Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File:                     B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier:          aacishKUUxpbotRQ4F54jt2gFi8Sex4yfLaxFz14B6E=
Subject key identifier:   87:4B:7E:9F:A3:41:5A:D3:CA:9D:F4:B1:0E:0C:F4:09:05:EA:D4:B5
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer:       /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial:       01901FA227454772C3F3ED414FA8763F4A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 06:00:38 +0000
Manifest this update:     Sun 16 Jun 2024 06:00:38 +0000
Manifest next update:     Mon 17 Jun 2024 06:00:38 +0000
Files and hashes:         1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: K7U9gkc/4ti76MqRxjEFHkpZwkoMuHkqjGWWf0TFHyc=)
                          2: tdLkRsWrS9fMjkASVL6QS25G53Y.roa (hash: SE/oRzq3URYvs6LUcUBnZoqQZfiX1NqwE7KJvkFsZm4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:a2:27:45:47:72:c3:f3:ed:41:4f:a8:76:3f:4a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
        Validity
            Not Before: Jun 16 06:00:38 2024 GMT
            Not After : Jun 17 06:00:38 2024 GMT
        Subject: CN=874b7e9fa3415ad3ca9df4b10e0cf40905ead4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ee:56:4a:17:19:2a:56:1b:0c:0a:be:d6:4e:
                    a2:92:ed:68:06:c4:a5:32:de:3a:0f:d6:57:4d:18:
                    9c:ec:9e:fc:68:8a:ac:ff:e2:2c:36:c6:53:dc:f3:
                    32:62:b5:8f:7b:e0:90:ba:84:ee:82:65:d8:db:9b:
                    40:d1:f4:0d:44:3f:99:b5:db:95:d2:22:8c:40:f6:
                    1f:2b:96:2c:fa:99:30:3f:eb:1c:8d:f0:ae:58:1d:
                    ea:74:cf:16:17:58:f2:1b:77:e6:34:03:8c:cd:15:
                    ed:78:71:31:87:6b:fe:cd:57:46:0b:ce:13:81:86:
                    46:bf:5e:ae:68:d2:e4:87:6a:84:39:9f:84:74:26:
                    fa:52:20:42:00:ac:55:3c:45:6b:31:03:b1:c4:88:
                    11:5b:48:19:03:8a:ef:62:33:ed:64:a9:7e:07:05:
                    e8:dc:ed:1e:85:6a:d1:f4:44:cc:ab:4a:e4:6c:3e:
                    73:4d:6b:74:d1:37:e2:21:6a:c6:21:64:96:6f:d7:
                    26:ac:98:11:30:cd:c5:9a:f7:a3:ab:c7:f1:34:34:
                    6b:63:dc:7a:fa:f8:7e:ec:57:99:ab:74:b5:71:55:
                    83:86:da:a2:5c:ac:91:15:be:51:6c:2f:9c:a5:ee:
                    5c:44:3b:ca:6c:a7:0c:c9:3c:b4:77:50:76:c1:d5:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4B:7E:9F:A3:41:5A:D3:CA:9D:F4:B1:0E:0C:F4:09:05:EA:D4:B5
            X509v3 Authority Key Identifier:
                keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fd:25:20:86:a1:37:69:60:37:7c:c0:d4:77:4f:ad:d7:2c:
         5e:e4:74:03:71:51:a2:69:6e:db:9f:b9:e3:bc:26:4c:9c:4c:
         07:12:36:99:91:f1:ac:41:80:8b:1b:df:df:1a:ff:82:f9:ce:
         b2:25:b8:cf:db:1f:d0:30:ef:8b:55:fb:86:51:9e:94:98:56:
         04:1b:97:f8:c0:ac:cc:d0:24:84:1b:ab:10:27:e6:1e:3d:54:
         74:2f:fd:4a:d1:18:ee:1c:87:75:64:09:cb:f3:4a:0e:f8:00:
         f5:27:82:99:bd:cd:ab:ec:3a:65:4f:b4:20:08:f4:7a:a9:47:
         38:b3:aa:07:75:80:68:de:09:8e:99:2e:63:98:59:1b:a8:fc:
         35:cb:3f:3b:d8:77:ce:ce:c1:32:32:16:08:a4:f3:5e:f0:75:
         f6:19:db:7b:f2:f2:50:df:1f:e6:aa:54:07:54:16:40:f8:66:
         37:3d:08:67:13:3f:11:cf:79:63:b9:74:b9:64:c4:25:f6:29:
         1b:43:18:77:df:71:84:74:9a:3a:fe:78:0f:56:07:4a:a1:92:
         3e:4b:a6:6a:e6:6f:3d:ec:a8:a8:c0:77:1e:12:ed:cb:3b:a1:
         c3:dd:36:c7:0d:86:7d:9c:92:10:69:22:15:dd:2e:e7:20:29:
         96:c5:24:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:46:03 2024 by rpki-client on console-fra.rpki-client.org