Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File:                     1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier:          +KJuktwF02iECMeSvUVffmeiA5OCmJmm703myKFg7oE=
Subject key identifier:   59:D6:68:F0:1E:F1:38:5C:42:1C:C1:8B:4D:CB:DF:00:03:0B:06:97
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer:       /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial:       019040AFAFEBCC9615663C4B05F11C008EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number:          0624
Signing time:             Sat 22 Jun 2024 16:02:53 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:53 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:53 +0000
Files and hashes:         1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: UrxwM//NZmM5SwjDuGCz8jFxiA3uHRa/qxM/UHIZSck=)
                          2: mUNv0hl25ZIf4AQG4qsVR-CTUrM.roa (hash: hTf4kmCY56l4sV3lLOa8Fqsg/JGmVwlvV5YGnABxGaA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:af:eb:cc:96:15:66:3c:4b:05:f1:1c:00:8e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
        Validity
            Not Before: Jun 22 16:02:53 2024 GMT
            Not After : Jun 23 16:02:53 2024 GMT
        Subject: CN=59d668f01ef1385c421cc18b4dcbdf00030b0697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:c9:67:3b:a0:44:ca:45:c1:01:f6:10:d2:
                    11:bc:8a:25:93:82:c9:40:e3:b5:da:4b:7d:88:84:
                    b6:68:6a:8d:91:17:14:e6:d1:ae:ae:49:45:c5:00:
                    35:d7:c3:5c:10:b8:fe:29:3b:4b:72:c2:e0:7f:6a:
                    78:fc:8f:17:11:c0:68:6d:b6:d4:d2:59:ed:63:fe:
                    46:da:5f:10:83:f3:a9:b9:ea:b9:d1:b9:ae:39:15:
                    a9:4f:71:c5:57:65:49:62:61:c0:2b:dc:c7:ba:ff:
                    68:77:47:06:e5:61:37:3b:26:7c:a1:69:ce:82:cd:
                    ab:7c:22:bc:2c:02:9f:55:b3:c5:87:bb:59:53:08:
                    1e:9f:fb:71:9b:e7:d0:be:7f:72:11:90:b8:44:29:
                    3a:8e:f1:93:c6:cc:66:08:7d:53:92:51:7c:9f:14:
                    dc:8e:36:3f:97:02:9e:5b:fc:9a:df:27:83:22:14:
                    0b:50:15:fc:df:d4:c4:1c:12:f5:5a:25:18:a9:2d:
                    e7:9c:67:51:bc:69:e6:e1:72:c8:c1:92:17:1d:cb:
                    a1:98:79:f5:0e:5f:eb:7b:fe:9b:3f:83:75:e9:42:
                    e4:92:fa:33:cf:e3:15:ea:4e:5d:f6:55:61:32:d6:
                    cc:82:92:9c:0a:b7:aa:2f:03:09:4b:a7:be:d2:c3:
                    47:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D6:68:F0:1E:F1:38:5C:42:1C:C1:8B:4D:CB:DF:00:03:0B:06:97
            X509v3 Authority Key Identifier:
                keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5d:fc:94:5e:25:3a:4a:8b:d6:6d:ea:42:f0:d0:70:7a:1f:
         c5:39:b0:c4:c1:27:fb:d8:e5:e6:e7:e8:6c:52:f9:f6:0b:15:
         ff:65:d7:8d:8f:80:85:5a:5c:59:37:55:26:71:14:41:8f:f8:
         45:e8:14:84:f9:47:81:1d:3b:6f:6b:47:ca:bf:43:56:14:5d:
         66:57:15:c7:be:44:6e:8d:8f:dd:c0:ed:34:6a:37:61:80:0c:
         fd:a3:32:e4:6e:4a:8f:64:3a:07:98:42:30:21:81:cc:ee:fa:
         74:e0:f7:b1:4b:ed:59:a7:c4:3f:08:90:45:17:fc:87:c2:6e:
         be:6f:98:b7:b2:de:e7:52:ad:0c:fd:05:b8:c6:ef:31:5a:cb:
         63:06:1a:87:62:bc:71:36:c7:c2:ec:73:ad:c3:eb:17:09:0f:
         56:cc:c3:e7:a5:fa:4b:3a:9f:f5:f3:02:0d:11:46:f2:9b:60:
         12:85:ff:b5:f2:7d:64:7e:59:94:fb:81:38:92:6d:52:45:8e:
         6b:8f:ec:20:4f:07:f3:cf:03:27:8b:73:5d:b6:24:9b:ad:ab:
         02:1c:56:11:9d:39:df:ee:08:2a:2f:dd:32:6c:42:aa:49:cf:
         31:a5:1e:95:eb:25:92:42:2a:c4:df:b1:24:31:d1:a4:b6:b7:
         95:e2:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:38:23 2024 by rpki-client on console-fra.rpki-client.org