Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File:                     1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier:          o1rcBN2Zw9GUMh14k3McBbT86rme/wY+LrcKk+pDw9M=
Subject key identifier:   E6:C7:58:69:33:14:D9:AB:0E:A6:19:BC:CC:99:8B:CE:6A:80:CA:FA
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer:       /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial:       01901A0E39C52672E7B45136538C8D50E3EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number:          097B
Signing time:             Sat 15 Jun 2024 04:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 04:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 04:00:58 +0000
Files and hashes:         1: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: gSPtHtoiLDFr/ph63XnW/kQ/2KOB2XNwwAC2Hd0DY1g=)
                          2: pwqEQrTNpjo0zM0uQK-mhMpQmZk.roa (hash: yVsDUfeys13Hbv8MsD/9sO7W/cjeTO0KboSAsO0zSME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:0e:39:c5:26:72:e7:b4:51:36:53:8c:8d:50:e3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
        Validity
            Not Before: Jun 15 04:00:58 2024 GMT
            Not After : Jun 16 04:00:58 2024 GMT
        Subject: CN=e6c758693314d9ab0ea619bccc998bce6a80cafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:97:fe:d6:2e:4c:a9:1d:6d:38:8c:e1:c5:
                    08:e0:e7:a2:5e:1c:19:ea:73:86:a0:13:cd:1b:3e:
                    ae:d5:15:4f:08:2a:6d:c0:57:97:ab:02:b1:b5:16:
                    fa:ac:40:e3:18:e4:c4:c5:ac:14:cb:e9:b2:7b:49:
                    b1:e0:be:6b:ab:89:d5:87:a1:2a:eb:35:cb:a5:c0:
                    36:dd:69:ff:0a:f4:b9:62:38:57:81:d0:d5:57:74:
                    33:74:e8:b0:eb:cb:d9:b9:f4:27:dd:92:86:ee:83:
                    3c:1c:dc:d0:53:a1:13:02:8c:4e:f6:5e:0a:6f:7d:
                    06:d4:83:1a:75:41:83:54:26:0b:ca:bb:7b:0b:b3:
                    cb:8e:e6:93:65:65:d7:cd:87:32:48:60:76:6a:ae:
                    91:56:fd:35:30:b1:08:e4:8f:66:85:dc:ce:43:a7:
                    de:fd:f2:0b:35:cc:c1:e8:b8:53:c4:0b:18:41:a0:
                    ce:17:02:85:1a:c4:4f:2d:f7:16:77:fc:55:35:23:
                    59:06:24:b4:1b:19:ce:d8:63:34:96:78:d6:7b:42:
                    39:92:5b:62:87:98:73:d6:00:99:fb:d7:09:84:04:
                    e6:47:1d:2a:bf:af:d7:d5:25:c2:fb:c3:ce:db:9b:
                    59:0e:22:42:61:82:7d:ea:2d:a4:07:ae:57:b6:0c:
                    ae:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C7:58:69:33:14:D9:AB:0E:A6:19:BC:CC:99:8B:CE:6A:80:CA:FA
            X509v3 Authority Key Identifier:
                keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:37:95:ee:74:9e:3c:24:62:6c:b2:38:86:81:ab:96:3d:57:
         dd:73:2c:52:06:d4:63:7e:63:73:8d:bc:83:26:ed:29:da:50:
         41:48:a1:57:79:53:41:ed:85:5a:af:23:a7:94:7b:43:15:3e:
         da:46:8a:18:dc:01:61:e3:de:71:0c:27:64:e8:d1:4d:e5:39:
         6c:68:04:66:f3:c3:8f:8a:0a:b6:3e:b9:f3:b5:7b:ad:c4:fd:
         72:e3:d5:09:9e:ef:5e:d7:d3:a9:97:04:b1:e1:71:43:67:4b:
         1c:e4:a1:a6:f2:4e:96:1d:f6:58:b7:22:af:ef:36:88:25:0e:
         26:07:00:fe:3d:c1:f7:7d:d4:14:b8:11:14:65:c5:42:f1:4c:
         bc:2a:d2:e1:0c:2d:63:71:12:e5:bf:b7:65:90:42:cc:f7:1a:
         66:5d:92:8c:58:bf:1f:7a:d7:b4:39:8e:ed:ec:ca:4e:f0:37:
         61:6c:92:3d:ec:9f:bd:10:da:a4:84:b8:a2:53:1f:e0:e6:0c:
         c5:1d:a7:d9:e5:30:82:bd:32:81:81:fa:ff:8e:15:6d:14:e4:
         c6:4c:c6:ac:21:81:c5:04:fb:aa:60:67:07:d9:a2:b3:34:4d:
         90:f2:32:02:c4:c6:44:1f:e0:2a:7f:86:c8:37:67:ad:2d:b6:
         dd:d7:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:29:24 2024 by rpki-client on console-ams.rpki-client.org