Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File:                     2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier:          Ix59nilUZUF4UQyHfZ1SDCGumH9/R2L4hECp4WmTkzs=
Subject key identifier:   82:9A:C7:E2:21:82:E9:DC:8E:D6:25:5D:CC:8B:49:56:5A:E6:E2:6A
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer:       /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial:       01901DED22D8FFC0629CFCB66734FD125195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:03:18 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:18 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:18 +0000
Files and hashes:         1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: kAav/DbiLVwpU5QYrF/br5ioXzhN0ZkKBhl+qVcDB/w=)
                          2: 9VfyQlDrgjGEsT-Z2CH3JH9pjtI.roa (hash: DvOo9eNlNDON387S712OHAueL9jmcNYkIxRoD4AWUdY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:22:d8:ff:c0:62:9c:fc:b6:67:34:fd:12:51:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
        Validity
            Not Before: Jun 15 22:03:18 2024 GMT
            Not After : Jun 16 22:03:18 2024 GMT
        Subject: CN=829ac7e22182e9dc8ed6255dcc8b49565ae6e26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:78:2c:fc:e5:3b:ef:1a:31:0b:2d:c5:64:
                    15:90:87:5a:3a:56:37:bf:09:95:13:c4:f7:0b:77:
                    c6:d3:a2:15:f4:8b:8a:2a:5e:e0:9d:ae:02:99:e8:
                    3f:5c:13:e1:af:a6:c1:82:60:c0:c3:3c:cf:5d:da:
                    9a:ab:25:6c:f6:b8:1c:f1:50:b7:65:ca:48:51:96:
                    6f:de:d1:f1:db:cc:97:de:95:54:bd:07:97:1d:76:
                    d4:b9:c6:f3:1f:88:d3:2d:c3:ae:20:09:86:79:ed:
                    93:8a:26:28:01:38:09:0e:a6:0a:8a:3c:42:65:59:
                    d9:42:78:37:67:73:6d:54:fe:76:b8:bd:ea:6a:f2:
                    b9:23:51:b9:2b:08:0e:ad:a3:ee:7c:45:c1:59:1d:
                    85:47:00:c8:c9:7c:30:c1:45:2e:e0:33:2a:69:a5:
                    04:54:11:1b:2e:1e:13:47:ca:98:c7:ce:bc:99:e7:
                    3e:10:87:91:2c:64:1b:4c:d0:07:d0:df:af:aa:5f:
                    e3:64:f0:9e:5c:b8:a0:eb:36:45:3e:02:ad:28:e7:
                    00:c3:b7:2b:0e:a5:cc:33:5c:91:92:8c:b9:ae:99:
                    53:75:81:54:b6:ab:e9:ae:d3:f3:1b:80:56:d3:43:
                    81:84:41:ad:bc:ab:31:48:02:84:ec:f4:a5:62:02:
                    d0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9A:C7:E2:21:82:E9:DC:8E:D6:25:5D:CC:8B:49:56:5A:E6:E2:6A
            X509v3 Authority Key Identifier:
                keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:36:45:f8:f2:bd:56:21:79:35:d0:e4:62:32:56:b8:cc:42:
         d5:c6:cb:6c:c1:d3:b0:17:54:97:08:99:11:02:c6:f7:be:e6:
         b2:b3:0a:2e:15:3b:81:80:de:9c:ee:8b:84:a9:ab:58:c0:73:
         fa:fb:ef:f5:ec:e5:d1:47:e4:da:44:24:6b:ef:3d:a5:45:d0:
         c3:2b:e5:9b:6b:1e:06:29:61:b1:1d:93:ba:fb:f3:55:9f:e6:
         48:e2:d1:9d:74:53:cb:77:a6:bb:78:50:d0:59:45:9f:33:ab:
         40:12:c7:a0:c7:21:98:48:ed:82:57:e0:0a:3e:93:0f:c7:6c:
         10:e8:9b:22:3f:3b:f5:c8:9e:ef:3c:c1:67:47:cd:c4:4b:f1:
         c0:59:5b:cb:4a:f6:75:ca:50:74:33:a0:09:ae:42:2b:e7:5f:
         de:a1:48:0d:b8:c0:35:38:b4:89:76:b2:71:63:cd:08:64:a0:
         af:b7:29:ce:20:c5:5b:21:59:8e:3f:0c:0a:c2:d3:38:b4:79:
         7e:74:b4:cb:07:2a:17:99:a9:96:91:56:6f:bc:eb:ec:47:7a:
         bb:45:e0:9b:5a:a6:45:22:3f:50:4a:0c:40:88:69:fe:88:8e:
         98:59:84:b6:80:af:3d:d2:b7:fd:26:c1:f0:01:f9:11:53:72:
         9e:93:08:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:31 2024 by rpki-client on console-fra.rpki-client.org