Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File:                     1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier:          0ju+Pr9+psznfmCk5QNbnrpTqNK8NMw723/4rfLKPuQ=
Subject key identifier:   6A:A2:7E:E5:48:9B:0D:F7:35:34:3C:1C:7F:DD:33:94:10:29:89:83
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer:       /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial:       01901BFDA6AD3B860107F4264F41130140E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 13:02:06 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:06 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:06 +0000
Files and hashes:         1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: QiT6FcQBo5KdzhBzKYqliFTgLyDHdgNF6oHOTBhd+Kg=)
                          2: t34KhsLVJfg3ykg9v-4WMqMSjXE.roa (hash: dmvmq0LFpWaE+DzDJHB27zoURld5elKnpVQQT18tPlA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:a6:ad:3b:86:01:07:f4:26:4f:41:13:01:40:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
        Validity
            Not Before: Jun 15 13:02:06 2024 GMT
            Not After : Jun 16 13:02:06 2024 GMT
        Subject: CN=6aa27ee5489b0df735343c1c7fdd339410298983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:3a:83:6a:7d:26:b7:69:df:58:94:1b:c1:
                    7e:3c:23:8d:0c:72:10:f5:57:3a:e9:1e:9d:17:73:
                    be:62:5c:de:07:55:74:7d:ce:d9:53:6f:9c:15:19:
                    9f:ad:56:40:bf:7b:19:6c:77:34:4a:d8:4c:e4:88:
                    7e:de:19:62:a4:26:8f:22:5a:e7:54:4c:67:ca:cd:
                    03:8b:e7:f4:e2:32:00:51:dd:24:e8:3c:a1:f0:3a:
                    c4:b2:9a:aa:4d:ee:7f:35:39:02:68:af:0f:73:7a:
                    c9:4d:62:b7:16:38:bd:84:9f:cf:bf:d9:1d:fe:08:
                    58:dd:dc:42:8c:f1:2a:df:f8:ae:b3:35:63:e7:7b:
                    88:3c:62:39:55:93:44:69:30:71:e0:61:18:e4:17:
                    e9:96:d8:0a:ee:03:ff:ef:ba:01:9c:f3:ce:79:7a:
                    54:e1:91:85:67:5c:47:ea:99:5b:74:d8:ba:9c:ab:
                    a7:7a:b2:ff:ca:a5:c8:70:c3:46:00:39:67:bb:ca:
                    62:eb:74:91:e0:fc:1f:18:15:1a:21:54:4f:f4:fc:
                    af:83:db:21:0c:ad:9f:84:42:98:8c:04:d2:83:9a:
                    c4:21:46:d6:5a:53:5b:c9:81:41:bd:e0:dc:d6:94:
                    db:23:34:33:70:8f:a5:66:24:34:48:3f:c5:7a:53:
                    14:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A2:7E:E5:48:9B:0D:F7:35:34:3C:1C:7F:DD:33:94:10:29:89:83
            X509v3 Authority Key Identifier:
                keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:33:09:5f:ee:92:98:b1:7b:31:c9:ec:67:bd:76:72:ab:12:
         fc:e1:6f:40:2d:d2:cf:86:77:a0:3d:36:31:a5:90:42:eb:db:
         a6:82:6d:fb:6f:eb:11:40:4f:30:37:f4:af:29:d7:c3:6a:d8:
         23:9f:25:fd:8a:9d:b4:4c:1a:17:9b:bb:c0:9c:a8:89:f9:c6:
         4f:a0:b7:8f:2d:1d:d7:14:a0:0b:c6:6e:8a:d5:ca:6c:f0:de:
         bc:15:73:37:0b:16:d7:15:1f:e9:d0:fa:78:b4:f2:cb:de:3e:
         5c:60:91:23:cc:b1:d3:39:5f:be:a2:a0:79:6d:41:9b:6d:8b:
         27:08:64:f1:b5:ac:99:e2:19:73:3b:cd:17:72:a0:db:4d:ab:
         91:1b:4d:ce:e1:9f:7c:a9:7f:c1:ef:a7:86:b9:b8:e5:9a:c7:
         6e:44:54:22:79:cb:a5:c9:d1:14:64:26:d1:70:43:45:38:5c:
         9f:d3:84:e8:f6:d3:4e:b5:96:26:27:5e:42:3c:46:03:f0:6d:
         95:97:39:01:0d:2f:e1:61:79:8a:c7:5e:fd:44:e3:8a:2e:81:
         a7:b8:38:34:da:db:b0:4f:8c:62:e6:2b:8b:d6:94:c6:eb:59:
         88:69:7c:95:f7:44:3b:8c:9e:5f:69:97:1d:6b:dd:2c:fa:5b:
         9c:19:2c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:39:07 2024 by rpki-client on console-ams.rpki-client.org