Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File:                     0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier:          zWzAzlW8diJ/ejLQLY8tuszCOrzKQWYYcUDHotPOJWo=
Subject key identifier:   A9:8F:ED:9E:9E:27:6E:6E:25:5B:79:62:FE:F7:32:56:D8:A2:42:48
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer:       /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial:       019041F7C296CE094DDF43EB7F1EC8D11266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number:          11D8
Signing time:             Sat 22 Jun 2024 22:01:14 +0000
Manifest this update:     Sat 22 Jun 2024 22:01:14 +0000
Manifest next update:     Sun 23 Jun 2024 22:01:14 +0000
Files and hashes:         1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: tiBCOTRFECgpV2ywGZ+s41SxTjHB5IQI27MCI051odo=)
                          2: Ig1U1cx4K916YgmXoC4foCu5tJQ.roa (hash: mgvN7mOcG2At5lYJpQPWZIQ/gjD+9JHYwxIswtR5Kzc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 15:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:c2:96:ce:09:4d:df:43:eb:7f:1e:c8:d1:12:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
        Validity
            Not Before: Jun 22 22:01:14 2024 GMT
            Not After : Jun 23 22:01:14 2024 GMT
        Subject: CN=a98fed9e9e276e6e255b7962fef73256d8a24248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:6d:20:c2:59:ec:d9:dc:ca:91:c9:2e:3f:
                    96:a6:1b:b5:1a:c6:fd:e9:74:ff:7d:1a:9a:9f:6e:
                    b5:ba:79:3c:5b:a6:28:95:f3:3c:a0:fc:6a:dc:ee:
                    cc:57:61:e7:b2:64:2f:13:fc:49:28:32:45:c4:74:
                    b8:f4:24:47:85:20:e7:4b:0e:85:37:40:be:4d:30:
                    a4:c4:b3:7e:38:1b:2a:09:64:21:16:13:c7:c1:7c:
                    13:0d:bb:c2:4b:bc:de:44:93:68:18:e7:a8:db:4e:
                    05:de:c6:4a:e0:7b:60:b4:84:fe:7d:09:17:dc:9e:
                    32:ea:a3:51:a2:16:ec:c3:42:e2:79:b3:1d:45:a2:
                    c3:41:71:12:a4:e2:90:72:bc:46:5e:f8:a5:b0:a3:
                    4c:c6:ac:45:d9:b3:e4:2f:31:fa:2c:24:3d:17:b6:
                    e1:69:45:a2:68:92:b1:a3:2c:66:13:a5:e4:79:e5:
                    18:ba:f7:ad:7f:23:92:6c:ec:8a:1a:63:74:9d:22:
                    28:78:1a:06:5e:e7:60:4c:ef:e9:1a:21:4e:5e:99:
                    f0:47:64:88:63:b7:2b:25:fa:26:5f:9b:24:f8:22:
                    0b:53:bb:19:4d:90:54:9c:d4:1d:20:3f:84:d0:b4:
                    9f:0a:45:2d:26:c0:46:82:97:11:a7:f5:eb:df:e9:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8F:ED:9E:9E:27:6E:6E:25:5B:79:62:FE:F7:32:56:D8:A2:42:48
            X509v3 Authority Key Identifier:
                keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:47:00:0b:54:e0:a3:a2:79:96:bb:1d:d5:12:aa:d3:96:5b:
         8f:a2:a4:c9:e3:df:28:84:c1:08:f6:fd:f8:49:b9:23:4c:8d:
         3a:f5:9f:d9:46:8c:73:70:25:b1:58:37:85:41:33:0d:48:b5:
         84:45:e3:cb:7a:1e:ad:88:44:b3:6f:97:ba:a6:b4:10:8e:c9:
         ba:d7:d2:a0:8b:d9:05:1f:62:95:69:8b:f9:df:0d:c9:50:7a:
         11:eb:7a:9c:dd:01:46:13:a0:2d:3f:ec:52:20:4e:aa:85:bd:
         3f:de:17:b2:e7:c5:ef:58:66:ea:81:78:99:8e:e4:44:35:fd:
         a2:ea:65:7b:d0:3e:5f:93:2a:66:98:b0:28:c6:d1:a7:4d:54:
         c3:14:5c:90:05:ba:ab:94:ec:6e:83:59:81:53:91:6c:a6:58:
         5d:5d:ea:80:b7:ee:58:69:f9:63:96:6d:8d:3b:fe:5c:e6:1d:
         e6:fb:ad:6e:29:5d:1a:84:95:31:d3:4f:41:37:dc:f5:bc:ac:
         23:22:ef:5d:e1:0a:9a:c8:1e:30:45:05:ae:c5:5c:a9:c7:bc:
         a8:38:7e:43:be:45:cb:51:5d:45:1f:ba:11:01:6b:3a:bd:0e:
         da:dc:81:96:7e:16:af:e0:b8:b6:37:e8:9b:0d:6f:e7:71:78:
         36:b8:5f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 23:11:47 2024 by rpki-client on console-ams.rpki-client.org