Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File:                     8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier:          3/91nSeacYlX/UYMsYTcV/bH8HV6DpgJDtIwAM+e3Nk=
Subject key identifier:   DF:BA:5D:F2:13:8C:F2:ED:CF:D4:04:73:4A:AE:A3:DF:B9:74:19:60
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer:       /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial:       0190351926997E488F52B086969E0C06DD68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number:          11D0
Signing time:             Thu 20 Jun 2024 10:02:39 +0000
Manifest this update:     Thu 20 Jun 2024 10:02:39 +0000
Manifest next update:     Fri 21 Jun 2024 10:02:39 +0000
Files and hashes:         1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: 8hTA0S52SefdBj45wYfI0R5bDG+hGu2wLYcFtq95UhE=)
                          2: v9RJFoBiaUTkzKiU9LRy_gae3bo.roa (hash: WKTULwo8wbxxNrGGQZx7kXnNpzRyLuIe+P6Dgckpp4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:19:26:99:7e:48:8f:52:b0:86:96:9e:0c:06:dd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
        Validity
            Not Before: Jun 20 10:02:39 2024 GMT
            Not After : Jun 21 10:02:39 2024 GMT
        Subject: CN=dfba5df2138cf2edcfd404734aaea3dfb9741960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e1:a5:83:27:79:48:d1:d0:05:bf:bf:e1:2d:
                    64:52:77:c6:70:7f:4c:20:02:77:92:9d:9a:d3:85:
                    fc:3f:6e:f6:5c:42:a6:85:e1:b3:36:24:fe:63:b4:
                    05:ef:5c:e8:65:84:7d:ff:dc:6f:4b:6b:a4:54:e4:
                    07:16:36:7c:d9:53:d3:c1:b7:5c:c7:22:a7:6e:62:
                    2f:78:81:08:0f:d0:c2:58:b5:ef:46:41:e9:24:f5:
                    78:c7:29:99:c4:dc:cb:70:2e:16:fb:4e:88:3a:04:
                    e0:47:62:6c:a9:c3:a1:8c:11:75:29:a0:ad:9d:65:
                    50:2d:42:22:23:72:81:49:c6:ef:ca:b5:c2:90:3d:
                    36:02:38:77:ee:b7:5b:c0:2f:5b:b2:a2:48:6f:17:
                    96:04:f0:4b:c0:fa:e8:1e:d9:20:ef:64:ca:91:13:
                    a9:e6:63:86:1a:d2:10:51:50:a2:54:94:be:2e:7c:
                    98:62:0b:45:04:25:3e:06:f3:47:ed:31:48:5c:72:
                    26:c9:99:7b:4f:64:ee:e9:12:67:e7:a0:58:2a:ee:
                    3a:63:9a:8a:65:2e:c6:96:1b:66:8a:8e:48:bf:23:
                    b1:31:bd:9c:23:3c:fd:af:c3:f8:55:c9:4a:5e:45:
                    20:f8:9d:2f:6d:58:09:ce:96:65:f8:d0:5f:76:1c:
                    31:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BA:5D:F2:13:8C:F2:ED:CF:D4:04:73:4A:AE:A3:DF:B9:74:19:60
            X509v3 Authority Key Identifier:
                keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a3:5e:35:18:e5:c9:10:9d:ba:1e:8a:39:b6:05:7d:70:97:
         b7:ca:f0:89:c7:eb:52:f9:a4:a2:55:1f:0f:41:cd:f9:61:28:
         72:9f:52:8d:c8:5c:41:a8:81:36:a6:f7:5e:0e:cb:6e:5b:b5:
         0a:b0:a0:1d:4e:15:50:2a:d2:33:74:da:ba:e9:a3:4e:a4:a0:
         0a:46:46:68:38:76:09:95:cd:0d:85:60:fb:09:aa:84:45:06:
         b6:de:ce:b5:2b:89:6d:63:c5:f4:f0:a3:92:e6:ee:36:cc:12:
         38:ed:63:80:6c:1e:53:24:db:af:a3:50:25:12:f1:54:b0:51:
         69:08:a5:69:8b:5a:b2:32:0c:cd:86:df:b6:bf:94:bf:3c:cc:
         4a:6c:01:62:4b:7e:78:19:03:17:83:86:a2:0b:4b:b4:f1:04:
         76:00:ba:b3:71:23:e9:1d:45:5a:56:bb:ff:46:d0:ed:41:21:
         3a:05:a6:59:18:40:e9:be:31:9d:f3:87:e1:0c:4b:62:95:a3:
         3b:33:cf:4d:d4:b6:6f:2c:a0:b6:6d:22:7a:b1:1d:b1:6a:04:
         ca:ac:62:49:f0:0b:2e:ae:07:47:90:af:8a:1a:ba:62:13:3e:
         cf:37:a1:c0:40:0f:1c:fd:9a:24:23:a9:c4:a2:9f:bc:ed:71:
         1a:2b:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:35:49 2024 by rpki-client on console-fra.rpki-client.org