Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File:                     1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier:          Rc+TTTEzg+aeJroolsQTsDJ5qxIynD+aAtw1Gah+Cjc=
Subject key identifier:   50:C8:B2:59:87:89:FB:A8:52:7F:F3:F6:D3:3E:1A:F7:D0:61:76:37
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer:       /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial:       01901E9014B792607C6FDBB3158999578A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number:          0D0A
Signing time:             Sun 16 Jun 2024 01:01:17 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:17 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:17 +0000
Files and hashes:         1: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: 3+CZtFvQzaSfYLLF2DkAzW0jExG5Wg+GkccpyPD45Fs=)
                          2: fPnZr1-8qjbvgXa9sT5mD5Ov8lU.roa (hash: 9SxmLttJP4D16sLtG7JFczKMRd95AD77kwUB7JL4B2k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:14:b7:92:60:7c:6f:db:b3:15:89:99:57:8a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
        Validity
            Not Before: Jun 16 01:01:17 2024 GMT
            Not After : Jun 17 01:01:17 2024 GMT
        Subject: CN=50c8b2598789fba8527ff3f6d33e1af7d0617637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:4b:1f:31:f3:33:4f:6d:7e:bc:21:d1:45:
                    6c:7f:05:e4:7a:a0:b6:fd:97:9f:24:b3:fb:3b:55:
                    bd:e0:cf:86:ac:02:77:f5:ad:01:6f:2d:40:00:8f:
                    01:6a:c0:07:51:cd:2e:1a:1f:e4:2f:9d:f8:30:f0:
                    81:43:9e:a3:1b:08:09:b5:80:56:bc:e1:60:65:40:
                    60:25:df:23:ea:78:c8:d8:ec:70:a4:93:81:54:ee:
                    16:b7:48:87:97:af:a2:b1:d1:f7:e2:0b:9d:44:a3:
                    a2:96:cc:b9:83:c2:94:63:29:4e:7f:52:de:97:8f:
                    67:19:63:db:6b:22:29:e4:b3:3e:72:bc:68:c9:e3:
                    72:55:f5:89:5b:04:c8:64:4e:75:6c:6d:1c:2d:51:
                    85:d5:03:2b:a9:3c:83:7c:df:cd:91:f7:95:e9:fd:
                    c0:dd:58:9a:73:83:14:0d:0f:86:cf:85:c4:e5:10:
                    1d:2c:eb:79:81:22:54:4d:04:a9:49:49:29:ce:8d:
                    ca:95:fa:6f:bd:f3:fa:f1:df:fb:a6:0d:48:c6:65:
                    5f:8c:0b:c4:a5:a1:e7:67:ac:81:5b:b7:fd:d1:b2:
                    71:af:61:18:ae:aa:a2:c0:85:09:27:3c:ed:6f:65:
                    cb:46:65:14:4b:72:38:af:5b:16:57:79:86:31:bc:
                    96:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C8:B2:59:87:89:FB:A8:52:7F:F3:F6:D3:3E:1A:F7:D0:61:76:37
            X509v3 Authority Key Identifier:
                keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:50:a0:ae:05:1d:52:c6:d3:12:76:0f:f2:aa:29:bd:3d:2b:
         b4:17:9b:6a:94:13:bf:d0:10:dd:9e:3a:4c:8d:95:02:b4:14:
         22:e3:1a:eb:14:b9:e7:76:f3:f7:4a:c1:c1:19:d0:4e:d4:fc:
         1e:43:fe:64:37:ca:70:1c:27:4d:84:a5:04:b1:43:ea:e1:dd:
         68:73:56:33:cd:54:a5:f9:90:d4:d4:e9:d4:70:36:e8:cc:71:
         bc:ba:4a:7e:9e:ff:f9:04:43:8c:b2:4f:18:c6:02:5a:c8:c9:
         db:a4:29:ae:9f:2c:03:b1:18:e6:9b:64:2b:97:f5:a8:2f:9a:
         80:b6:93:89:0f:d6:c3:99:ff:f4:73:4e:0f:55:92:b3:8f:b1:
         ed:96:59:f6:c2:cc:a8:5a:20:8e:4d:25:fa:8b:e6:b0:b1:65:
         8b:14:8f:6f:ff:9d:73:a8:3e:c0:53:bf:87:2d:de:81:39:de:
         65:a9:b4:54:dd:83:4a:8b:e0:41:e9:c2:04:69:b4:53:d9:4b:
         84:f9:15:b9:a3:cb:e4:ee:93:04:a8:35:b8:54:3d:87:22:f5:
         8b:0a:7d:09:03:49:c7:6d:fa:20:dc:c3:98:e9:3f:34:a8:69:
         c4:05:78:e5:db:2a:96:84:e2:c3:8e:50:48:a5:25:70:15:a5:
         f5:94:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:02 2024 by rpki-client on console-ams.rpki-client.org