Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File:                     9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier:          NuUwGkDeYIK34X4PGseCKwDNIqAePpmmgJ26Rb+yAio=
Subject key identifier:   7A:65:78:5F:57:B4:E6:D0:D5:51:2E:6B:DF:54:58:9D:97:50:CA:AE
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer:       /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial:       01901DED168147CDD6D0D75FD1FD6136273B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:03:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:15 +0000
Files and hashes:         1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: UybXBICtRKqvIZj18Gv7T3X5cK41jASbt9i2dsDItiA=)
                          2: DW-sNsxiSt8lM4KAsW6zUSPb3NE.roa (hash: kCnpoNoow0kmKozG9npxkX0PtVhVcYT9/iUm8KF3UN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:16:81:47:cd:d6:d0:d7:5f:d1:fd:61:36:27:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
        Validity
            Not Before: Jun 15 22:03:15 2024 GMT
            Not After : Jun 16 22:03:15 2024 GMT
        Subject: CN=7a65785f57b4e6d0d5512e6bdf54589d9750caae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:72:5a:c5:11:41:53:e8:7d:75:83:d1:0a:
                    4e:c4:82:56:63:9c:c9:16:ac:78:36:2f:15:a7:5a:
                    4c:4e:40:80:e8:7d:a8:b5:78:0b:40:1c:30:a0:76:
                    87:01:35:c3:4d:4b:c6:7d:ee:63:83:cd:b1:90:8d:
                    ee:e6:82:a9:25:99:87:28:7f:e0:9d:bb:10:ff:02:
                    71:34:4c:80:b0:79:2e:5f:dc:86:54:ff:d1:60:55:
                    b1:8f:c3:12:d2:69:79:41:d1:e9:18:26:55:9a:54:
                    ef:84:ff:7c:85:c0:e3:67:40:4a:7c:83:84:91:b1:
                    4f:9c:9a:f2:7b:10:35:30:b1:45:43:4e:19:ef:f9:
                    2c:d2:50:24:08:70:be:56:bc:50:92:e7:07:9a:c3:
                    af:3a:cf:a4:6f:48:0c:33:ec:be:fd:4f:8a:22:33:
                    51:04:78:02:39:1b:3b:9e:c7:47:be:14:db:8a:79:
                    f7:f4:4f:f8:7a:b5:6c:cb:58:b6:d3:aa:17:b3:4d:
                    df:aa:d5:d3:77:7e:39:d5:82:e7:cd:df:82:45:18:
                    78:ac:e0:27:50:75:3a:bc:11:55:7d:c9:09:97:b7:
                    91:7c:2f:cd:1d:8d:6f:de:d7:ee:b1:71:38:a5:31:
                    ea:10:a9:9e:3e:e9:9e:f3:25:52:57:05:a1:c2:6f:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:65:78:5F:57:B4:E6:D0:D5:51:2E:6B:DF:54:58:9D:97:50:CA:AE
            X509v3 Authority Key Identifier:
                keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:23:41:30:60:ee:58:5c:6d:76:83:e5:b5:80:e4:06:ea:ef:
         93:58:75:2f:1d:59:b3:61:37:ac:cb:7e:2d:df:10:03:7e:02:
         d4:f1:f0:49:ad:f3:82:fb:14:a0:2e:90:95:36:65:d4:3d:d2:
         cb:af:49:89:ee:ec:b6:9f:8c:da:de:9a:51:2d:e8:6c:19:e6:
         51:33:9e:de:1d:44:4d:6e:09:88:69:e1:f2:f2:9b:20:8d:9b:
         5a:ef:10:d4:76:2d:20:a3:cc:58:bc:18:d3:93:35:37:c1:49:
         a0:d6:01:3e:78:63:f9:93:17:8d:d2:46:35:11:34:c5:ae:d6:
         68:24:d3:06:94:31:28:91:6f:58:a6:0a:ab:1f:b4:0a:ca:46:
         6d:2e:6d:67:4f:05:d3:5b:3b:d7:0e:02:02:83:d1:e4:3e:74:
         90:68:a9:d8:9f:c4:d9:1c:3f:63:07:64:32:e4:3e:bd:29:bb:
         9a:c2:64:f0:f0:66:f3:51:09:ff:77:18:41:e7:d8:8f:03:06:
         f7:fd:42:23:05:3b:02:2a:43:13:10:bf:73:c1:85:d2:bb:e3:
         4f:05:d7:48:5d:ba:62:af:16:28:9e:d8:6a:b6:dd:b6:15:df:
         44:02:fd:81:bf:57:79:d4:bb:cc:49:be:9c:a9:fb:02:b5:68:
         83:b0:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:24 2024 by rpki-client on console-fra.rpki-client.org