Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File:                     md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier:          735jhmMrG60m07LJQqjuRyP97wXGNOtMENr63+O6LaE=
Subject key identifier:   A1:4E:0D:D4:E5:4B:E1:6A:F2:A0:BE:02:C7:8F:14:7E:BD:B3:40:09
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer:       /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial:       01901EC6BCEBC936D338A1248F61ACB24BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number:          0BB0
Signing time:             Sun 16 Jun 2024 02:00:59 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:59 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:59 +0000
Files and hashes:         1: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: EbIlfk0TmAUfFWbpyQE0/xnyeGFaBWHF2Q5xRrYfkVo=)
                          2: ogNQzi7HEBODKuqOdpA7kLwg4Ns.roa (hash: Dryouedj5k2fw1IGto73Bmz1rrsygej3wSiW3JRIXm4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:bc:eb:c9:36:d3:38:a1:24:8f:61:ac:b2:4b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
        Validity
            Not Before: Jun 16 02:00:59 2024 GMT
            Not After : Jun 17 02:00:59 2024 GMT
        Subject: CN=a14e0dd4e54be16af2a0be02c78f147ebdb34009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:55:35:0a:95:c0:1a:ff:3f:c6:e3:e4:a9:
                    0b:b2:02:4b:cb:10:20:9d:06:00:36:78:58:10:81:
                    52:0f:a3:94:07:80:03:ee:00:d6:e3:87:4f:d3:8c:
                    ef:eb:7d:a0:16:62:d2:48:b3:6c:96:c3:88:1e:7c:
                    79:a7:b1:62:76:82:c5:0f:71:9a:3a:cd:20:14:7c:
                    8d:26:c9:4c:28:e7:0d:24:00:dc:bc:26:1e:b9:e8:
                    4e:5e:96:de:c1:00:4a:39:8d:82:07:96:f5:9c:7f:
                    2b:e6:23:49:7f:7a:5a:22:17:33:36:91:df:5e:a1:
                    c8:07:5a:be:02:8d:f2:95:74:0a:1b:57:4d:7e:e3:
                    4c:09:56:59:eb:18:e3:c5:1f:4f:f9:ee:ab:67:93:
                    aa:78:25:2d:40:58:ea:93:3a:75:d7:f4:8e:b2:8b:
                    f4:d7:e0:43:72:41:43:86:5d:cf:fc:a2:43:a6:29:
                    14:5e:87:b9:1c:02:0d:12:3b:d1:39:0e:81:b0:9b:
                    dd:27:36:2f:88:5c:31:5e:1e:6b:cb:b0:e8:f9:a4:
                    a5:9e:31:b3:5e:88:0c:96:f2:3e:53:bb:a1:5e:31:
                    81:da:5b:95:f6:b9:97:99:74:f5:3c:b4:5a:81:bf:
                    83:6f:7e:7b:5d:f3:d2:05:a5:a9:e3:6d:54:bb:c2:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:0D:D4:E5:4B:E1:6A:F2:A0:BE:02:C7:8F:14:7E:BD:B3:40:09
            X509v3 Authority Key Identifier:
                keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:19:35:18:c6:e9:7c:6d:e5:f2:96:6f:0a:56:30:83:91:
         34:7f:56:97:e9:91:52:7d:6d:f8:f3:ba:dd:bd:1f:6a:cd:f8:
         2d:9c:cf:5a:02:8a:dd:a2:93:e0:5c:12:9b:92:a6:17:74:bb:
         81:f8:1e:97:d9:05:0f:04:3f:83:b4:00:5c:8c:f3:65:b2:db:
         e2:d1:b6:6a:45:97:2c:63:fd:77:a3:23:a9:d8:6b:05:cf:99:
         5d:4c:bd:61:df:d9:6a:06:9d:27:fa:df:26:fa:3f:c5:15:b8:
         79:72:8b:cf:41:2f:ff:d5:c6:36:fb:cb:38:d3:97:fd:9c:ac:
         1c:57:ec:11:63:9a:7c:a4:45:21:23:9f:e9:4e:40:df:27:5e:
         43:c5:d3:45:88:46:22:0b:d0:f9:80:f0:87:f5:59:b7:99:e5:
         88:8f:f0:49:26:7e:40:83:d4:62:ae:c9:e6:64:a5:67:68:c0:
         ea:ba:c6:8d:a6:34:3f:bc:b1:67:85:5b:40:77:5d:44:94:b7:
         fd:e1:1b:64:0d:fa:35:dc:e6:27:57:f2:80:8a:76:64:b3:92:
         5b:6b:8f:95:03:1c:7e:25:e9:5c:6d:97:d4:0b:b6:f5:0c:0d:
         ac:b9:9c:fa:d3:82:26:d8:54:ac:1c:66:cd:f4:8c:71:f1:d3:
         f3:6a:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:22 2024 by rpki-client on console-fra.rpki-client.org