Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File:                     1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier:          2UvT9GmB1RNisalZcYOnjP31G565/ClydQykeHN8ibM=
Subject key identifier:   C7:5B:B0:B6:A2:12:13:5A:03:15:0C:FD:C9:14:57:88:43:A0:7D:7B
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer:       /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial:       01901DEBA38E3430855E9DE596B3B06C5A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:01:40 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:40 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:40 +0000
Files and hashes:         1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: CjX8JzZImEHCPUAdNUehePzSfLp9/pdH+rv00BsCBIk=)
                          2: u62AZGUttyiT453W6KEPJY03s1U.roa (hash: MpK4Ad2PwCKoGin1TR79fiuQVcurHe4dxamUO9oecI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:a3:8e:34:30:85:5e:9d:e5:96:b3:b0:6c:5a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
        Validity
            Not Before: Jun 15 22:01:40 2024 GMT
            Not After : Jun 16 22:01:40 2024 GMT
        Subject: CN=c75bb0b6a212135a03150cfdc914578843a07d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:97:c5:77:38:4e:da:f4:07:74:fa:32:da:
                    50:78:42:e2:c4:81:de:ae:1e:19:51:d8:e3:ab:1e:
                    7f:c6:e8:99:58:d0:8d:59:51:4f:f8:fc:3c:cb:c6:
                    c2:21:78:68:5a:f5:55:97:4d:e9:b1:ff:21:f6:94:
                    dc:1e:45:6e:63:60:b7:fe:68:cb:86:42:7b:4e:dd:
                    e0:71:0a:c4:8f:11:69:f2:71:14:5b:a1:28:fb:7e:
                    7e:e5:d1:d8:84:10:b2:67:d2:00:16:01:55:d1:74:
                    6c:57:d2:f6:22:79:0c:b2:bb:28:5f:7e:7d:46:a7:
                    9c:f5:c8:cc:a5:d5:18:04:12:4d:a5:90:44:63:8e:
                    e0:49:88:d2:3a:5f:c7:10:76:ca:20:0b:a9:79:75:
                    b8:cd:a7:b2:71:9d:14:f3:00:e9:4c:6c:39:ef:c6:
                    9a:06:ec:dd:cb:50:87:72:0d:db:35:38:98:0f:fd:
                    64:80:cc:45:8c:48:15:05:f1:66:22:48:57:c8:f0:
                    65:2e:43:a4:0b:fa:57:e4:46:c5:89:ff:bd:29:01:
                    68:fc:39:04:0a:5f:04:9f:d6:43:89:b9:2a:5c:aa:
                    de:30:29:08:a3:a9:5b:40:38:39:38:fd:e1:41:92:
                    ed:c3:8c:2d:ac:9d:d6:c8:d4:51:b3:46:14:fe:71:
                    2c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5B:B0:B6:A2:12:13:5A:03:15:0C:FD:C9:14:57:88:43:A0:7D:7B
            X509v3 Authority Key Identifier:
                keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:86:ad:e9:3f:47:e0:5a:52:09:2e:ca:34:a8:5c:a9:89:14:
         fd:01:43:01:c0:df:d5:f9:45:fb:39:57:79:04:f6:0e:9f:44:
         4f:1a:71:05:d6:d1:d7:12:55:71:72:b5:e8:5c:40:5b:ff:ed:
         18:cf:4b:f9:34:56:00:d1:78:80:9b:d1:0b:c7:97:67:23:9f:
         c9:46:c3:90:4e:e6:d2:03:56:91:33:50:90:04:1b:9d:59:10:
         78:45:8a:e4:c7:7c:57:b5:85:bc:f4:47:51:bf:7c:27:cc:c6:
         9d:b1:25:bb:54:78:51:06:bc:3a:cd:34:03:79:79:d5:89:d2:
         52:c2:57:89:7f:ae:55:2b:11:65:6f:1d:b1:5a:c6:82:a1:22:
         65:56:32:4e:48:63:31:6c:f6:77:4d:61:8c:4d:33:5e:2a:ac:
         6f:c8:e4:9c:df:9c:59:52:31:a4:44:8b:e1:39:2e:8a:e8:af:
         5a:ac:7a:bb:7b:9c:8d:dd:53:5b:42:c4:c1:fa:51:8a:5d:55:
         1a:ef:40:84:f9:15:c1:27:8f:aa:f1:0c:b3:01:d5:38:c9:9c:
         d7:17:97:ca:3b:12:99:fa:60:35:4e:1d:47:6b:63:fb:dd:03:
         df:d0:fc:0c:ea:cd:10:28:52:35:56:8c:75:c1:19:96:41:93:
         38:dc:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:00:09 2024 by rpki-client on console-fra.rpki-client.org