Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File:                     g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier:          /nqN80kaLKB/ffVZEvO41Ltd6bP+LDOd2gXl8eWVVCM=
Subject key identifier:   00:98:8F:DB:C2:C6:3D:33:52:93:17:2C:2F:BF:96:FB:A9:41:58:0C
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer:       /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial:       01901DEC125AFE1B84D308057B98D32199EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number:          C8
Signing time:             Sat 15 Jun 2024 22:02:08 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:08 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:08 +0000
Files and hashes:         1: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: DBLod+jLkqLopC0w0fPidWsLTe3ffDYkHGd8IwsIShU=)
                          2: wSlwUb5GO5ZtBuqccRIThVO6NgI.roa (hash: 5ywOsPIhppIq1zmUtkLPubAwy2lR9esYtf8OnPdWzjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:12:5a:fe:1b:84:d3:08:05:7b:98:d3:21:99:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
        Validity
            Not Before: Jun 15 22:02:08 2024 GMT
            Not After : Jun 16 22:02:08 2024 GMT
        Subject: CN=00988fdbc2c63d335293172c2fbf96fba941580c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:cd:55:09:7e:0f:b2:27:bb:be:ef:30:c3:
                    cf:6b:c0:35:1b:4e:b5:ee:20:b2:0f:53:e3:8e:14:
                    48:b6:16:5a:c9:03:fb:9f:b5:d8:e6:f4:54:0d:be:
                    be:00:b9:89:60:bb:81:8c:52:97:24:02:13:52:21:
                    06:cf:15:9c:8b:63:71:a8:a1:16:f8:22:c8:7b:61:
                    27:4f:c1:d6:49:36:bd:fc:f5:10:16:86:86:57:65:
                    53:a2:42:0d:90:62:f8:e9:19:bb:42:70:b9:6f:62:
                    a7:d5:9f:22:b7:3b:f0:c1:08:6e:13:84:65:93:ec:
                    67:18:20:a4:3a:c8:9d:64:54:12:bf:d7:37:5c:a6:
                    d8:fe:37:cd:74:ee:e1:30:a4:ca:91:fa:5d:9f:7c:
                    84:9a:d2:15:d2:86:eb:a3:8c:b1:64:50:4d:c8:09:
                    3f:b6:6c:8c:8b:0c:c7:1a:dd:49:bb:53:1e:33:89:
                    17:b5:f4:78:2a:3e:2b:73:c2:46:22:e5:eb:c1:3e:
                    97:b3:d5:ab:61:66:91:24:27:cb:60:63:9f:68:6a:
                    b1:81:2b:c8:25:0f:c3:43:ed:09:24:6b:6d:4e:02:
                    1f:9f:1a:c8:e2:45:43:a8:9e:b8:d0:ce:ff:42:24:
                    ed:80:e9:ad:fc:32:56:d3:2a:2b:7b:91:8b:5b:6e:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:98:8F:DB:C2:C6:3D:33:52:93:17:2C:2F:BF:96:FB:A9:41:58:0C
            X509v3 Authority Key Identifier:
                keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c5:5c:00:78:da:5d:3c:67:66:77:ba:4a:82:ad:6e:39:4e:
         d7:96:d1:33:cb:29:0a:19:25:9d:9c:59:f8:50:93:bc:a6:88:
         a1:33:de:c9:f8:ef:3f:5d:c6:ae:2d:d2:61:7e:62:be:d0:20:
         a6:5b:5d:e0:4d:ab:bf:cd:1f:6b:ef:c5:12:74:78:50:a7:3b:
         8c:d4:ee:fa:08:65:89:9c:f7:90:87:29:a0:d4:38:fb:87:17:
         43:96:ac:ef:71:4f:77:8b:21:d8:75:65:fc:44:1f:ad:30:2b:
         3a:e5:8b:12:5e:5d:4b:bc:20:f1:9c:66:b5:7a:80:ff:ce:ff:
         d7:28:27:7f:bb:1b:ee:ff:35:6d:d1:6e:f4:c7:0a:af:6e:10:
         81:3f:1e:d1:74:1e:b6:6f:05:46:0a:c9:4d:e0:e7:03:57:d2:
         dc:0a:e4:66:d1:96:9a:b3:2d:bd:a5:56:bb:f0:b9:ee:e6:04:
         1a:80:48:17:93:08:d2:99:0c:77:5f:b1:f4:12:9b:71:c8:89:
         f7:32:7e:33:1e:35:3f:35:4c:c7:a6:43:2f:2f:8f:82:46:16:
         03:ed:2c:71:05:83:a3:29:99:28:9e:f2:a1:f9:29:dc:54:77:
         df:85:dd:aa:40:b5:d6:11:d3:d7:70:62:4b:a5:e1:13:95:2a:
         59:aa:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:39 2024 by rpki-client on console-fra.rpki-client.org