Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File:                     1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier:          cMbrz66fhGNyvFY4lVVzhcQbmM5TpTVsabdJBRylDEA=
Subject key identifier:   65:D9:9C:0C:8A:FC:61:F7:46:CF:9D:C2:23:43:31:A5:29:AB:4A:39
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer:       /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial:       01901DEC9C9F40EBFF9C3D1793020C336327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number:          0612
Signing time:             Sat 15 Jun 2024 22:02:43 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:43 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:43 +0000
Files and hashes:         1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: yhBPX4MzVO5ZlvT8bQ5MJXLCvi38q9Pk3An60/QvzaU=)
                          2: mUNv0hl25ZIf4AQG4qsVR-CTUrM.roa (hash: hTf4kmCY56l4sV3lLOa8Fqsg/JGmVwlvV5YGnABxGaA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:9c:9f:40:eb:ff:9c:3d:17:93:02:0c:33:63:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
        Validity
            Not Before: Jun 15 22:02:43 2024 GMT
            Not After : Jun 16 22:02:43 2024 GMT
        Subject: CN=65d99c0c8afc61f746cf9dc2234331a529ab4a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:ff:e8:b3:31:87:af:ca:03:5a:aa:2a:8f:
                    d9:ad:52:65:06:11:48:58:20:28:94:c5:c0:2b:66:
                    aa:85:70:86:ed:e2:7b:58:6b:a0:98:e4:07:00:86:
                    ab:ae:a1:b0:99:eb:b9:19:18:c4:72:a2:fa:87:1c:
                    9c:60:c9:dc:33:27:69:da:cc:24:fc:a2:03:c2:ad:
                    2f:9b:28:50:b4:08:ac:68:bd:43:b5:65:4b:85:77:
                    4c:7d:a7:04:c3:45:52:fe:0c:f3:35:f9:84:74:10:
                    3f:92:f6:f0:03:cd:c8:8a:07:1b:57:23:ee:59:71:
                    7e:f0:2f:e7:41:1b:64:b0:d8:d7:6f:12:4e:f5:ca:
                    70:1f:1f:55:8f:6d:ba:c5:45:ac:20:51:cc:f0:d9:
                    f6:82:83:0f:ea:15:75:0a:cf:f5:bb:00:d5:34:d3:
                    29:00:e4:6f:b9:ee:a1:94:fb:62:42:cc:0c:39:74:
                    4e:af:0c:3b:a3:19:1a:45:75:43:7d:39:c4:e1:82:
                    27:cc:99:3d:86:6f:78:36:8e:83:45:41:1b:a8:e2:
                    bf:16:f8:31:a5:b1:b8:11:f2:ed:65:86:3e:0e:1f:
                    b6:22:64:fa:fc:55:e9:bf:68:d0:cc:f0:f3:ae:45:
                    26:e0:cc:29:e8:0c:b6:64:a6:f0:94:de:42:18:92:
                    70:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D9:9C:0C:8A:FC:61:F7:46:CF:9D:C2:23:43:31:A5:29:AB:4A:39
            X509v3 Authority Key Identifier:
                keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:79:0f:33:2e:22:9e:6f:3e:8e:24:12:73:9b:66:64:6c:b0:
         7a:6c:0b:1c:d3:96:fd:7f:68:7f:d4:85:69:c8:8a:84:bd:b3:
         42:45:26:c5:39:93:7e:a6:31:96:b3:5c:86:00:65:bd:7d:ef:
         5b:db:04:75:bb:36:44:6f:a9:32:af:13:30:06:3b:52:39:b9:
         2c:18:bd:85:c5:59:31:31:15:e7:4c:97:e9:7d:f1:3c:89:00:
         66:c9:a3:1d:47:98:ad:4d:84:c7:df:ca:ea:74:1d:c8:d7:8d:
         61:b0:88:13:0c:e0:1a:2e:16:60:ac:a7:0b:3b:3d:f1:a7:0b:
         94:08:89:b6:cd:d2:60:77:92:74:55:76:48:c7:61:79:a0:bb:
         3a:f6:fd:ba:5c:6a:5b:55:3c:72:a7:a3:59:d3:65:74:70:29:
         a8:36:8a:8d:4d:32:b3:29:f9:6e:d4:de:b5:d2:95:b8:7a:68:
         44:1a:f6:c8:d9:f5:bd:34:60:da:62:bd:1b:16:cd:04:f8:5d:
         5e:7d:96:f5:1b:e9:ee:d8:06:a7:26:77:35:cb:4d:64:81:bb:
         18:71:cd:cd:82:59:b1:ba:f3:27:fd:49:94:f0:de:e3:dc:52:
         ba:d1:4a:6e:d6:b5:a3:16:4e:74:b9:aa:5f:31:c9:4d:bf:1a:
         26:3f:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:46:38 2024 by rpki-client on console-ams.rpki-client.org