Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File:                     C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier:          ZiQWf5vfm/1vjZib8vgCf+6TGSlRrY0lB4U2kiFJtKA=
Subject key identifier:   A8:E8:40:FD:76:D3:50:97:AB:E5:9B:0E:8E:EF:6E:7E:2D:CA:0B:B9
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer:       /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial:       019040AEB03DDF0EA10A8E80C99A2EA830AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number:          11D8
Signing time:             Sat 22 Jun 2024 16:01:48 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:48 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:48 +0000
Files and hashes:         1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: axNpvkz598SzpiEyJdDa/pSlgUOpU+sbxSSlGl6IGtc=)
                          2: _rgc_7vopaNQsF0WBrxkyMlYlOE.roa (hash: CuhhlEiUC9wp/KeGDao/UNJx5wmZ6Gh8+Vpknqqxveo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:b0:3d:df:0e:a1:0a:8e:80:c9:9a:2e:a8:30:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
        Validity
            Not Before: Jun 22 16:01:48 2024 GMT
            Not After : Jun 23 16:01:48 2024 GMT
        Subject: CN=a8e840fd76d35097abe59b0e8eef6e7e2dca0bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:fa:b2:a3:cf:04:8b:c6:ba:5d:3b:7a:75:
                    a9:52:f7:44:0e:29:54:04:66:75:1e:84:7f:2f:e4:
                    f2:ac:46:3d:3d:bc:d1:8f:f1:9b:6a:ae:51:82:ac:
                    86:4c:f1:ac:2a:7a:9b:e3:b7:0b:47:51:2d:94:0d:
                    75:b4:f4:e2:0e:b9:01:61:44:e7:c0:25:34:63:a6:
                    12:48:d8:16:94:50:b9:34:56:fd:48:a9:5b:2e:58:
                    4e:c3:7f:0c:83:67:5d:fa:d7:1d:6e:0d:74:4a:40:
                    cd:97:4b:4b:e3:8a:96:fd:81:10:62:24:bd:99:65:
                    51:58:79:a5:38:ce:af:cd:6e:34:38:49:3b:ac:20:
                    6b:e2:11:2f:82:f0:cf:32:25:42:3e:c9:9e:53:c9:
                    22:6a:21:e6:c0:b1:0e:81:b4:9e:1b:c4:7d:bf:16:
                    e8:92:0c:c1:f6:50:15:c8:b2:46:0d:3d:35:29:1f:
                    ea:3a:fb:76:ae:b1:cd:4b:c0:35:a3:5e:65:65:ea:
                    19:68:d9:de:ae:e7:49:06:b1:1e:22:c1:25:6f:30:
                    cf:62:c4:e6:83:08:75:26:6f:77:1f:fc:32:ee:99:
                    5a:2f:41:14:cc:ac:92:0e:fa:bc:57:95:16:f2:77:
                    d4:d1:36:ff:69:21:57:91:ba:64:c9:67:84:01:91:
                    b7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E8:40:FD:76:D3:50:97:AB:E5:9B:0E:8E:EF:6E:7E:2D:CA:0B:B9
            X509v3 Authority Key Identifier:
                keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:ca:4f:8f:25:fd:7e:ca:8c:94:9c:f1:1a:26:3e:b8:a7:
         9b:ff:72:5c:02:3a:25:44:32:57:d1:b2:f7:58:63:e0:64:5c:
         14:5c:5f:f2:a3:47:4e:0a:ea:29:91:06:a6:9f:6c:43:79:29:
         9e:9c:e8:9c:af:04:fe:01:40:bb:e3:4d:85:db:e1:e6:63:c8:
         c7:12:fc:d6:22:a0:8d:34:00:ed:f3:4b:ef:32:92:8f:67:57:
         b2:46:c9:62:02:e4:41:77:d3:0e:1e:6e:13:06:5e:54:b2:d7:
         12:0a:34:d8:8b:97:91:20:8e:7b:e1:f9:19:8b:01:29:64:58:
         6d:f6:df:87:1d:fc:95:fd:10:ff:e9:a7:04:f6:9c:a6:88:bc:
         8e:21:3e:9b:30:7b:e5:9f:fb:a0:3b:1d:0a:3e:4f:6a:da:ca:
         62:93:fd:9c:a1:42:45:ab:a0:5d:7c:7a:e5:5b:b4:51:b3:67:
         c1:de:fd:3e:b9:c2:38:6a:ba:6c:97:70:ff:1d:f0:35:96:32:
         3d:a0:ae:5a:4f:47:33:3f:31:44:6d:3c:1b:e1:cc:c3:3b:c3:
         cc:c6:37:44:c9:bd:f0:12:09:ab:dd:1d:be:65:ca:3a:f9:ea:
         88:7e:b2:b1:a4:36:6e:dc:a8:13:aa:d6:52:91:ad:30:f5:dc:
         76:93:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:38:12 2024 by rpki-client on console-fra.rpki-client.org