Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
File:                     0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft (raw, json)
Hash identifier:          1WeLearIEmuPk6kBGGc8gMjeFsVVykNH7QpLmv5ovBc=
Subject key identifier:   95:4F:DE:79:EE:CF:CB:A7:60:92:3B:81:73:35:28:DE:B3:41:CC:2C
Authority key identifier: D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
Certificate issuer:       /CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Certificate serial:       01901E594499EB8D806ABDC177026F4BB04F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 00:01:24 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:24 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:24 +0000
Files and hashes:         1: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl (hash: hO1lUm72FvUHdYYVGp7Mq/qTZDWq5ljlKM82Jokq0GM=)
                          2: 9YGtIz05m62kDXigdHalhEsScLs.roa (hash: 9DxKD6A36HwAz0T3AIYbizIt4Twbkzdyn2hjT+gOCkg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:44:99:eb:8d:80:6a:bd:c1:77:02:6f:4b:b0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08db08e1338a579ad3789535fa73a5e54511ff1
        Validity
            Not Before: Jun 16 00:01:24 2024 GMT
            Not After : Jun 17 00:01:24 2024 GMT
        Subject: CN=954fde79eecfcba760923b81733528deb341cc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e5:b6:5b:8c:50:b4:9a:20:91:aa:42:39:b6:
                    69:2e:78:00:71:1c:c8:48:50:04:c2:22:ce:95:74:
                    6a:bf:0f:fa:0f:c6:55:9e:a4:eb:64:52:12:26:03:
                    e4:f2:89:5f:0a:99:d2:a5:bd:e3:51:0f:36:98:41:
                    38:b2:09:75:de:1b:49:e5:52:11:a1:6a:5e:66:04:
                    cd:45:42:f0:b5:51:9f:d3:cb:80:98:b3:4d:11:f2:
                    16:d4:5c:24:2e:c8:4a:9b:69:95:42:f5:4a:4d:f7:
                    f2:da:9f:07:ef:3b:55:d7:fb:e1:00:4c:b1:5f:31:
                    9d:93:04:ec:68:f7:47:ff:7d:72:dd:27:9a:69:cd:
                    82:16:e3:5f:4b:e0:62:ab:70:cd:48:68:18:9e:b3:
                    97:4f:4b:18:07:7d:60:fd:25:e3:d3:4f:f4:e1:3c:
                    2f:f1:73:69:38:10:a3:bf:88:8a:d5:a3:e5:52:f9:
                    5a:4c:38:e0:7d:31:b8:d8:ee:6f:7a:da:1c:48:82:
                    bb:c2:2e:f6:57:09:e7:f7:21:7f:04:ae:b2:3f:cb:
                    7c:65:d6:6f:da:90:c3:39:90:50:45:0e:b6:e2:da:
                    4f:19:a6:31:d2:0d:e4:25:b8:f6:7b:17:52:ff:21:
                    da:58:af:70:5c:54:1b:f0:6a:69:64:fd:7e:ae:ec:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4F:DE:79:EE:CF:CB:A7:60:92:3B:81:73:35:28:DE:B3:41:CC:2C
            X509v3 Authority Key Identifier:
                keyid:D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:97:fb:ac:f7:4b:67:48:5b:3f:e0:48:e5:bc:e2:80:5e:e5:
         45:b0:90:da:ee:41:25:2e:4b:7c:7e:40:c8:9a:fb:d9:a6:ff:
         b7:8f:c4:5a:62:b1:e0:85:8f:9c:de:25:54:ca:aa:83:ed:07:
         89:36:f0:be:f6:34:53:f2:e9:78:0b:e4:96:31:12:d6:1d:69:
         3c:0a:f9:d4:9e:b9:78:24:fc:ea:df:ef:34:e5:bb:91:73:a5:
         76:d8:9c:1d:40:84:32:61:ff:2e:33:b6:fe:2c:95:72:54:37:
         46:8e:af:98:f6:48:4a:f0:66:16:da:b3:34:d2:18:69:9b:cc:
         68:7b:44:ba:13:10:e7:af:cb:2a:7a:10:12:54:36:93:0f:0e:
         5e:c3:02:6f:8d:68:13:d8:b2:45:89:74:1a:6d:0e:0b:52:ab:
         1e:78:19:e9:a2:a5:52:48:64:7e:28:a7:0c:48:5e:ae:9f:f0:
         27:27:b1:10:da:67:89:4f:53:d9:86:65:42:ff:85:c2:d8:69:
         64:c5:2b:bb:61:dc:2c:ea:8c:bf:3a:83:76:c1:b4:13:4a:4f:
         3a:68:2b:8b:ae:10:98:b0:f8:88:a3:06:12:56:f2:37:e9:d7:
         bb:22:39:b1:1d:45:97:60:3d:0f:31:6d:c1:5e:7d:a5:5a:4d:
         52:f8:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:10:12 2024 by rpki-client on console-fra.rpki-client.org