Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File:                     ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier:          jI7A7ysc8/EopVi02jHEMo4HhHH7OopgZGPdCaSWR6Q=
Subject key identifier:   21:3E:72:B2:E4:67:AD:C1:DF:61:27:C5:5E:EB:65:E9:CE:0E:2E:B6
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer:       /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial:       01904189BBE9EDF4F4F3AAE946DE2DB751FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 20:01:03 +0000
Manifest this update:     Sat 22 Jun 2024 20:01:03 +0000
Manifest next update:     Sun 23 Jun 2024 20:01:03 +0000
Files and hashes:         1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: yqb7cWovSSyee2N0BLiU2YnpCrjhhNrKhmANvOvI1LI=)
                          2: TUlcCVfUnR68umxuc3psaln0sew.roa (hash: WjGNi7YNMa1yfY1701my4d244cKgwam/ySc7XvdmELM=)
                          3: bjduufRWiVJU-BJkuGgLpNtaxaQ.roa (hash: i9jU62to6dGfLF1XYnuILci4L4yHXpF8FrM9zyCngG0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:bb:e9:ed:f4:f4:f3:aa:e9:46:de:2d:b7:51:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
        Validity
            Not Before: Jun 22 20:01:03 2024 GMT
            Not After : Jun 23 20:01:03 2024 GMT
        Subject: CN=213e72b2e467adc1df6127c55eeb65e9ce0e2eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:7a:e3:85:01:67:f3:98:63:1d:d3:c4:d5:
                    72:b0:fe:bf:02:99:8f:c4:72:c4:a9:db:af:e2:6c:
                    27:57:f3:42:33:4b:9d:e6:ef:89:d3:f1:84:8c:05:
                    b7:b1:ed:0e:15:4f:5c:5f:7e:d6:cd:ff:07:07:47:
                    70:25:b0:fc:c1:42:70:9a:28:95:69:59:28:dd:6d:
                    eb:3a:a1:28:f2:a1:a4:b4:8c:fd:91:b5:2e:f5:d2:
                    bb:5d:f5:f6:a6:95:79:46:37:bc:c0:ef:b6:cc:7f:
                    41:99:f6:64:9c:bd:d1:f9:50:06:4a:c8:49:5d:3b:
                    96:8e:fd:22:8c:ac:a1:05:a4:f6:29:e0:fd:f9:b7:
                    dc:9f:e4:4f:11:a5:b9:25:f7:c4:04:d7:6f:cf:8f:
                    be:79:4a:98:62:e2:9e:87:b1:49:4d:44:42:e7:b1:
                    e8:94:58:32:d4:96:da:03:f3:4f:d9:ae:f4:68:29:
                    41:47:11:cf:ed:3d:5f:f6:88:f8:c4:5f:62:36:92:
                    5f:25:e0:49:9f:1e:d7:3f:d5:5b:ee:1c:79:ef:31:
                    b5:ff:d6:58:e4:10:68:33:6f:a5:ee:80:66:d8:cd:
                    fc:ba:22:b4:95:a5:88:2c:86:a5:2c:05:8b:cd:e4:
                    59:e4:cf:5c:2a:8d:5f:f7:bb:1c:45:1f:37:47:d0:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3E:72:B2:E4:67:AD:C1:DF:61:27:C5:5E:EB:65:E9:CE:0E:2E:B6
            X509v3 Authority Key Identifier:
                keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:75:51:c8:1f:e5:27:e0:88:3b:a7:71:13:a0:d8:b6:4d:32:
         2a:3d:09:ea:a2:2b:55:7a:b6:a7:72:a1:73:0f:73:b9:24:c5:
         c6:33:a6:8c:45:7b:1f:11:56:2c:06:af:5e:32:f8:a2:e4:b1:
         a6:1b:1e:30:b7:aa:75:4e:13:55:a1:43:b2:36:d1:58:22:75:
         5d:11:50:04:90:0f:16:0c:c2:e8:cc:ca:4c:d8:ea:90:d3:68:
         b1:e0:3c:e4:25:37:7d:bc:69:d9:db:70:01:e3:3a:41:de:cc:
         55:31:d6:60:cb:25:31:e9:4d:68:4f:fb:ba:66:f1:df:e2:b7:
         78:cd:14:ee:53:3b:8c:f6:7d:ed:57:ba:c4:ae:66:12:bf:2d:
         bb:04:aa:af:87:9e:7e:68:e4:de:57:81:a0:cf:14:13:aa:bf:
         db:29:32:e5:6e:2b:c3:05:5f:cd:86:b0:12:8f:35:34:57:4a:
         b6:c0:4f:56:2b:aa:ec:05:fa:e9:00:8b:0e:f9:be:09:58:30:
         13:b4:84:e7:1c:a8:1f:2a:d6:de:f7:e0:fd:f3:ed:2d:13:94:
         d6:5e:e9:fb:0c:e0:29:36:52:f3:b2:26:10:90:cc:d8:b2:c7:
         95:ec:ad:e0:a9:5c:ad:e3:09:7a:3e:98:86:4b:18:97:56:d5:
         13:72:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:43:37 2024 by rpki-client on console-ams.rpki-client.org