Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
File:                     00J0yPw5e9vGx1haFcgyErBQIh8.mft (raw, json)
Hash identifier:          rZ9dG0pHKtuFQLY8I0g2yWaxhFIxkaD4ykfOO87y4Hs=
Subject key identifier:   91:F0:FD:84:87:C9:E6:1A:3F:60:F5:08:0D:F5:77:98:1D:35:9B:55
Authority key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F
Certificate issuer:       /CN=d34274c8fc397bdbc6c7585a15c83212b050221f
Certificate serial:       01901D0F5FA559B56A0E813944364D7D03BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 18:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:05 +0000
Files and hashes:         1: 00J0yPw5e9vGx1haFcgyErBQIh8.crl (hash: WsrIdkbq/nM3bVENcdmUPxwjPK4ZBUWfA9JXsVtuxSQ=)
                          2: rdyKRLBeCuc5Ix0b_fe9lhvZm2g.roa (hash: TSYCnNvYsoyNnvglbIn4+4zMMwFn+FdP/D+w9xfUkx4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:5f:a5:59:b5:6a:0e:81:39:44:36:4d:7d:03:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34274c8fc397bdbc6c7585a15c83212b050221f
        Validity
            Not Before: Jun 15 18:01:05 2024 GMT
            Not After : Jun 16 18:01:05 2024 GMT
        Subject: CN=91f0fd8487c9e61a3f60f5080df577981d359b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:ba:01:8d:83:f8:66:c0:c1:e5:3a:0e:e4:
                    e2:a0:85:9a:74:aa:7d:6e:69:00:24:14:1d:33:db:
                    34:42:f2:fe:cf:af:89:31:ca:21:cb:6e:0f:b3:90:
                    93:e7:ff:0b:61:4f:02:c7:d1:2e:d0:1a:b9:9e:7b:
                    4c:b5:2e:5d:d6:3a:0f:ad:32:0a:a0:2e:76:05:21:
                    7f:a1:ab:5a:37:d5:ab:7d:43:07:c9:82:36:91:d3:
                    e3:48:e6:d6:30:fd:7c:71:aa:20:d2:ec:3c:dc:54:
                    56:d4:fd:f6:26:35:ef:27:23:04:e8:a2:a4:48:bf:
                    99:7a:f8:f7:6e:62:af:c3:f5:26:60:63:17:a8:a1:
                    55:80:c8:52:14:f4:45:21:e8:16:9d:dd:51:13:ef:
                    c7:a3:32:67:c5:e7:66:f9:23:84:1e:df:9e:8f:c8:
                    c6:c4:17:b0:c9:3c:ed:85:08:14:92:8c:a6:82:15:
                    1c:43:46:66:61:f7:2a:d6:58:bb:e0:c5:33:64:8e:
                    02:a9:71:fc:b6:ae:fd:3e:38:a0:d7:6d:fb:59:b3:
                    4d:a9:7f:60:cd:34:07:71:ee:35:b1:ca:7f:f3:14:
                    24:c4:0a:e2:bc:53:72:b3:c8:1e:f1:f5:03:0e:e5:
                    20:15:c4:c0:a2:c7:d9:27:22:80:f9:99:92:39:82:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F0:FD:84:87:C9:E6:1A:3F:60:F5:08:0D:F5:77:98:1D:35:9B:55
            X509v3 Authority Key Identifier:
                keyid:D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f6:b2:1d:51:1a:6c:a2:4e:ca:76:6a:d5:c6:4b:1d:e5:6d:
         a3:bc:38:db:59:34:a0:cd:f0:3e:6d:05:2b:85:71:5f:bf:ce:
         27:68:2e:3d:49:36:e1:b5:36:94:0a:60:cf:11:13:b9:48:ff:
         e8:07:52:11:7b:bb:d1:c1:26:9e:58:9a:19:8e:80:e1:61:08:
         e8:fc:c3:da:cf:e3:67:0b:29:09:49:89:5c:f6:8d:da:fb:d3:
         7b:f3:26:37:5e:46:56:b5:f6:28:eb:27:04:7b:a1:4c:f8:ea:
         cd:17:7f:84:f3:99:54:52:38:8a:3b:3a:8e:ac:46:8c:55:67:
         ea:6e:a0:d3:e1:57:25:56:09:16:0d:9f:89:a0:47:02:3a:80:
         1d:bb:35:03:95:65:33:f2:2f:9c:e7:6c:6a:de:a4:2c:77:67:
         fb:14:5f:16:33:cb:54:5e:43:4a:94:31:ae:e8:f8:42:f0:b0:
         09:1a:9e:34:b5:34:78:03:a7:c4:e4:97:33:90:05:41:97:50:
         cb:c3:c3:8b:7a:b1:ca:8e:5b:3f:14:9c:25:ad:af:37:59:69:
         c3:63:b1:01:dd:e3:61:4a:82:fe:b6:7c:fc:04:90:d7:bc:85:
         06:57:fe:40:38:dc:35:42:1a:48:92:92:86:dc:89:18:ef:c9:
         97:55:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:14 2024 by rpki-client on console-ams.rpki-client.org