Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File:                     CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier:          QwoWimSyg428yfGdyKRJ00dB3wbi7TK74O8XOsvuszw=
Subject key identifier:   15:AE:21:0B:A1:1A:44:6C:05:81:29:EF:00:F6:FA:3F:CD:5B:CC:F8
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer:       /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial:       01901DEC4E66E3BC72D1EFB315173BC00D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number:          1158
Signing time:             Sat 15 Jun 2024 22:02:24 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:24 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:24 +0000
Files and hashes:         1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: S5oXgG4Fl1CNLBLaZVogPVm8UhfxJobCYHn1PAX/E2o=)
                          2: wL6_cidUvLnhs40L1x0enDowSWA.roa (hash: uFPMauRhYdeyfPzUny4k/jgb0VBcaqcfuZLHGEuMQcE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:4e:66:e3:bc:72:d1:ef:b3:15:17:3b:c0:0d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
        Validity
            Not Before: Jun 15 22:02:24 2024 GMT
            Not After : Jun 16 22:02:24 2024 GMT
        Subject: CN=15ae210ba11a446c058129ef00f6fa3fcd5bccf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:aa:35:b7:e2:1c:67:a3:08:fb:46:04:58:
                    60:2e:09:82:34:12:8b:29:da:50:f9:d6:51:49:c0:
                    6c:fc:cf:b3:dd:82:dd:3f:6f:94:93:8e:2d:65:1a:
                    32:d5:15:e7:d4:56:00:b5:91:9a:37:eb:a1:b0:71:
                    e9:ea:21:81:a8:ec:1a:17:6f:11:82:00:cc:b1:a6:
                    b6:52:f6:d4:f0:ec:b5:ab:7f:42:c3:1d:eb:9d:54:
                    ad:74:0e:b8:62:20:ea:1f:23:53:b1:4a:a6:49:33:
                    f9:bb:fa:d8:77:73:c8:c0:89:a7:22:0b:1a:49:0a:
                    ea:6a:ff:c9:c3:ad:fb:1c:2d:6e:57:92:7b:8e:2e:
                    32:b8:36:0a:aa:11:07:5e:a9:ea:e8:e9:61:eb:de:
                    e2:ce:ea:c8:73:92:7b:e6:b3:61:f6:1a:46:f0:a8:
                    9f:50:7a:79:68:91:eb:dc:cf:76:97:5e:39:bb:0f:
                    11:ee:e8:f6:6d:3d:e5:b4:71:b1:e2:c6:6a:53:70:
                    d9:a0:6a:f8:25:ce:24:e5:23:2d:f5:55:bd:ec:46:
                    b2:d3:3a:15:3c:2e:47:56:44:39:56:7f:cf:19:51:
                    a9:be:95:2e:ee:14:52:c8:dd:1d:7a:5e:83:e7:53:
                    9d:cd:2f:74:e6:2c:2d:1b:d0:14:ff:07:5f:86:7c:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AE:21:0B:A1:1A:44:6C:05:81:29:EF:00:F6:FA:3F:CD:5B:CC:F8
            X509v3 Authority Key Identifier:
                keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:31:04:d4:56:5a:5f:0d:99:c9:53:1e:69:8a:e2:72:78:97:
         fc:da:19:36:40:69:c7:20:05:d6:8f:84:21:46:b6:a3:66:e7:
         26:4e:ed:b3:28:76:c8:c5:b5:e1:85:71:82:78:9a:8b:01:56:
         1a:c9:3a:a7:eb:79:d4:6a:78:29:a0:3c:1d:4a:f7:44:01:bb:
         f1:6b:e8:f8:db:e9:4c:42:9d:7c:13:2e:25:aa:02:df:ca:bb:
         49:78:62:2f:83:ed:41:5e:ee:87:9b:3a:a3:58:8b:9b:bc:47:
         59:2a:59:e6:cd:fd:21:76:12:0a:76:25:89:55:bc:6e:3c:29:
         88:9e:0b:f9:e7:4f:64:c8:36:0f:cd:d4:27:58:b2:fd:8c:20:
         d9:46:d8:21:03:ec:42:67:14:d4:02:a5:1d:91:7d:5d:79:93:
         16:84:cd:b4:20:e2:0b:25:07:11:17:dd:ba:be:47:0d:2b:d3:
         ea:08:96:f0:f7:4a:57:e8:45:96:f8:dd:be:18:eb:26:68:e6:
         a7:57:38:55:82:68:e1:f9:1c:02:f0:53:0a:26:fe:7f:b1:ed:
         0d:3e:be:43:d2:fc:6c:8d:80:96:3f:30:6f:a2:f7:c8:c9:bd:
         cf:c8:07:34:e1:99:a6:c5:80:e9:b2:26:a4:1a:ee:8c:42:00:
         d9:81:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:44 2024 by rpki-client on console-fra.rpki-client.org