Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File:                     pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier:          dpv+Nitz9xxP1vQ3vKIIV988CyTUCaVTS8cTLAbZ38I=
Subject key identifier:   7D:58:D0:60:8E:BF:AF:F3:48:BF:A0:CF:5C:25:C5:CE:ED:0A:E7:C0
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer:       /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial:       01901BFCD94B30131F7A5C726F8C2F3A65A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:13 +0000
Files and hashes:         1: fLx6ARp_XELZuUhU7kDXAjpPuwk.roa (hash: uTCowJPAT95hr4395tl8GegbA7fdKD/i94UzJqvmAWc=)
                          2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: pYTU0mHEAnpi86C+1f8O01NRtrwqHw4kSlve2y3ec34=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:d9:4b:30:13:1f:7a:5c:72:6f:8c:2f:3a:65:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
        Validity
            Not Before: Jun 15 13:01:13 2024 GMT
            Not After : Jun 16 13:01:13 2024 GMT
        Subject: CN=7d58d0608ebfaff348bfa0cf5c25c5ceed0ae7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:df:e3:57:8e:2c:67:78:01:a9:8b:41:b4:d2:
                    92:90:ef:1c:cb:ed:cf:4b:16:9c:42:e1:28:f9:cf:
                    e3:96:66:21:b0:cc:18:61:fd:ce:5a:73:ad:7d:1d:
                    e4:8d:79:9c:41:a9:aa:98:f0:df:76:f8:32:d0:ba:
                    a2:fc:e5:44:4f:2e:f4:7c:f4:48:61:41:cd:37:a1:
                    67:88:92:4a:fe:7b:8d:8f:42:99:44:9c:cd:70:42:
                    c5:c6:11:49:33:ee:77:b2:f5:e4:fa:d8:c4:db:54:
                    19:d9:dd:77:50:27:b1:4f:6c:74:99:34:e3:23:c9:
                    d4:6e:05:2e:94:7f:b5:d9:da:6f:79:3d:71:a8:bf:
                    88:11:07:a4:70:19:16:06:66:69:14:eb:e4:a0:fd:
                    52:be:e4:b5:da:70:29:4c:4b:a1:c5:be:e3:37:05:
                    aa:20:01:f9:a0:17:00:8e:8e:b0:e1:75:0e:25:20:
                    a5:f1:d8:c7:59:9e:2f:fc:fe:96:22:6c:71:35:a2:
                    7a:70:68:ad:2b:fc:a5:fd:78:25:2e:49:3f:0a:36:
                    e6:67:89:85:75:9d:5c:ac:ac:e7:b8:07:e1:59:16:
                    7d:d5:2e:86:b8:17:0d:23:42:1f:56:15:64:30:24:
                    b7:61:6f:ef:50:e5:c4:66:0b:ae:6e:2b:68:90:df:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:D0:60:8E:BF:AF:F3:48:BF:A0:CF:5C:25:C5:CE:ED:0A:E7:C0
            X509v3 Authority Key Identifier:
                keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:4f:79:76:b7:91:a9:4e:e0:b5:85:f4:f1:fe:ab:80:81:7f:
         f2:c2:6d:77:a8:56:19:bb:5d:a0:0a:fe:6c:0c:d1:b5:51:15:
         90:a7:4a:d8:a6:f8:7a:fb:0f:1d:8f:b8:f6:83:2a:62:f0:7f:
         df:10:8a:a6:f8:f2:5e:7e:b7:31:fd:a8:69:4a:20:a9:b7:3a:
         7c:38:b1:cf:57:f0:4e:82:c4:b1:35:76:30:9e:8b:c9:31:0d:
         40:07:1d:ea:f4:d8:01:03:50:9d:15:08:2b:46:63:fe:c0:4c:
         9b:71:fe:06:be:ca:08:cd:f7:b5:79:6f:90:a3:f4:5a:1d:62:
         fc:8d:ba:4c:ff:28:4d:dd:f5:bd:2c:6d:05:db:a5:e3:2e:28:
         ef:68:5b:b1:52:0d:46:18:65:a3:aa:a1:28:1d:26:51:24:a9:
         a6:24:85:e1:89:46:38:04:85:23:af:e3:80:e1:21:ae:d5:f9:
         9e:42:07:ab:fb:40:aa:90:f7:08:13:55:5c:09:17:f7:b8:dd:
         1c:40:67:36:a5:45:a7:f6:39:d0:6a:94:97:62:12:f2:da:5a:
         55:de:ac:9f:96:fa:9f:b7:df:85:a3:f2:9a:64:61:b0:15:6a:
         f3:c8:2c:7b:1f:55:b4:11:bb:89:5f:04:fc:81:73:76:3d:c2:
         22:11:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:36:43 2024 by rpki-client on console-fra.rpki-client.org