Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File:                     1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier:          MgLiKmk15IdxMvXy4U4jnVCpq7kDe4EzTV7UOdrzjIQ=
Subject key identifier:   F7:83:3C:A9:F1:1F:78:33:92:F8:A7:C6:FF:9E:74:B2:E9:AD:7D:29
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer:       /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial:       01901E591A88F6431B300913BE9CBA86E21A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number:          11D2
Signing time:             Sun 16 Jun 2024 00:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:14 +0000
Files and hashes:         1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: t6a0AMGAutls3GwFVMlEUaalVP7aIWs0ogrLl8jEsRg=)
                          2: Bi6Mk3EJ3SQDPDq_rlNRbR6FTMo.roa (hash: h2pDgw6llcHz8Y1X0TiJe/20wzzOL/C/GiN7XpOTzlw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:1a:88:f6:43:1b:30:09:13:be:9c:ba:86:e2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
        Validity
            Not Before: Jun 16 00:01:14 2024 GMT
            Not After : Jun 17 00:01:14 2024 GMT
        Subject: CN=f7833ca9f11f783392f8a7c6ff9e74b2e9ad7d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:50:fd:e8:75:ff:72:38:51:46:77:3d:6f:
                    40:66:7c:06:0e:11:9c:9c:e4:26:38:1c:13:ee:53:
                    b9:8c:6b:78:ae:10:30:f8:0e:3c:e6:9d:21:da:e5:
                    4c:96:4e:79:29:a5:a2:df:c5:f5:0b:bc:b0:27:55:
                    7b:dc:74:07:bb:38:f8:9d:2b:d0:ae:ca:c2:3a:87:
                    48:da:73:b8:4d:d8:f8:40:f3:64:9e:40:10:63:33:
                    97:d9:3b:49:d2:67:6e:ec:ac:91:f0:d6:fe:ac:37:
                    e4:29:4f:c3:d5:8a:f9:6d:a0:f6:80:c4:cc:86:6e:
                    e5:54:06:b3:c1:8a:06:ad:63:3b:24:00:e6:43:f7:
                    8f:a9:d4:2f:11:3b:36:9d:27:fb:3a:26:19:7f:2a:
                    a2:ae:28:2f:f8:2d:f0:da:e9:93:e8:26:ad:a7:7d:
                    3d:8f:b7:d2:3a:45:2d:e0:97:a7:7b:6c:ec:5b:bb:
                    d9:cb:ef:a2:5b:aa:30:71:8f:12:a5:f0:ac:c1:49:
                    dc:aa:8b:56:07:01:9b:6f:ac:c4:d4:ee:bb:0e:f2:
                    79:88:10:39:0c:58:32:f0:3c:e9:22:81:0f:fd:cc:
                    87:2d:9f:5a:4d:f1:05:ae:90:45:f3:07:bd:2a:9d:
                    7f:2e:e0:af:67:0f:28:d3:2d:2f:cb:d1:ed:17:a3:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:83:3C:A9:F1:1F:78:33:92:F8:A7:C6:FF:9E:74:B2:E9:AD:7D:29
            X509v3 Authority Key Identifier:
                keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5b:72:3b:8c:89:41:d9:f4:c6:64:d1:c5:ad:7c:4d:3a:14:
         97:82:09:3c:e4:5a:8e:d6:b3:20:86:78:7d:61:db:f1:6e:35:
         8a:08:ee:73:56:9e:56:f4:fb:34:c1:6a:ed:0c:41:dd:5d:35:
         d4:d7:03:80:b8:92:15:b6:5a:5e:23:d2:47:11:5c:0c:66:14:
         31:e4:9e:fd:f3:e1:b2:15:45:cd:73:2b:55:f7:a6:5a:c0:75:
         36:88:59:e7:85:fe:00:f5:90:87:86:1a:65:df:80:7d:5c:da:
         fd:80:44:c8:12:0c:6a:f1:13:4f:8b:19:0e:bc:da:f8:00:20:
         bb:2e:5b:7b:3c:cb:06:56:4b:08:c3:e3:07:18:19:99:b0:1d:
         d2:1e:c6:67:97:63:62:86:44:15:c3:3b:92:fc:dc:89:ac:c0:
         50:06:e8:dd:4b:d7:79:b8:c3:27:5b:96:03:91:07:b2:09:8b:
         b1:0b:26:1b:04:5e:90:e6:8b:63:66:cc:b3:ca:d7:b0:85:0a:
         1f:49:98:3a:d7:4f:10:0d:fb:91:c3:aa:f6:08:00:d0:6c:ff:
         00:34:e7:18:91:5d:87:d1:b3:74:32:ff:45:0f:47:d7:b9:d5:
         d8:a3:03:5c:ac:ad:f8:a2:d7:bc:ec:8c:1b:d9:a8:99:91:8f:
         56:ae:61:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:47 2024 by rpki-client on console-fra.rpki-client.org