Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File:                     bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier:          d7/VXSgrYxkykVkS1NsCC2uqP0r1T13LfRoDGgFsFKE=
Subject key identifier:   98:47:B2:98:4A:ED:6E:96:BF:88:A3:74:4A:A1:60:39:97:E9:CE:25
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer:       /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial:       019037083E032929F0A002E5CBFA0E80CAC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number:          11D5
Signing time:             Thu 20 Jun 2024 19:03:25 +0000
Manifest this update:     Thu 20 Jun 2024 19:03:25 +0000
Manifest next update:     Fri 21 Jun 2024 19:03:25 +0000
Files and hashes:         1: GuYk0aQA0pgEw3N0C-v50Ls9Jpc.roa (hash: SznoNB6LAigw17DW19M9EYVuTCRz/FY3elEsd4ZSwDk=)
                          2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: C8ZLHdbLcso6Jvtmr2AsmsErFn/N4T9ftyWtr+G2B/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:08:3e:03:29:29:f0:a0:02:e5:cb:fa:0e:80:ca:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
        Validity
            Not Before: Jun 20 19:03:25 2024 GMT
            Not After : Jun 21 19:03:25 2024 GMT
        Subject: CN=9847b2984aed6e96bf88a3744aa1603997e9ce25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:91:4d:b8:20:92:35:6b:06:f4:e3:14:eb:54:
                    a8:5b:85:66:ef:e0:96:71:de:e0:7c:b2:21:e2:17:
                    c2:f0:2c:ab:c0:14:31:1e:f4:58:fd:c3:09:56:43:
                    c8:63:90:ae:61:da:5c:21:08:25:8f:b0:33:6f:b8:
                    c9:1b:f4:bf:87:aa:ff:fa:55:63:04:1c:13:f8:01:
                    d2:e7:3e:72:aa:08:2a:06:c6:73:92:dd:fb:61:d6:
                    96:7a:bf:b3:3b:28:59:2f:37:ef:13:05:82:07:fb:
                    30:c5:1b:66:c9:76:10:23:2e:19:68:b1:e5:00:ae:
                    6e:54:0f:f5:5d:1a:d0:87:69:58:18:68:d2:92:a2:
                    0b:59:a5:6f:3b:b1:e7:72:66:59:f6:ad:69:94:7b:
                    88:00:e0:15:05:e2:37:6f:90:e7:ad:7c:46:8d:70:
                    c7:ce:83:35:b4:c0:3d:30:39:38:b5:bb:b8:e9:7b:
                    7a:34:e8:e3:7f:1f:52:eb:5a:a8:b7:d5:a3:6c:5b:
                    a7:2f:db:06:7e:81:c1:5e:93:01:96:71:53:e9:9e:
                    f0:b5:28:62:cf:0d:90:e3:8f:5d:09:42:e4:5d:88:
                    7c:e8:c6:1b:58:2c:cf:c7:15:0a:34:26:2c:21:62:
                    3c:f7:7f:fc:ff:79:9e:b9:c6:c4:cc:1e:25:c9:8d:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:47:B2:98:4A:ED:6E:96:BF:88:A3:74:4A:A1:60:39:97:E9:CE:25
            X509v3 Authority Key Identifier:
                keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:08:1a:2e:f1:ba:81:10:a5:c6:94:a5:8d:9d:ea:dc:7e:eb:
         be:04:1a:3b:e6:e1:9c:f4:e0:74:9e:99:2c:a8:3d:fd:e8:11:
         18:f1:46:4f:b0:1f:62:01:0e:ab:0a:89:1b:22:98:ce:36:d6:
         99:6c:fd:9a:9a:1c:c9:c6:f1:d7:c5:73:ed:2a:3e:0d:b5:23:
         84:81:be:9e:8a:6e:b2:86:e4:06:3a:d6:4c:fb:7f:44:6e:de:
         23:8e:da:0e:a2:44:c9:3c:a4:c8:20:a9:8a:b8:f0:42:79:55:
         ff:d9:47:a1:00:fa:54:ee:a9:eb:3d:02:2c:bd:30:a5:f7:25:
         1a:0d:6f:a7:30:0a:06:c7:e9:68:54:1f:d8:db:be:c3:56:48:
         91:72:bf:90:d3:ca:ae:be:14:cf:94:f9:31:cf:d8:fc:d2:a5:
         df:eb:93:06:6e:cc:78:4f:b9:53:58:61:6c:d1:2b:a4:70:45:
         19:2c:b2:04:5d:66:b4:32:18:8c:22:5c:5a:c5:0e:90:ff:eb:
         8d:f4:e9:2e:c2:66:a7:b9:ae:1a:61:bf:28:ea:7f:43:2d:03:
         ba:99:b8:73:56:43:d1:35:af:b4:b0:63:45:66:39:5d:90:20:
         ec:91:8f:c3:95:34:67:16:6e:f3:33:43:bd:71:21:1e:9c:24:
         94:3f:b8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:01:53 2024 by rpki-client on console-fra.rpki-client.org