Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File:                     cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier:          l8Pj5vFMsJ0tjwaN+Hw/8v/89sDsd4mbqvY4vlF6d48=
Subject key identifier:   8F:4C:D1:66:E5:EF:73:E3:75:91:EB:8F:55:C7:CA:09:8F:7B:6B:B0
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer:       /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial:       01901E901417219E66923E473952A39F2DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number:          0EAD
Signing time:             Sun 16 Jun 2024 01:01:17 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:17 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:17 +0000
Files and hashes:         1: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: ie1DQc/Ha/U6IUAwyeII4zNhXQ/sr758q545yo5k6z8=)
                          2: n0CF4jGp_EDVKypL-rKRctlE3N0.roa (hash: /jDucvsuuw4NXWRnqiJy3miUoLsC4CwFNrDqWNZSBO0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:14:17:21:9e:66:92:3e:47:39:52:a3:9f:2d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
        Validity
            Not Before: Jun 16 01:01:17 2024 GMT
            Not After : Jun 17 01:01:17 2024 GMT
        Subject: CN=8f4cd166e5ef73e37591eb8f55c7ca098f7b6bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:91:b8:d2:db:23:90:2e:c3:25:7d:68:9a:
                    6d:6c:b4:37:62:b3:52:d1:f9:1d:c2:d3:ef:ff:62:
                    23:75:00:61:ed:58:40:40:82:e1:7d:e7:09:a8:a7:
                    c5:21:ea:21:7f:84:1e:66:b0:3f:2f:d3:e9:ba:60:
                    e0:a3:9b:12:51:48:35:aa:21:17:2f:e8:6d:ad:44:
                    a4:1e:37:2d:8a:91:f4:20:57:54:1b:f9:1b:e1:85:
                    b7:f8:20:4a:b7:cb:e6:18:b8:42:2a:3c:9a:30:e8:
                    06:61:db:94:e3:0e:02:71:aa:c6:d6:23:93:28:f2:
                    69:51:46:f3:5f:19:c4:3b:db:ed:26:96:3d:e4:77:
                    81:c4:4b:b9:61:65:33:10:c7:d3:29:07:0b:f3:73:
                    46:6a:b6:6c:6c:de:b7:2b:b3:f0:ec:21:ad:15:d1:
                    bf:61:92:cd:5e:c6:93:bb:9e:48:e1:87:40:19:ba:
                    d2:c6:62:69:8d:c3:82:99:8e:b1:68:3e:db:e6:e7:
                    fd:f0:57:50:65:be:0d:9e:3f:46:30:0a:28:2c:4d:
                    e4:7c:25:3b:1f:5a:ba:0f:f3:87:95:1b:bf:3d:ba:
                    08:1a:bf:96:79:7d:17:45:29:c7:1a:cc:f8:6c:b9:
                    b7:bd:01:29:ab:dc:45:03:3d:3a:56:13:2d:98:71:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4C:D1:66:E5:EF:73:E3:75:91:EB:8F:55:C7:CA:09:8F:7B:6B:B0
            X509v3 Authority Key Identifier:
                keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:57:ec:a4:78:c3:61:76:ac:0b:e5:b9:a7:5e:43:2e:c2:a6:
         de:24:94:11:10:9c:78:bb:d3:0a:fe:1c:03:81:1e:6c:95:32:
         5f:70:a4:c7:0c:d5:02:da:c4:62:a9:2c:10:ad:51:41:95:89:
         42:8e:45:c7:f9:7f:0a:a0:3e:23:d9:e1:c7:c5:37:ed:f1:93:
         aa:4d:39:f1:84:a4:34:2c:25:b9:ac:35:c6:aa:a2:da:0f:db:
         be:69:f0:c2:e4:66:c0:d6:ee:22:fc:23:cf:36:38:db:d3:87:
         6e:c1:20:54:30:57:37:2c:02:11:e2:f7:c0:59:0e:ca:02:e2:
         41:b4:7a:7e:bd:56:03:52:78:b3:7f:db:57:f1:56:6c:20:d1:
         ea:be:88:ef:c9:7d:f6:eb:5b:ae:81:95:2b:93:c4:05:c4:17:
         e5:0d:20:4e:f8:88:a8:85:10:60:ac:35:de:a1:d7:9b:2e:da:
         ac:56:1e:3e:3d:0d:8c:90:8c:fa:09:4a:9e:60:38:82:65:36:
         c2:34:fb:92:7e:86:a4:83:d5:95:52:58:d2:41:33:f0:c3:38:
         c2:85:fa:ca:32:c0:8a:f7:5b:1f:d4:3e:89:11:fd:21:ef:63:
         1e:6b:f0:5a:09:4b:7f:f6:13:6d:47:2f:76:d7:b0:07:73:61:
         2d:ae:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:00:23 2024 by rpki-client on console-ams.rpki-client.org