Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File:                     1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier:          pv37iT6AiReQcokuhQD5oyakPR3LSlGnGbj9TMskeMg=
Subject key identifier:   7E:80:42:0C:0F:63:0D:89:E2:B0:CB:3A:21:13:92:A9:7C:61:A2:89
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer:       /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial:       01901CD8197CC7D1A98AD420966FFE03CC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 17:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:42 +0000
Files and hashes:         1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: FmR8GM4m4V/CLKskjIR0eupfdiZ6rj1KGTldQSK2VJc=)
                          2: Buk8nnH06pPmKNnMwDzmJKt-jKM.roa (hash: Wo3ETB1JYrp5xHWsP4RHIhyNnAcEK4VAGLLwD7GuANQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:19:7c:c7:d1:a9:8a:d4:20:96:6f:fe:03:cc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
        Validity
            Not Before: Jun 15 17:00:42 2024 GMT
            Not After : Jun 16 17:00:42 2024 GMT
        Subject: CN=7e80420c0f630d89e2b0cb3a211392a97c61a289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:80:1c:fe:89:c5:0f:d0:c7:b2:e6:d6:28:
                    12:97:2b:e9:33:cb:bd:d6:48:80:3d:c3:c6:74:de:
                    a2:ec:6b:a3:58:34:38:ba:ac:ce:23:f7:cf:0c:30:
                    bc:42:2e:00:2e:67:89:88:77:cc:85:fa:7e:5f:d0:
                    9b:e8:11:9f:6c:40:59:06:69:e6:e8:45:1a:ff:81:
                    9a:35:70:1f:f2:9a:a4:2f:13:c5:bb:ba:4f:0d:4e:
                    92:fe:32:a7:e1:e2:e2:4b:0f:3a:c5:f3:07:b3:de:
                    dc:0b:f2:55:90:81:f7:dd:cd:16:07:cf:e3:6f:ad:
                    4f:59:8a:71:29:31:51:d8:b2:11:c8:58:be:23:19:
                    e0:52:75:a1:2a:25:d1:dd:45:3e:c7:34:0f:90:4f:
                    05:a2:06:6e:ee:57:ad:77:7e:2c:e6:57:3b:70:6d:
                    b1:03:b2:d9:56:24:1b:d4:96:05:58:ff:27:b6:84:
                    a8:51:a3:47:ff:17:3a:18:be:9a:79:7c:c8:0a:d6:
                    4e:e3:4d:14:e4:a6:19:ea:5a:dd:9e:a3:31:2d:10:
                    d1:9a:ba:82:a7:fa:6f:6d:b2:dd:38:d9:e4:34:a9:
                    8d:ea:44:31:4b:b4:8a:c7:64:57:0f:30:cb:63:32:
                    78:f9:bc:a7:ea:db:d5:00:55:09:63:c1:0a:65:8b:
                    ad:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:80:42:0C:0F:63:0D:89:E2:B0:CB:3A:21:13:92:A9:7C:61:A2:89
            X509v3 Authority Key Identifier:
                keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f1:16:83:79:a6:94:9f:a5:36:fb:8a:80:e7:4d:59:ce:d7:
         60:26:db:b8:0e:41:6b:76:bf:e7:c1:2b:fc:28:1b:09:d5:6e:
         0e:49:57:36:9d:77:90:0a:8b:7d:3e:b2:a1:35:ad:54:8e:b4:
         0e:1f:21:de:81:cb:b0:61:ca:67:28:69:4f:d6:40:3d:ab:fe:
         8b:f1:1b:09:45:09:86:fb:83:9b:0b:97:14:d1:eb:d7:9e:b0:
         2c:52:8b:05:a6:3b:42:20:cb:f1:b1:44:6a:f4:51:7a:71:f1:
         e6:2d:5a:2c:5c:21:77:ef:a8:27:f8:82:04:13:9a:c9:ea:bc:
         ed:7d:02:c5:58:a4:d0:f1:c7:be:32:85:7c:16:5f:dc:86:09:
         2e:48:0f:9a:60:0b:b9:c1:28:fb:87:f7:19:30:f6:e9:14:95:
         ab:24:ae:43:8a:86:ea:1a:7d:a5:8d:0c:1e:d0:0d:9c:50:de:
         17:48:23:87:ae:2a:98:35:08:de:d7:f5:50:6f:15:48:6b:d2:
         24:27:ec:1c:d2:fc:c4:b9:d6:90:5b:f6:62:17:2c:6e:44:9d:
         5c:6c:f4:47:98:5b:6f:a9:34:7f:19:cf:ee:29:53:f1:f2:52:
         ef:b9:34:02:92:b3:33:39:60:14:63:62:73:24:8a:84:bc:5a:
         5c:5b:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:56:02 2024 by rpki-client on console-ams.rpki-client.org