Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File:                     1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier:          XTDFBShSPKOaBmttFX2ow0ktiRNXZGn6DPmzUhUSf3Q=
Subject key identifier:   68:5D:6B:47:21:58:55:64:B1:0F:99:EA:EB:64:52:D3:E7:63:0C:DD
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer:       /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial:       01901DEC2B71DFC63394FCB814C6BCEA5729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number:          0EFA
Signing time:             Sat 15 Jun 2024 22:02:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:15 +0000
Files and hashes:         1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: +jK3lr60+p6ChAxYSEde8h8UjlzjEeB+FHRKfkoRKgw=)
                          2: VhsMf35uUi3sCJKu5-_t52Wytio.roa (hash: p9DZVCr3CHr89mXOMxDZh2CeMcGSI7dlcExCRdyUmN8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:2b:71:df:c6:33:94:fc:b8:14:c6:bc:ea:57:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
        Validity
            Not Before: Jun 15 22:02:15 2024 GMT
            Not After : Jun 16 22:02:15 2024 GMT
        Subject: CN=685d6b4721585564b10f99eaeb6452d3e7630cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:6c:18:50:be:8c:b2:cd:88:28:62:da:40:
                    49:a2:10:82:74:dd:a5:d8:9a:2c:f3:30:58:19:28:
                    ea:7b:ad:07:24:f7:c0:31:84:0c:8a:71:89:15:12:
                    d2:5a:24:10:e5:22:77:67:ef:76:23:e1:15:6f:21:
                    bc:05:1b:d2:99:f5:ac:4f:8a:2d:fa:c5:cc:81:ea:
                    de:df:02:0f:7c:61:01:51:6e:4b:a6:c4:65:79:4a:
                    9c:85:5b:cb:20:32:0a:44:51:eb:57:9c:4a:db:7c:
                    d6:a1:b7:02:4e:f9:3a:be:3d:33:fb:af:b4:79:72:
                    84:55:5a:25:e2:4c:2f:a2:d8:e7:7d:f2:37:5c:96:
                    0a:c2:6a:c4:c8:04:e2:75:76:e7:e3:b6:bf:27:b1:
                    71:1b:18:b8:cb:f3:41:85:e5:50:45:91:9a:d7:46:
                    2c:d4:3f:48:cb:f7:ca:43:0e:f4:c6:1c:cc:76:62:
                    73:3d:8d:d6:e4:62:5a:fa:ec:7b:86:ac:9c:52:09:
                    71:27:4c:57:ac:f7:2f:08:f0:16:a6:ab:04:66:74:
                    1a:b1:52:26:4d:11:6e:3b:f2:78:0b:c3:b3:27:dc:
                    8f:33:89:5e:47:69:a1:9d:7a:ae:fb:00:75:1e:2b:
                    c1:4a:4f:7a:8e:48:9f:52:aa:55:1e:1d:68:6c:92:
                    27:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5D:6B:47:21:58:55:64:B1:0F:99:EA:EB:64:52:D3:E7:63:0C:DD
            X509v3 Authority Key Identifier:
                keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:21:4c:83:15:31:f6:4d:60:57:3b:84:1d:61:d2:f1:ef:51:
         19:11:50:9a:56:d6:bb:98:07:34:08:ea:1c:f7:f5:0b:03:0c:
         88:98:12:ed:18:5b:33:6d:1d:01:94:b1:f8:6c:54:6e:fb:6f:
         68:2c:7d:11:3c:4a:4b:89:8b:5b:f4:f1:3f:2f:74:43:79:7a:
         96:b1:55:9c:11:25:fc:36:b6:29:31:1f:18:22:86:31:81:e9:
         ce:25:26:01:ec:2f:4e:dc:6f:54:99:d0:89:b8:4c:cf:f5:c1:
         81:3e:e9:21:f3:6c:96:9d:4b:97:8c:f4:a2:c3:28:87:94:df:
         2a:1f:46:21:f9:66:17:d1:58:46:9a:3f:69:69:dc:0f:54:2b:
         96:4d:8e:90:95:35:fd:f8:e4:85:19:63:8c:89:08:08:b4:00:
         60:69:b3:19:c9:fa:c0:e8:7d:d5:dd:9d:c0:24:16:93:84:5a:
         fd:46:49:b9:93:05:4d:b2:d0:fc:de:1f:60:4b:83:42:8e:7a:
         5d:23:ea:75:2d:54:b0:fc:3e:2d:bf:0c:25:59:60:8c:b5:e3:
         26:f8:e3:cd:3d:a6:9c:b0:1d:0c:f1:d5:0f:e1:cc:64:d0:57:
         e4:05:61:65:f5:44:fc:33:16:97:65:a3:62:43:64:74:d8:2d:
         ce:96:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:49:12 2024 by rpki-client on console-ams.rpki-client.org