Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
File:                     _-vVS_BapQ7OnFJtDNVd5ivbEfs.mft (raw, json)
Hash identifier:          Z4+glM6N/cOxMEkqJch54rfEzvca1RrqXitRmakSouU=
Subject key identifier:   F3:43:59:BA:50:66:26:BA:56:0A:40:E5:50:66:3A:FD:52:69:EB:60
Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Certificate issuer:       /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Certificate serial:       01901CA1199626977A8514D991324F8E616C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 16:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:38 +0000
Files and hashes:         1: 14pfV4nKv4Bma3_1Jh3J9_t-eJc.roa (hash: OXDphgmvfOQt5XyN/bTDy6A8yIHIcXuPWelWCLl95hU=)
                          2: _-vVS_BapQ7OnFJtDNVd5ivbEfs.crl (hash: M8DJuRVbF1CjAqCGpDH1uFj+pZt/uUDl5JxmouZWvww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:19:96:26:97:7a:85:14:d9:91:32:4f:8e:61:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
        Validity
            Not Before: Jun 15 16:00:38 2024 GMT
            Not After : Jun 16 16:00:38 2024 GMT
        Subject: CN=f34359ba506626ba560a40e550663afd5269eb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:9b:54:ae:d6:a8:f7:7f:61:2f:0e:9f:ae:
                    1b:a6:6a:fa:38:71:fb:fa:df:e9:1d:28:90:0a:91:
                    98:7c:92:92:8b:c7:02:fb:5c:00:35:30:17:25:25:
                    e1:29:20:c7:cf:ee:1c:b2:b0:62:ca:e2:e5:a7:ac:
                    c4:28:83:2b:0a:2b:64:91:00:43:0d:8b:3d:dc:ed:
                    4e:10:e8:d1:cc:97:e2:5d:da:6d:ef:ee:2e:ab:15:
                    e2:5a:25:d9:61:1b:03:46:4a:0c:e5:6d:b3:e7:f2:
                    c9:c3:50:b1:f6:52:08:7c:dc:9f:3c:1e:75:7f:63:
                    20:f7:5d:a6:1c:a9:21:f7:20:f8:e7:a6:12:11:d7:
                    9c:0c:4c:84:b9:8a:06:55:fd:fc:c4:5a:6b:69:35:
                    88:3e:41:80:fa:cf:d8:94:47:5b:cc:5c:94:b6:20:
                    e8:e3:ea:b1:b9:bd:b8:c2:d2:e9:48:7c:cf:f6:3c:
                    0f:bd:a9:78:09:d3:b1:82:68:8c:66:be:66:ad:01:
                    4f:0b:62:6f:df:3f:ff:a3:9f:53:d8:a0:f6:72:63:
                    0b:17:00:75:fa:9f:d2:0d:c7:4d:52:61:78:49:ae:
                    ce:70:b0:2f:16:2a:2e:ea:e7:b0:54:4d:77:2b:e9:
                    c2:12:33:ad:87:af:a1:af:c0:96:80:0b:7e:93:f0:
                    24:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:43:59:BA:50:66:26:BA:56:0A:40:E5:50:66:3A:FD:52:69:EB:60
            X509v3 Authority Key Identifier:
                keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bf:ee:70:0f:11:e8:fb:7f:e3:ad:a0:a2:6e:a8:64:6d:fa:
         ac:b8:74:6d:6e:27:87:86:40:7e:d2:db:84:43:48:64:9f:2b:
         b4:a9:e1:5c:51:84:f6:f3:00:34:23:0a:97:52:41:da:e7:18:
         86:f9:2c:a2:73:54:8b:5c:65:cd:8f:eb:e9:b6:85:5c:ff:48:
         b7:02:22:8d:8a:f3:55:40:99:1a:a2:57:4b:dd:60:b5:44:31:
         be:fe:c7:64:82:b0:9b:d4:d4:ff:12:8d:42:3d:be:c7:b2:ec:
         b4:20:2d:5b:ce:6c:dc:ff:7c:da:98:d7:f0:e8:14:f8:5c:ac:
         83:94:b2:92:7f:a9:49:77:a9:7a:50:3b:99:bc:3a:b5:7e:5e:
         bb:4f:60:01:f6:b7:f7:a3:75:fd:99:9a:59:78:53:91:b1:53:
         6f:d2:db:26:58:06:9b:58:34:0b:6c:e5:59:1b:38:6d:d5:0b:
         21:2d:6a:96:3a:9a:a2:2c:75:1b:3e:8d:c2:24:b6:20:ad:9b:
         a6:62:ce:1a:63:4f:8e:9f:d6:df:26:68:6a:d8:21:93:ef:f6:
         f3:8d:38:67:fd:cf:ac:74:6c:4f:4c:e7:f5:02:03:79:11:a8:
         15:64:75:40:1b:a0:15:1b:c5:04:f4:44:e0:79:8f:2f:bd:58:
         a6:82:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:32:02 2024 by rpki-client on console-fra.rpki-client.org