Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File:                     1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier:          13RpEQXtv3K30ycUMEhR/Sc94/S8V30sva+x0YNLDwQ=
Subject key identifier:   A2:51:C4:AB:1D:07:E2:6D:40:70:30:42:DB:2E:20:99:B9:0C:6F:DB
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer:       /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial:       019045665262FFB62EE02CBB52648EBB96AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number:          11DE
Signing time:             Sun 23 Jun 2024 14:00:51 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:51 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:51 +0000
Files and hashes:         1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: 1p5C06YKbZ+2FRxPx9qiTw0Mq/yCUn/fUBrB4424tnM=)
                          2: 9QGnahV28bJhwnCPwABtzpfIbxs.roa (hash: iCZlPb8sAq/BNgWfg+hDugN1s/PGXJ3WXHINajuUauI=)
                          3: Z5_pDUENQtj_gBZpUXlOeMGuQFU.roa (hash: dTGXyDfdtUVV2CzePxKiEmHN/y70KzHio+uSm4YC2Xc=)
                          4: vxqsKSvClHem1rkXsWg9SgycOSo.roa (hash: hl8FUcab8D07kUCMeEBw+apbdDp9p0mx/B7Ui6jzruk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:52:62:ff:b6:2e:e0:2c:bb:52:64:8e:bb:96:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
        Validity
            Not Before: Jun 23 14:00:51 2024 GMT
            Not After : Jun 24 14:00:51 2024 GMT
        Subject: CN=a251c4ab1d07e26d40703042db2e2099b90c6fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:2b:df:f8:a3:71:bf:0c:66:15:33:12:70:
                    32:b3:09:13:35:4f:35:d9:cb:9e:88:74:e0:d9:7b:
                    b7:84:6b:ae:a0:3b:8b:19:f8:7e:da:ea:9a:1d:91:
                    bd:08:c6:ed:07:ce:33:9d:a5:4e:a3:6d:87:7b:88:
                    3e:4e:78:0a:a4:64:82:f4:bf:61:ac:1d:a4:ed:fc:
                    0e:45:94:40:f2:6e:3f:02:44:44:e6:0d:a8:bb:69:
                    34:2f:30:f3:0f:03:71:ab:69:93:c5:4a:73:48:96:
                    1a:a4:13:ad:47:6d:de:18:ae:51:d0:6e:69:2b:52:
                    3a:bb:35:2a:3c:df:5a:de:ec:3f:af:6c:96:b4:ee:
                    f2:ab:ce:a3:17:3d:d4:86:e1:18:1b:be:d8:8a:39:
                    e9:3b:9c:15:5c:10:c6:07:6d:4d:5b:a4:6f:55:17:
                    2f:b1:17:20:31:50:93:ba:91:f4:f4:4e:5a:e5:78:
                    c9:6f:19:20:6a:68:75:c1:90:ee:d8:70:e6:49:d0:
                    ee:9f:79:45:02:af:d8:9f:db:48:b9:6d:c4:42:b9:
                    b0:4a:97:b5:2c:3e:a5:50:a0:7b:5f:c7:6d:7f:f6:
                    c5:98:a7:b2:b9:7d:a5:f4:db:ff:4a:e9:95:06:79:
                    a8:01:67:cc:43:63:e1:e6:28:35:00:a5:ea:89:ac:
                    2a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:51:C4:AB:1D:07:E2:6D:40:70:30:42:DB:2E:20:99:B9:0C:6F:DB
            X509v3 Authority Key Identifier:
                keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b3:d1:9b:fd:57:6a:e6:bb:bc:d5:3c:f5:6c:ad:74:a6:bd:
         6a:48:b9:94:09:d2:6a:1d:3e:2d:c7:85:8e:8c:5a:c9:7d:89:
         89:a8:85:0e:fb:8a:83:d2:35:da:64:a2:eb:8d:0e:5e:ff:26:
         fd:d3:46:b3:6d:5e:9f:f8:93:fa:c7:82:6a:f4:04:be:3d:b0:
         c0:3b:b2:9c:0b:4e:18:55:80:8a:0c:04:09:94:d3:ac:d9:75:
         90:bc:d4:fb:64:c1:87:9f:88:0f:69:f0:7c:c6:9b:bc:3a:e5:
         5d:7b:78:26:65:52:dd:10:8e:f7:76:3a:c3:04:88:27:23:cb:
         92:be:74:b4:5b:3d:90:33:f8:02:23:c5:c8:a2:78:a4:c0:a5:
         54:bc:6c:a6:6b:5e:5d:25:90:c6:6f:ac:f3:ef:4d:e4:be:28:
         ea:41:b5:bb:44:85:d0:17:91:9d:18:3b:b7:a1:c7:66:58:63:
         7b:e5:8a:1f:6f:cc:d0:44:d3:18:f8:b1:8d:7e:91:72:62:b5:
         86:56:90:d1:9b:0c:8f:ad:e7:fb:e4:6f:52:b2:db:9a:16:62:
         fc:91:ab:22:73:eb:2d:16:ae:b1:64:23:7f:eb:ad:e7:46:41:
         aa:9c:8c:ed:f7:c8:8f:54:c9:b3:86:62:37:8f:fe:5e:08:68:
         a1:cc:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:02:02 2024 by rpki-client on console-ams.rpki-client.org