Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File:                     1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier:          Yix5jA5o3dMW0rM4wH1MmHIGnvTARZFYNpDrx2k22wE=
Subject key identifier:   67:F5:78:8F:8B:54:4D:FB:29:B8:E0:7B:81:77:31:34:D8:E4:5A:53
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer:       /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial:       01901E8FFD04690ED18765069C9105757F91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 01:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:11 +0000
Files and hashes:         1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: Nrdnc3Cm5o4OAWsk2HAogzSh3ZchyehGm+y06j+8T2Y=)
                          2: guaC8z596maH8e8Oqzuf2LttI40.roa (hash: 5QnAD/B2mlGPlB71LsYaOS+AYnMyi4jcI5AhFvpi+lo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:fd:04:69:0e:d1:87:65:06:9c:91:05:75:7f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
        Validity
            Not Before: Jun 16 01:01:11 2024 GMT
            Not After : Jun 17 01:01:11 2024 GMT
        Subject: CN=67f5788f8b544dfb29b8e07b81773134d8e45a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:86:fc:c2:70:1d:54:66:19:1c:bb:27:a1:12:
                    fd:0a:51:c5:b0:2a:25:af:3e:94:86:13:0f:ee:af:
                    d8:c3:69:3c:65:59:85:30:31:76:c0:9c:2a:b4:20:
                    fd:ce:d7:5b:16:12:f6:a3:73:f2:ad:9c:9f:c2:4d:
                    66:5e:32:30:8c:be:97:18:0c:93:16:86:52:c7:55:
                    cb:f2:8b:70:1d:c1:14:f8:50:b3:fb:c9:8f:5a:e1:
                    1c:df:13:f5:b9:58:c0:f3:62:b0:59:af:5d:b9:96:
                    28:06:74:5e:9f:c3:d6:e7:44:33:0d:9d:50:59:1c:
                    48:94:cf:a3:2e:0c:f5:79:76:4d:6c:72:fe:c4:36:
                    d0:e4:37:39:fc:b9:f0:d5:45:90:87:2e:e6:f7:82:
                    7b:0e:a0:8f:0b:39:55:e6:8b:3d:ea:d9:4b:8f:a3:
                    50:92:1b:4e:f8:4f:00:23:ae:70:3f:30:5c:29:2d:
                    93:8f:3b:4d:fb:e8:84:39:85:21:2a:47:46:fa:f8:
                    0e:ce:f5:98:16:a3:56:62:8d:70:0b:6d:d3:d3:a8:
                    47:f5:c0:3b:81:4c:55:cb:e5:1a:fe:3d:f9:da:a1:
                    66:76:ba:92:af:ca:01:f2:36:46:f9:43:6d:fd:72:
                    d2:64:53:dd:87:ce:41:5d:11:dd:6d:a3:0d:b0:7c:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F5:78:8F:8B:54:4D:FB:29:B8:E0:7B:81:77:31:34:D8:E4:5A:53
            X509v3 Authority Key Identifier:
                keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7e:13:8f:78:71:36:46:b5:1f:c3:d4:0d:cc:54:06:50:2a:
         79:95:51:75:c2:0b:97:3c:01:03:77:a6:6d:8f:16:8c:51:db:
         18:16:c4:35:be:c1:52:8e:09:58:04:d1:8b:1a:b8:8a:0a:8c:
         af:e6:2a:10:28:95:0f:4a:70:62:bc:54:d4:f8:35:15:c7:7c:
         32:78:40:9c:5c:90:d8:0c:83:35:c7:ed:f2:66:0e:b1:e7:c7:
         04:26:10:a2:e0:47:b6:90:3a:08:d6:9e:c5:23:db:32:c3:71:
         61:ac:56:6b:4e:19:65:1c:f2:e4:e9:83:eb:a5:c3:4f:ff:49:
         84:24:e8:a8:26:b4:26:98:5b:d4:f9:b3:df:42:d9:f0:ad:38:
         64:44:00:e0:61:d2:1c:6d:35:f3:ee:eb:24:c3:29:29:93:0f:
         59:86:f0:46:24:53:8d:a4:f3:ae:06:40:32:db:20:22:b2:79:
         9c:41:f9:51:24:84:73:d4:6c:40:fc:36:ac:55:61:f3:88:c2:
         3c:38:ff:4f:b2:68:7a:d6:ba:60:b6:c9:25:94:10:92:b3:9d:
         b4:8f:35:f6:b8:8b:63:ae:e0:c8:95:cf:95:48:2d:a8:c9:c7:
         fa:cc:a5:51:06:64:30:27:c2:2a:e1:39:eb:7b:30:22:53:b9:
         8e:42:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:57:31 2024 by rpki-client on console-ams.rpki-client.org