Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft
File:                     hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft (raw, json)
Hash identifier:          4YG95dG7r9BrXcKwJfBM2MMn0BpGuHRc/65AgbRKJow=
Subject key identifier:   DA:48:D8:52:90:ED:90:BA:AB:E5:C8:25:26:EB:2B:BA:1B:FD:B7:ED
Authority key identifier: 85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA
Certificate issuer:       /CN=85927a93283d62ce672efa1f9bef57a2356118aa
Certificate serial:       01901DEC9B6609E65973F836F150E6624D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:02:43 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:43 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:43 +0000
Files and hashes:         1: hZJ6kyg9Ys5nLvofm-9XojVhGKo.crl (hash: 8ACkBvwB39VngS+rqRW2O+KmPjYm3MkWTNnIfThPg24=)
                          2: xPsAEBUG9u8H5dpTDFetAp6IDP0.roa (hash: NrdGD4gWvSIPpkUkbU3+/XaUQk242Hs0KP5K2mIokbU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:9b:66:09:e6:59:73:f8:36:f1:50:e6:62:4d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85927a93283d62ce672efa1f9bef57a2356118aa
        Validity
            Not Before: Jun 15 22:02:43 2024 GMT
            Not After : Jun 16 22:02:43 2024 GMT
        Subject: CN=da48d85290ed90baabe5c82526eb2bba1bfdb7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:57:08:33:0a:f5:5b:d3:93:d6:d6:73:50:
                    ac:e4:1c:a5:56:ca:c6:ec:47:c6:4a:22:ec:21:d5:
                    ef:dd:27:e3:86:0a:b5:77:6c:ba:2f:f2:9f:5e:da:
                    bd:46:56:37:57:b8:64:33:39:d3:01:c7:39:b7:d0:
                    12:08:02:d6:0a:4f:91:85:36:f1:6e:46:6b:8b:b0:
                    ed:9c:91:86:a4:62:cb:b1:11:48:db:0a:4a:9d:91:
                    10:e4:35:3c:66:e9:9d:0c:3b:36:e6:11:5c:1e:9d:
                    23:8f:ec:a2:8e:96:0e:83:83:e2:03:92:12:2b:fb:
                    0d:25:82:8a:23:ab:6d:7a:fb:1b:20:80:ec:f5:66:
                    96:56:bd:4c:23:3e:54:e2:2a:40:f3:d6:7f:e7:ce:
                    be:68:11:c5:b5:f9:62:a1:b2:d1:9b:e7:5c:bb:1b:
                    b4:74:8b:92:b3:eb:19:3e:94:7d:a1:94:e6:c0:c8:
                    90:5b:1f:b7:b7:d7:74:e5:05:37:86:76:97:7b:d2:
                    86:07:3e:44:9d:9a:ff:f0:5e:2d:5b:2b:2e:58:d1:
                    ca:b4:8b:e5:0c:1a:cf:fd:45:a3:dd:94:2a:86:54:
                    6d:b3:47:95:fd:c0:76:00:22:38:59:72:69:b2:65:
                    da:ad:dc:6b:a9:2b:c5:1e:8b:17:ac:8a:81:6a:ce:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:48:D8:52:90:ED:90:BA:AB:E5:C8:25:26:EB:2B:BA:1B:FD:B7:ED
            X509v3 Authority Key Identifier:
                keyid:85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fe:5e:53:3d:e8:fb:cd:0e:c9:fe:5e:a0:1b:8f:34:17:08:
         ed:ea:bd:e2:2c:2f:0e:a4:2d:3b:df:00:13:72:eb:d8:34:91:
         0d:ea:d9:76:03:0f:53:78:12:17:1b:a1:ee:8d:2e:fe:c4:de:
         43:c0:d9:f1:83:7f:a0:98:31:22:96:8c:7c:66:2e:03:9d:9f:
         dc:79:bf:cf:58:8e:8f:05:a1:f3:ab:09:47:b6:73:5e:cf:36:
         43:30:13:ef:8a:66:cb:03:b1:e6:40:5b:07:27:96:b2:4d:6b:
         5e:89:41:32:22:1b:37:97:f2:a1:ed:f6:fe:2d:cc:56:53:2f:
         93:50:93:cb:de:44:f3:68:2e:80:56:d6:20:05:a1:94:98:84:
         f9:95:84:e5:61:14:aa:09:ca:19:88:c6:38:ad:49:39:64:6b:
         de:98:31:a0:b6:d6:a8:1a:17:0a:15:31:03:6e:31:7a:58:ad:
         5b:00:9f:94:98:a1:5a:f6:e6:a8:06:e0:05:42:21:2b:9e:b8:
         a9:19:92:25:f5:68:af:38:44:a3:7b:8f:23:59:6f:f8:1f:de:
         f0:b3:52:80:8f:ed:c2:86:50:76:87:52:b0:67:82:f9:be:ab:
         18:09:62:73:64:b7:42:83:ce:63:d0:01:b8:dd:a6:d4:3f:a0:
         61:e1:6c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:07:52 2024 by rpki-client on console-ams.rpki-client.org