Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File:                     9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier:          cFqenMIJN02AhjCNWvZ30XKPpV+Zv/PhJntvGpP5opY=
Subject key identifier:   0F:78:81:AD:3D:E0:BC:5D:68:A7:E0:44:D7:AC:36:01:95:8B:A2:87
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer:       /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial:       01901DEAD43A43C390BB054A106D7729D345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:47 +0000
Files and hashes:         1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: l6A5Pq60mZ5VONb5CxtSzaUMigjpcQAC/7csdqWkYls=)
                          2: mRRVsGfcLPmdR99n1j0u3ool8Fc.roa (hash: wwO+Gro9mnfEu3m0neI2kEzml0U7buFp3TX1GcuAW3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:d4:3a:43:c3:90:bb:05:4a:10:6d:77:29:d3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
        Validity
            Not Before: Jun 15 22:00:47 2024 GMT
            Not After : Jun 16 22:00:47 2024 GMT
        Subject: CN=0f7881ad3de0bc5d68a7e044d7ac3601958ba287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:c1:14:79:e2:28:dc:07:74:7d:ac:9b:75:61:
                    47:78:c3:94:f5:98:36:f1:2b:cb:cd:26:cb:af:73:
                    2d:fd:d4:aa:f6:19:d9:f9:c8:1b:ca:42:28:44:60:
                    59:af:aa:76:3b:1f:84:72:7f:e6:75:3d:86:3d:1d:
                    eb:90:61:d3:c1:3a:19:c4:d0:ce:46:46:bc:5a:9d:
                    ba:b1:ca:18:cb:35:b6:dc:3a:6d:dc:e7:9d:de:75:
                    71:5f:f7:49:93:37:c3:f5:e5:56:67:a7:b9:e3:03:
                    1c:9b:31:1c:24:64:2e:ab:e4:24:4f:cc:b4:ff:17:
                    d6:46:3a:ce:d5:15:12:06:8d:07:3d:59:bc:43:9b:
                    98:ec:02:e7:68:a8:cf:7f:34:4e:46:37:09:0b:80:
                    c5:d9:f0:81:83:aa:ab:61:fa:e6:6f:f4:e9:95:8f:
                    5e:8f:fb:ef:fc:e3:d0:c2:c6:e0:50:e7:83:a7:4c:
                    dc:67:2a:b8:db:22:67:36:dd:41:ce:f7:cd:93:f4:
                    e4:02:01:fb:d6:80:55:cd:5b:d7:0a:6d:1e:50:68:
                    a1:74:24:c7:24:36:17:cb:58:e0:e3:a6:62:11:40:
                    7b:4e:b1:47:28:ee:bc:5c:5c:59:53:67:3d:de:80:
                    a7:64:3c:2c:8e:d8:26:91:64:37:cb:b8:15:bd:8f:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:78:81:AD:3D:E0:BC:5D:68:A7:E0:44:D7:AC:36:01:95:8B:A2:87
            X509v3 Authority Key Identifier:
                keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b1:bc:af:fe:46:bf:08:a5:9d:59:4b:e5:e4:23:e7:6e:5b:
         d6:45:25:ae:2b:36:8a:1c:67:48:ab:e5:69:a6:4c:b9:a0:14:
         00:bc:ab:93:06:43:e5:49:0e:bd:98:16:e7:4b:a7:27:1f:94:
         7d:d5:ce:6c:2a:ef:be:ac:8a:fa:c9:81:31:74:97:f9:86:50:
         2c:1b:11:aa:0b:8a:0b:7d:42:52:cd:d7:8b:30:08:57:c5:9c:
         b2:ca:bb:53:3d:47:27:fa:28:e4:97:3c:10:6e:2d:59:5c:d9:
         45:9f:39:fc:ef:a9:65:88:46:b4:cf:cd:72:fe:f5:2f:ba:12:
         89:59:81:95:8c:e6:44:aa:74:c8:cc:58:e9:3b:ee:85:c9:5b:
         b4:93:ba:e9:ba:d8:77:f4:74:16:8d:aa:8d:d4:1b:82:28:90:
         20:7b:63:54:c9:60:b0:df:e1:ab:81:79:94:52:a6:33:a2:34:
         6e:c5:e1:bb:d2:be:2e:fe:17:fe:77:4c:c4:81:ec:d0:a4:8b:
         07:d0:b2:c9:f1:fd:28:59:e9:b3:53:a4:2e:fb:57:93:6c:0c:
         32:ff:37:2b:35:da:88:7b:cb:6f:a8:ce:1a:d9:65:05:b4:5f:
         54:52:b9:81:9f:7c:d8:48:77:d4:f3:e1:2a:33:a1:0b:4d:66:
         a2:b4:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:48 2024 by rpki-client on console-fra.rpki-client.org