Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File:                     24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier:          cGbYDVgwFmvRLcldhta+RMgEDe3OQYUn+m3tu9ZRvnI=
Subject key identifier:   4D:E7:D8:03:B9:24:E1:4D:45:1D:D7:CF:54:61:F8:31:25:3F:60:CD
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer:       /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial:       01901E8FD07841E603882D236B5AF47AAEC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number:          10F6
Signing time:             Sun 16 Jun 2024 01:00:59 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:59 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:59 +0000
Files and hashes:         1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: OD3qWebCDAMBYYv3JglxncfIIh98k7Pp5i/KCx39OYU=)
                          2: YISxUUryyHZuqglEJ03yYy1mNHo.roa (hash: N73wC0pkv+O5IjiCoDhnpvs29+1VpirEUVUcDUMmxX0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:d0:78:41:e6:03:88:2d:23:6b:5a:f4:7a:ae:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
        Validity
            Not Before: Jun 16 01:00:59 2024 GMT
            Not After : Jun 17 01:00:59 2024 GMT
        Subject: CN=4de7d803b924e14d451dd7cf5461f831253f60cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:3a:3f:77:06:fe:48:ce:ce:1e:eb:a4:0d:
                    d6:49:0a:86:56:1f:1c:47:9a:20:23:26:3f:d4:5c:
                    86:7e:c5:33:0f:37:09:84:6b:31:fc:64:6f:e0:96:
                    95:3f:d3:31:36:38:9f:b8:1f:e4:41:fa:55:9f:55:
                    b9:be:73:5a:31:c9:44:3f:7e:7c:dd:ff:e4:a5:1d:
                    23:26:ab:ce:09:53:e7:ff:e6:bc:cc:97:d4:09:b7:
                    ad:59:05:a0:d3:11:af:b6:39:e6:7a:ed:93:96:a4:
                    04:5b:ab:9b:64:74:e8:21:8a:e2:39:a4:89:ae:75:
                    57:ee:70:1a:90:9d:8e:96:85:db:a9:a5:65:e8:16:
                    e7:1a:cd:23:81:b5:95:c4:45:0b:68:da:39:96:9b:
                    56:ef:ad:3d:e9:21:5b:5c:19:6a:c3:69:ae:44:20:
                    08:d2:69:aa:bd:4d:54:c4:4c:6c:4f:38:43:74:fa:
                    b5:d7:d9:33:94:5e:12:43:3d:4a:2e:24:e1:b6:83:
                    d0:ef:c2:d3:43:1a:84:98:14:f2:a0:70:de:e4:75:
                    c6:e6:67:6a:ff:f5:71:6c:c3:f5:0d:2e:f1:68:ce:
                    93:1f:67:c5:2f:f0:4b:82:2a:91:9a:a5:48:d9:75:
                    9a:eb:da:d6:91:af:00:04:42:4a:3c:d3:e4:69:8a:
                    a7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E7:D8:03:B9:24:E1:4D:45:1D:D7:CF:54:61:F8:31:25:3F:60:CD
            X509v3 Authority Key Identifier:
                keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0c:fa:63:a4:3a:e0:5a:19:77:68:32:4a:e5:7f:5a:a7:04:
         5d:a2:c5:7c:39:82:76:58:b2:78:80:8c:f0:79:01:08:45:93:
         3a:6d:7f:cd:ae:d3:87:9c:75:8d:af:7e:fe:53:29:dd:29:12:
         d4:8b:16:e1:7b:79:84:00:2a:3e:11:f7:51:07:4c:51:71:fd:
         36:d1:e7:9c:2d:60:32:5b:fe:a6:e1:f8:67:1b:77:5c:c0:34:
         8f:c2:ae:fc:d7:da:d1:ea:a0:d5:8d:8f:5d:a9:0b:a9:cc:bd:
         b4:45:7f:f0:50:66:c0:38:bb:5a:b1:e7:e7:2d:42:1e:79:5a:
         5a:ec:1c:63:78:8b:55:28:43:84:cc:87:e4:55:80:2a:67:99:
         e9:da:2d:1c:9c:dc:6c:4f:1e:55:f2:0f:c8:83:11:df:a8:49:
         fe:40:07:c2:37:b7:91:38:4f:04:c0:ec:f3:1e:aa:04:2a:9f:
         9f:13:6a:23:98:38:69:ab:c7:69:47:7b:57:ef:ee:63:50:af:
         a6:50:cf:71:e9:00:54:0e:04:94:8d:1f:35:c6:27:2f:d6:f9:
         55:ed:3e:c4:3b:a7:ed:35:84:c5:18:be:61:f5:4b:a6:25:36:
         eb:db:b0:4b:26:45:5a:3a:6e:29:63:6b:ec:03:95:b2:06:99:
         59:eb:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:55:33 2024 by rpki-client on console-ams.rpki-client.org