Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File:                     X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier:          d4P6SL3QfPdopIZCz8rrdpF7g/RGbOqEYTTiWssijRI=
Subject key identifier:   E9:97:54:C9:A8:99:26:F1:E3:1E:C9:C1:8A:7D:48:2B:EA:54:FE:F0
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer:       /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial:       01901D0EFE790FFADCD90BC5FFD97E802A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number:          01B2
Signing time:             Sat 15 Jun 2024 18:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:39 +0000
Files and hashes:         1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: YNx/7fLFbwqntzlYqVTphLgnbcEt4cnfW/bAwP4L51U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:fe:79:0f:fa:dc:d9:0b:c5:ff:d9:7e:80:2a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
        Validity
            Not Before: Jun 15 18:00:39 2024 GMT
            Not After : Jun 16 18:00:39 2024 GMT
        Subject: CN=e99754c9a89926f1e31ec9c18a7d482bea54fef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:09:5c:55:a8:f5:7e:b5:f0:73:88:54:11:7b:
                    f8:4d:80:00:19:cd:4a:35:b5:fa:f4:99:02:65:1f:
                    16:6e:31:84:a3:2a:4d:1e:cd:2e:f2:79:54:6d:21:
                    5c:89:7a:e1:be:f8:e2:a9:d1:da:8a:cc:3e:76:aa:
                    b0:9b:49:c9:48:c9:38:30:0e:7c:56:8c:1b:ff:d7:
                    15:b5:a1:4e:cc:88:6b:c2:00:31:aa:3e:fe:e0:95:
                    02:27:27:61:d3:13:ee:e8:69:90:de:49:2e:7b:5f:
                    d1:37:3f:6f:41:05:44:ce:21:e5:5a:4a:8c:da:7a:
                    29:b8:a3:fc:62:7c:6a:7d:34:4c:d5:42:78:cb:3e:
                    f6:d5:88:ae:a0:96:3e:62:3f:13:76:c2:42:72:f3:
                    3c:90:c4:ce:34:f7:01:3e:f3:77:58:6a:40:06:c3:
                    e9:b9:cd:86:b8:e6:b9:9a:c8:e4:0c:88:91:d0:c2:
                    d8:66:ef:de:ab:d6:cf:db:62:33:b2:33:16:9d:ea:
                    be:bf:24:17:a7:8f:39:d4:4b:93:7c:d3:4c:24:06:
                    c1:0a:ca:f3:64:ce:06:1b:ff:5c:f5:2e:9f:55:a0:
                    1e:bc:60:4c:3c:4a:7b:38:8e:cb:5c:db:6a:a1:1d:
                    ac:d1:47:a0:f5:0d:66:76:00:92:1d:6e:3b:3f:2f:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:54:C9:A8:99:26:F1:E3:1E:C9:C1:8A:7D:48:2B:EA:54:FE:F0
            X509v3 Authority Key Identifier:
                keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cb:67:15:fa:4f:90:aa:80:b0:43:c1:70:8c:7f:1b:48:ca:
         8e:f9:bf:e5:b0:b8:10:e6:e6:ad:a4:1f:2f:75:f7:51:fc:40:
         8a:33:94:86:93:91:1c:ea:f8:64:14:05:8f:8c:49:51:80:49:
         f1:53:22:67:78:07:2a:9e:de:4d:09:67:a1:fb:9b:d0:dc:96:
         7e:9c:f8:71:57:a4:70:2a:83:7b:a0:4c:33:d0:99:67:4c:2a:
         d0:84:16:d0:ca:e1:2c:c6:c9:21:f8:64:0d:0c:1d:81:25:9a:
         9e:10:87:54:5c:a7:7d:99:25:03:4e:d0:f8:31:2d:9d:0f:98:
         d2:67:2a:28:84:fc:b4:5d:68:0f:1f:ca:07:4b:08:fb:23:8f:
         db:61:c6:a3:d4:88:59:f7:9d:cf:be:43:25:2e:ce:03:f1:e0:
         03:eb:c1:5c:ef:2a:ac:14:43:e4:30:d2:ea:3f:02:b5:d6:b2:
         3f:a0:28:65:01:24:6a:28:8f:db:3b:af:9f:4c:5f:11:e2:89:
         dc:21:2e:50:a7:c4:8a:d6:de:86:51:bb:d8:38:0a:07:54:f1:
         b9:69:b7:eb:26:3d:df:72:b4:6b:f0:e1:2b:65:06:6d:b4:48:
         15:29:e9:af:a8:42:d0:6f:5e:6a:a3:cc:d5:16:15:e2:35:94:
         d7:2e:0d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:58:04 2024 by rpki-client on console-ams.rpki-client.org