Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
File:                     hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft (raw, json)
Hash identifier:          4QY4jMU+0N/SYP9YnmEYZ74VX4H9+FthHr3A3IdtHOQ=
Subject key identifier:   F1:26:35:2F:10:08:4B:05:26:B9:72:3B:03:C5:75:21:E1:76:AD:F5
Authority key identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5
Certificate issuer:       /CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
Certificate serial:       01901D46594D1CD79E1B327466C642245CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 19:01:07 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:07 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:07 +0000
Files and hashes:         1: hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl (hash: gbk05fqc4400a0lhOTwXFByEgbR168AhSIfonxYX6Z4=)
                          2: vbflL1BiUAPuty2fCg0m-DP2nro.roa (hash: nOMHU4FFFkndDqSnUdWTHqomXIOJRdemr2UJqqwmdnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:59:4d:1c:d7:9e:1b:32:74:66:c6:42:24:5c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
        Validity
            Not Before: Jun 15 19:01:07 2024 GMT
            Not After : Jun 16 19:01:07 2024 GMT
        Subject: CN=f126352f10084b0526b9723b03c57521e176adf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:b0:8e:ce:7d:27:ec:35:04:e2:5a:ad:23:
                    fb:9e:a9:32:29:90:5d:16:25:35:4d:79:1a:51:6a:
                    8d:90:01:30:e2:ee:0e:ac:ae:e8:67:27:36:f1:95:
                    78:e5:cb:cd:61:a7:78:42:77:63:2d:12:46:da:d0:
                    c6:8a:d0:f4:2b:49:35:9c:ff:34:3e:65:a2:64:c9:
                    c2:0e:e0:15:35:20:8b:b0:ea:31:b0:be:fa:e4:13:
                    c5:cd:64:b5:02:4f:56:47:98:73:18:74:ea:c8:f3:
                    25:4f:bb:23:18:81:52:44:a0:9a:5d:05:82:0a:19:
                    6c:e1:f9:2c:b9:c6:09:45:1e:d1:81:87:6d:32:3b:
                    83:ee:a5:ab:7e:d2:c8:71:01:1a:83:bb:f0:67:9f:
                    0f:d4:fe:ad:57:f4:b6:a9:67:96:53:4a:93:89:0c:
                    51:67:8a:c9:21:f9:2c:b8:1d:0c:43:56:2d:97:c7:
                    5b:82:15:b3:3c:7b:1a:fd:2a:93:a1:1a:3d:ad:b5:
                    27:ce:9d:ec:af:7f:e4:a6:7d:85:5e:47:7d:cd:8c:
                    92:36:35:fd:6c:fe:59:6e:60:8f:97:b9:7a:fd:e6:
                    48:63:46:31:c6:27:88:10:f0:32:75:22:0e:e1:2c:
                    99:13:05:e1:d8:a8:8e:b2:5b:42:21:db:84:f3:8e:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:26:35:2F:10:08:4B:05:26:B9:72:3B:03:C5:75:21:E1:76:AD:F5
            X509v3 Authority Key Identifier:
                keyid:84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:42:76:ef:6e:46:f7:28:02:8a:33:5b:a2:df:fa:7b:0d:c0:
         80:fd:12:19:9f:96:c4:1d:43:43:00:61:e2:33:14:4d:20:0e:
         2e:1c:23:f2:ed:84:97:f3:48:b8:4b:8d:43:01:8f:82:3c:29:
         5a:af:b4:aa:42:46:e7:9f:41:2b:96:bc:01:94:cd:60:02:3a:
         f4:45:e9:46:64:3a:f0:cf:2d:39:ed:e1:c6:46:7c:bc:31:5e:
         70:ec:8c:2c:90:4a:38:cd:fd:86:c8:6b:a2:af:4c:65:b6:97:
         83:44:28:fb:bc:0b:22:b9:ea:1b:78:a8:0b:e0:2f:8d:c2:9c:
         3b:0c:e4:79:e6:6b:70:ea:f5:cb:05:a5:0a:eb:70:70:a0:28:
         d4:b9:6e:57:ca:f7:8e:2e:c6:2d:d0:ba:94:59:2f:65:63:d1:
         7f:09:4a:f1:95:cb:b9:f3:67:b1:d1:ed:16:b1:3c:a0:cd:6f:
         5a:d1:f2:14:ba:2f:eb:bb:d2:8f:2d:34:1f:3f:ce:87:15:da:
         b6:23:77:9d:cb:c0:2a:bc:da:a7:1b:b0:6d:32:dc:3c:32:7c:
         b3:70:b8:4c:55:7b:39:be:32:7d:fd:5c:13:4e:11:2a:35:e1:
         d8:11:35:dc:05:9a:5b:4d:6d:4b:bf:41:52:13:e8:49:96:05:
         25:10:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:04:50 2024 by rpki-client on console-fra.rpki-client.org