Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File:                     CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier:          T6R2mva2nGMWKmLQshWSu+qDHXwcUnyqD0Uj+MJHauc=
Subject key identifier:   56:3D:0B:C5:A8:35:C7:58:9D:54:51:3F:79:90:6B:89:6B:4A:E1:FE
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer:       /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial:       01903A3DDE116B05C2AE8A31D6732D19D528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number:          11D4
Signing time:             Fri 21 Jun 2024 10:00:51 +0000
Manifest this update:     Fri 21 Jun 2024 10:00:51 +0000
Manifest next update:     Sat 22 Jun 2024 10:00:51 +0000
Files and hashes:         1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: vmoQvnLBO7J4Fpcno/aA1fQHAObOlaXs9+ZFwaOZRWg=)
                          2: My27Wg750G8HCT5Ed-v9ku8o6i4.roa (hash: Y3E+xdDXG3Cpt1NR1gJuB6nl7Z+TAXH79Po7KRGnzQw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:3d:de:11:6b:05:c2:ae:8a:31:d6:73:2d:19:d5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
        Validity
            Not Before: Jun 21 10:00:51 2024 GMT
            Not After : Jun 22 10:00:51 2024 GMT
        Subject: CN=563d0bc5a835c7589d54513f79906b896b4ae1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:9d:9f:21:4d:ce:fa:bc:f8:6c:e3:a0:6c:
                    02:1c:cc:0f:3f:ab:db:d0:2e:c5:7c:fb:12:21:8c:
                    dc:f2:34:bf:34:7d:e8:df:cc:e6:f3:8f:db:ed:24:
                    61:f4:09:22:a7:2e:fa:70:5d:78:73:b0:4c:f2:72:
                    1d:2c:0b:ec:5b:e4:a9:1d:1b:da:65:6d:89:11:7b:
                    24:a7:a8:c7:38:93:08:e6:0b:2e:e8:7e:da:aa:f6:
                    f3:84:55:71:c6:16:70:94:a9:9a:a0:f2:b9:53:f6:
                    fe:1b:69:41:41:40:ee:51:02:d0:f5:8b:ee:d5:80:
                    2e:c3:b7:55:eb:d2:47:76:60:d8:4d:af:18:b1:bf:
                    d0:5c:06:b9:e1:67:bf:ef:69:c3:18:50:ef:44:8d:
                    8d:ed:1e:44:e9:d9:b0:da:33:e8:b8:2c:64:6d:bc:
                    ed:cc:35:0c:c1:88:30:ce:b7:05:ea:11:cf:16:9a:
                    64:ae:8e:23:aa:6d:ff:b1:12:c6:a2:f5:17:21:c1:
                    4e:01:2f:55:70:e0:7d:f2:5c:90:f6:2b:e7:62:cf:
                    ae:37:8a:58:78:25:45:70:fc:59:30:38:67:7c:e6:
                    a9:09:14:ae:66:f2:a0:15:18:63:33:44:01:b8:7c:
                    6b:a9:79:bc:c3:87:dd:75:bc:23:38:89:c2:6c:b3:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3D:0B:C5:A8:35:C7:58:9D:54:51:3F:79:90:6B:89:6B:4A:E1:FE
            X509v3 Authority Key Identifier:
                keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:bc:f1:4f:2d:84:28:80:c2:21:05:04:8f:da:8e:55:72:
         20:8f:6d:d6:49:bc:b9:30:97:fa:76:ec:24:cc:dd:fa:04:68:
         fd:a9:34:3d:f7:ea:8d:ae:45:cc:cd:af:f7:76:75:e2:07:ca:
         0c:31:d6:b9:cb:f6:b2:22:22:ea:cb:1d:d3:7a:fd:c4:a6:fc:
         60:fd:11:7c:24:77:63:a5:17:0d:c3:65:0e:1f:00:21:29:cd:
         e8:31:79:82:59:0c:19:ba:2d:64:1d:db:56:d9:57:b3:f4:bd:
         fd:a5:e3:c6:ca:ed:c2:6b:dc:43:9a:2c:b1:33:d5:9a:46:60:
         7d:37:af:ca:8f:e4:be:d8:0d:b4:b8:6e:6b:19:05:95:16:57:
         d0:21:ab:f8:67:2c:c0:4e:d9:ca:1d:7b:1e:ce:65:a5:e7:c5:
         40:6a:8c:84:d8:43:02:6b:ba:4c:b3:ec:8f:da:84:bb:9a:81:
         c0:d6:23:18:ca:ec:b2:4e:5f:a3:14:07:e1:35:c1:ee:34:03:
         45:17:39:e5:29:e1:9f:8b:30:0c:53:0c:0f:fe:50:f1:07:c7:
         fa:f4:10:5d:f8:06:f4:6a:19:f7:92:22:a0:37:e9:3a:6b:e9:
         25:c7:3c:80:a7:d2:d1:28:60:5d:d6:be:fc:97:8a:ad:05:61:
         b8:f9:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:28:52 2024 by rpki-client on console-fra.rpki-client.org