Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
File:                     1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft (raw, json)
Hash identifier:          1JBuDy3lHG+segsCikIrg5haHKfT2rXxHzN+2Fniews=
Subject key identifier:   0A:56:91:E7:24:10:99:DE:68:AE:81:73:F3:36:62:F7:C8:2F:B1:9C
Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
Certificate issuer:       /CN=fbb0a25810d02646656f909c44eb2ba939d23209
Certificate serial:       01901D0F57A15C1A5830DE324F05FDDCAABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 18:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:02 +0000
Files and hashes:         1: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl (hash: IuR4ZnUoEziGD5kRn+TdJVYcdez3VSofoD1frmZ4Lwg=)
                          2: b9ZgMy28CrUavpsUC51ipp99pU4.roa (hash: aDjcqnwu/I+YtMR/qhn056GNbIKbYEcMvmF1Zw2CaXE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:57:a1:5c:1a:58:30:de:32:4f:05:fd:dc:aa:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209
        Validity
            Not Before: Jun 15 18:01:02 2024 GMT
            Not After : Jun 16 18:01:02 2024 GMT
        Subject: CN=0a5691e7241099de68ae8173f33662f7c82fb19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:1f:18:b3:a1:62:b0:5b:f7:aa:8b:3b:7d:
                    13:44:3c:29:a6:04:55:b6:1d:5b:a3:01:ce:bd:1d:
                    2a:95:67:4f:d8:3a:f0:01:90:4d:0d:be:a9:e4:f7:
                    24:22:ec:e2:f1:d4:02:3f:23:73:71:32:84:1d:5d:
                    9a:2e:ee:59:51:7a:67:87:0a:2c:cc:6d:c0:65:8c:
                    8f:f2:44:0e:2a:52:f6:a3:a1:74:fb:93:8d:d1:93:
                    33:f8:f6:2f:d2:fa:a6:99:ed:8c:15:07:ce:2f:fd:
                    33:0d:59:b2:8e:19:7a:c8:cd:97:96:c1:1a:f2:1a:
                    2f:94:b5:4b:2e:a8:fb:32:d9:73:99:f8:a7:c8:5e:
                    39:d1:8e:75:3c:c6:6d:ba:5a:43:39:3e:31:dd:e6:
                    a8:56:4e:ac:40:12:84:32:32:ae:22:28:48:a6:53:
                    a1:95:31:41:39:30:48:53:7c:95:f8:30:84:5f:b3:
                    6f:b7:b1:58:48:f5:37:09:e5:20:4f:52:61:e2:44:
                    b6:9a:f6:7e:f8:e3:03:b1:66:d4:94:7e:38:eb:95:
                    c5:f6:06:a7:3e:52:00:0e:67:7b:a6:c8:39:1f:7d:
                    dd:b9:2e:6d:25:fd:c2:ff:81:2b:4e:05:96:b6:86:
                    af:35:52:12:12:0e:bd:83:3a:c2:fd:60:aa:ee:22:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:56:91:E7:24:10:99:DE:68:AE:81:73:F3:36:62:F7:C8:2F:B1:9C
            X509v3 Authority Key Identifier:
                keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:89:ec:7d:7d:7f:d4:09:7f:5a:c4:dd:47:0c:ae:15:a8:df:
         ff:6a:37:73:1a:51:43:27:8c:ba:c6:43:07:d6:b6:1b:6f:9f:
         03:2f:84:8b:29:84:f7:a3:fc:38:3b:fc:3f:3d:71:4e:39:b9:
         40:b7:fb:86:53:ae:3c:ea:4f:a9:37:23:a8:1e:d6:9e:a3:8d:
         16:11:5c:bf:ec:e8:10:b4:0b:cb:da:3e:23:a9:35:a3:42:6d:
         2c:75:b6:2a:d8:8c:dc:9f:13:f4:d6:f8:04:d3:a9:50:ca:33:
         9e:e2:7b:c0:7e:c1:f3:9e:e4:25:a7:57:6e:62:0f:48:87:ca:
         c3:d1:79:32:d2:de:1e:ad:14:cc:cd:42:61:ef:81:e0:f7:5d:
         92:f1:99:b3:70:cc:5e:01:cd:8d:13:06:93:71:d0:87:01:c8:
         5b:d1:14:02:e6:da:bd:0a:ac:85:2b:f0:0c:0a:c0:46:97:7c:
         37:59:0f:f3:c0:57:9a:9a:1c:b5:e3:d7:f4:11:9a:27:e1:81:
         f7:c4:02:85:e2:1f:27:d3:ef:55:35:82:ca:ac:1d:29:57:4b:
         43:0c:6f:48:13:5b:65:0e:4d:e0:a1:ab:4d:d3:4e:a7:bf:37:
         d7:a6:a2:40:1b:07:08:5c:25:b9:61:ab:6b:1c:8e:f3:c4:44:
         2c:f1:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:25:08 2024 by rpki-client on console-ams.rpki-client.org