Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File:                     Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier:          dmP+aDJ5m/SaprJRcnCJhOkkCXfJ74PBltUxdbDC6hA=
Subject key identifier:   B0:E2:A9:B1:D0:CC:63:5E:FE:9F:D3:38:01:04:43:D1:5E:61:4F:0F
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer:       /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial:       01901DEB6E045F86948DCD15F5EF2FBF16D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number:          023C
Signing time:             Sat 15 Jun 2024 22:01:26 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:26 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:26 +0000
Files and hashes:         1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: jsElYqeUfXiedGwiHkhBdDv130aNkLoIBpLT9xr+DTw=)
                          2: N3BSvwymwwAQikEYeLwRZ2gS90c.roa (hash: qxO8VQNTFHjO2xAc9UrdJwyL3tSgO4M0Z0q+42HMBiM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:6e:04:5f:86:94:8d:cd:15:f5:ef:2f:bf:16:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
        Validity
            Not Before: Jun 15 22:01:26 2024 GMT
            Not After : Jun 16 22:01:26 2024 GMT
        Subject: CN=b0e2a9b1d0cc635efe9fd338010443d15e614f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:7f:2b:6f:f8:fc:16:ab:3e:26:dd:e1:06:
                    c2:cf:4a:7e:63:ae:e4:ca:7e:0b:4c:66:17:10:41:
                    c3:33:61:2d:b3:07:6e:85:96:9f:ba:2c:37:70:7b:
                    ab:b1:da:98:2f:8e:53:b6:a4:4a:f3:78:ca:67:bf:
                    47:b5:e6:bf:05:bd:f0:6c:7d:e8:73:e1:83:51:f2:
                    83:72:66:cf:63:f9:a5:b8:7a:ac:31:9d:fe:95:1d:
                    56:04:20:57:83:9d:6e:59:f2:63:a9:6a:a4:64:be:
                    65:8d:c7:fd:b8:fc:32:b9:f0:c8:64:71:41:07:27:
                    be:e1:99:52:82:bc:c9:c2:e8:a2:42:79:93:8c:25:
                    19:7b:24:4e:90:3d:98:d8:42:12:0f:72:fe:c1:ad:
                    05:03:7a:49:2b:5e:8f:32:fe:4f:c8:4d:b4:0f:bf:
                    f9:f5:40:a2:eb:3e:6a:33:23:cd:5e:cc:03:68:3c:
                    98:a8:b5:50:22:5c:1b:17:fb:d5:34:00:19:c8:9c:
                    fc:2d:1e:aa:b6:66:8e:01:51:b3:4f:89:f8:c1:ac:
                    cd:ca:de:a2:6a:c8:5d:52:5f:cb:f6:e1:6b:b2:22:
                    1f:9a:b4:5b:15:03:5e:cf:bd:ba:61:d8:01:dc:d8:
                    91:b1:5d:6f:1f:da:23:fe:ed:e5:33:bb:08:9e:3b:
                    28:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E2:A9:B1:D0:CC:63:5E:FE:9F:D3:38:01:04:43:D1:5E:61:4F:0F
            X509v3 Authority Key Identifier:
                keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:52:98:f6:9f:35:3f:89:c1:c6:88:a4:44:99:5e:df:06:1a:
         04:57:d6:3b:db:6e:44:c0:a1:a4:a7:ff:ec:b1:b5:5c:ec:1e:
         01:80:06:3b:14:27:e9:b3:71:1e:5d:c8:df:79:be:45:e8:c7:
         c8:99:13:60:a9:06:da:40:87:30:f2:93:e0:7c:fb:14:ad:2e:
         63:80:02:cf:12:76:5e:13:43:e8:9a:4f:b1:94:5f:a5:b7:65:
         c1:a6:77:a8:ea:37:fa:60:aa:af:a3:55:87:90:a9:91:2c:cb:
         cf:d6:33:21:fb:a9:9c:e1:f2:00:18:dc:e9:28:e3:0e:61:90:
         9b:f9:0b:1f:33:ee:6b:3c:03:8d:37:20:18:61:44:bc:14:9c:
         b1:bd:5e:0d:84:97:9a:43:ba:f7:ec:7c:68:04:6e:95:e8:c6:
         a6:46:e4:01:f3:15:bc:89:ca:af:76:b4:81:73:e8:3a:56:ec:
         82:2f:bc:e0:8c:be:f6:84:41:83:26:01:86:69:a3:77:75:78:
         da:7b:a0:0b:5b:ad:43:0d:64:e8:5b:d6:93:d6:a2:d3:63:61:
         3f:e5:07:cd:bf:04:4c:85:57:15:d5:38:4d:83:ca:91:fd:d6:
         52:1d:e5:2b:d9:35:d8:e3:cb:f5:4b:5c:8e:35:32:8a:9a:09:
         0c:39:a7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:50:56 2024 by rpki-client on console-ams.rpki-client.org