Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File:                     hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier:          sN6m7rTF4RdIDulA3YjhhFTuLl8ZKEtTm00ancT+BYU=
Subject key identifier:   B5:3A:CA:A1:3E:67:C7:70:1E:97:18:1B:D4:B3:7D:45:F0:EE:0A:CF
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer:       /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial:       01901EC6EAAA3C557775DF2101526D54C85D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 02:01:10 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:10 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:10 +0000
Files and hashes:         1: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: gClMPZg53yil/UcVyxb/iXAwrplC4qxoW2YtyQ9r5S4=)
                          2: n7Ehr3QdD_NucZRZQWOJHB4xgGo.roa (hash: A9YPmsu4cLdQoCSCB0URzsu51gDu0jxzKcukhG6m8bw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:ea:aa:3c:55:77:75:df:21:01:52:6d:54:c8:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
        Validity
            Not Before: Jun 16 02:01:10 2024 GMT
            Not After : Jun 17 02:01:10 2024 GMT
        Subject: CN=b53acaa13e67c7701e97181bd4b37d45f0ee0acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6e:83:b7:d5:3b:ea:ad:24:f3:21:f2:87:03:
                    0b:81:e7:af:7f:0f:44:b4:0c:d4:f7:f6:1b:19:dd:
                    5e:6f:8d:22:ee:6f:eb:fc:60:83:e2:d2:98:19:ff:
                    86:84:5d:90:3d:09:44:0d:92:da:c2:ed:69:3e:fd:
                    b9:46:c0:f0:0b:b9:8d:9e:ed:a4:57:d7:50:41:6c:
                    2e:d0:28:a8:7d:7f:df:62:09:ee:72:14:2d:52:93:
                    af:96:8e:13:d5:1f:c6:9c:ed:1d:67:7e:61:66:9d:
                    cb:2c:92:e4:57:34:d2:4a:79:d0:7b:fd:07:ab:82:
                    b8:a4:0a:22:82:fc:20:ce:49:e6:ad:77:0e:b3:9e:
                    bb:f2:e9:46:9c:49:5f:da:3a:6e:a0:58:e3:af:e8:
                    3a:eb:c1:cb:b0:84:21:af:2f:0d:bf:3c:e9:83:dc:
                    2e:15:54:e9:06:e0:37:b6:20:00:c4:4d:1d:29:d9:
                    64:3d:9e:b3:f2:6e:ff:27:c5:86:43:75:a8:37:51:
                    c3:30:b9:96:e6:45:fe:03:2a:cc:d5:21:ce:7e:34:
                    d2:30:54:66:97:a9:cb:39:c4:c3:ab:9e:5a:7f:85:
                    ee:bb:d0:56:dd:ae:6f:7b:e0:15:0f:b7:04:3c:77:
                    53:88:ae:bc:08:88:f9:81:e5:3b:af:89:76:74:d0:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3A:CA:A1:3E:67:C7:70:1E:97:18:1B:D4:B3:7D:45:F0:EE:0A:CF
            X509v3 Authority Key Identifier:
                keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a0:60:20:c8:97:79:24:dd:13:86:29:98:12:6b:df:7b:c7:
         4b:88:f5:b1:f1:c5:5b:ea:7d:b2:f4:0b:a3:18:21:0c:15:d6:
         f5:ce:e6:8a:31:5f:3b:87:a2:d3:ce:07:b6:e3:02:ee:32:20:
         28:72:49:ea:8c:15:04:a1:d6:37:67:d9:12:e4:22:ca:ba:65:
         38:46:b1:8a:74:9c:a0:a6:82:8c:51:07:d1:23:c5:b7:ff:4d:
         e1:d4:8f:e4:09:3e:f1:b5:77:58:ec:63:00:59:10:99:8d:75:
         a6:eb:20:f9:c0:0b:96:b7:0c:6f:4b:96:d8:46:25:3d:5a:a7:
         b7:27:66:cf:65:e8:ce:82:aa:50:a8:d9:c2:98:60:8a:5d:2c:
         37:f9:53:26:b7:c2:37:c0:61:67:85:9d:8e:05:a4:b2:32:25:
         05:6f:a9:14:e9:74:85:d2:9e:b4:b9:ec:8f:80:8f:ab:08:f9:
         54:58:6e:00:f1:0a:7a:1a:d5:29:f2:96:52:05:a2:4f:bb:af:
         83:1f:24:8c:68:50:89:cf:36:b5:99:8a:62:4e:5a:1c:f7:0a:
         2f:05:f6:71:b1:3a:e5:eb:c8:b9:af:3c:ae:a9:28:7c:42:c1:
         d7:96:04:1c:07:a4:d6:b4:ab:cb:ae:b6:13:9f:e8:f0:ed:f0:
         e7:00:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:58 2024 by rpki-client on console-fra.rpki-client.org