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 10:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:19:8a:e5:15:92:52:f1:35:1b:be:57:46:c8:4d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Validity
            Not Before: Jun 20 10:03:04 2024 GMT
            Not After : Jun 21 10:03:04 2024 GMT
        Subject: CN=3c1c0107ce3e19f480e8903337f345b1920df130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8d:b2:d6:75:ab:a4:e0:fb:99:7b:b1:23:87:
                    24:10:d2:7f:4f:4d:ba:cd:45:29:fd:9b:b9:5b:55:
                    58:b2:ab:df:f9:8e:35:fb:39:73:ba:8a:5e:ed:43:
                    e6:82:99:99:58:1f:c5:47:ec:f7:fe:58:aa:96:90:
                    fc:33:ef:8b:76:e8:a9:a6:0f:25:53:e5:6c:da:d5:
                    99:0c:9d:94:97:28:fc:08:ff:d5:ac:b2:3d:99:f5:
                    da:c0:87:fe:d7:f1:26:1d:ac:14:7d:65:72:63:5a:
                    3c:15:96:89:4d:7e:b2:cf:75:18:48:7b:7e:df:95:
                    05:88:f7:60:39:92:e1:46:7f:51:2b:25:db:18:18:
                    6f:86:76:db:c9:66:5b:81:4f:83:cc:d4:d6:c8:ab:
                    45:22:66:d8:64:32:30:d3:c7:af:e7:6b:b0:eb:3d:
                    d3:73:2f:bb:a4:7f:42:08:6e:26:cd:0c:65:90:e9:
                    71:36:2d:cb:3d:a9:80:39:ad:03:37:92:09:e3:9c:
                    4e:1e:f9:d4:0e:c3:19:4f:48:55:f4:6d:ff:45:12:
                    c2:2a:fa:f2:25:1a:54:4c:d6:97:b4:0d:37:04:16:
                    06:b2:f4:66:d2:9a:29:42:8d:df:d7:93:2a:5e:a2:
                    a3:04:59:8f:1a:65:53:20:cc:1a:97:54:4e:d8:79:
                    27:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1C:01:07:CE:3E:19:F4:80:E8:90:33:37:F3:45:B1:92:0D:F1:30
            X509v3 Authority Key Identifier:
                keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:5f:9a:19:5a:ec:9d:38:61:c6:51:91:70:02:29:ab:96:fc:
         94:8e:9a:59:13:56:5b:e5:57:e0:94:83:00:8e:8a:88:cb:8c:
         0b:9e:38:89:b3:96:0e:af:98:6a:e2:9a:18:a3:a7:90:ca:fa:
         cc:d2:05:f1:eb:e9:11:a4:4b:7a:ec:34:ba:46:d5:eb:73:43:
         24:04:c2:2a:af:57:3b:81:6c:ff:6a:0c:c9:98:47:ea:cd:28:
         91:5c:cd:09:04:e6:44:1e:b3:d5:0b:b3:3f:7e:60:f1:6a:3c:
         ad:47:c4:e6:fe:be:01:40:60:fc:29:b2:08:6c:9c:af:60:fa:
         d8:3e:69:92:f7:64:d3:4c:b8:09:05:62:a0:c9:26:f9:f6:f7:
         1f:a6:cf:de:68:09:30:04:76:a3:ea:8b:a2:aa:2b:f6:de:b2:
         52:09:2a:e5:ea:2c:a7:55:58:2b:e4:cc:9b:cb:dd:17:7d:ba:
         4e:5f:8b:16:8a:f7:4f:5a:9f:10:61:a7:28:86:ab:d5:1e:6d:
         72:87:05:2e:f8:8b:ec:db:bf:ce:20:d6:ff:d6:c0:b0:f6:2b:
         41:4d:1e:0c:6f:62:88:0b:3c:e1:01:08:a1:26:e8:6d:83:89:
         ff:b6:12:41:9d:22:d4:e5:f0:5a:ac:9f:05:07:7c:9d:cd:b7:
         ff:19:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 13:41:31 2024 by rpki-client on console-fra.rpki-client.org