Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
File:                     bULP8YM0sv92sVrZRKipE16QVow.mft (raw, json)
Hash identifier:          +bproozdA6TYKjrfVLR2Ahy125jqnnN0bxqMp00ojQc=
Subject key identifier:   A9:10:24:AB:28:8E:C6:67:E6:F4:19:2B:B3:38:EF:62:1C:C5:2F:E4
Authority key identifier: 6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
Certificate issuer:       /CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Certificate serial:       01901EC65E47FBE6A6B0456AEAF4FECE89C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
Manifest number:          0926
Signing time:             Sun 16 Jun 2024 02:00:34 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:34 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:34 +0000
Files and hashes:         1: bULP8YM0sv92sVrZRKipE16QVow.crl (hash: 4329CBCl4W0hdFjjGuno6bBP+6hLtvOldketTlC3Rwk=)
                          2: pkXco9ARq8nks9RJ3Dgy7R9_0_k.roa (hash: DdJYW6paQpQK4cKXQJ5nMcNYXG3usbUjvydBmo9sTkw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:5e:47:fb:e6:a6:b0:45:6a:ea:f4:fe:ce:89:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
        Validity
            Not Before: Jun 16 02:00:34 2024 GMT
            Not After : Jun 17 02:00:34 2024 GMT
        Subject: CN=a91024ab288ec667e6f4192bb338ef621cc52fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:13:69:56:38:a9:4b:60:71:02:35:ba:33:
                    df:7d:6f:27:08:bb:aa:11:58:1c:c1:9e:a4:55:20:
                    18:e4:a5:65:92:39:2e:0d:5f:a4:8d:9f:27:43:b0:
                    19:a0:cc:ab:0d:f8:75:b5:ca:3c:fd:2a:fb:2f:f9:
                    9a:44:d0:ed:86:b9:9f:d9:10:aa:ad:2e:01:c3:ea:
                    d6:d6:42:54:35:72:c4:3a:26:c2:51:b0:75:db:46:
                    af:c4:9a:16:41:eb:86:e7:98:fc:4d:9e:fa:fb:7e:
                    ed:fd:f1:ee:cb:ee:fd:2d:34:97:ce:16:d5:20:c2:
                    55:d5:6d:fb:95:72:69:6e:91:68:dd:e8:3c:b4:4a:
                    19:fd:27:eb:93:4d:56:aa:fc:97:af:7e:4a:60:9f:
                    07:5d:61:16:70:98:ef:1b:fe:3c:7a:ff:1f:01:81:
                    ec:49:32:17:72:8b:fb:59:83:4f:c0:e4:bb:74:d2:
                    50:2e:89:5b:7e:81:4d:86:ac:a4:31:b1:42:aa:99:
                    8e:09:67:fc:7e:b0:af:53:89:c3:06:cd:31:6a:91:
                    40:7d:38:fb:fd:7c:76:d4:db:1b:4d:0b:dc:2c:e8:
                    fe:61:ae:df:82:4a:a4:cd:1b:e4:4f:c5:ab:9b:d9:
                    7a:87:c8:62:05:39:29:6f:9f:f5:ae:fd:0a:c0:d1:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:10:24:AB:28:8E:C6:67:E6:F4:19:2B:B3:38:EF:62:1C:C5:2F:E4
            X509v3 Authority Key Identifier:
                keyid:6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1b:31:02:d5:86:28:69:5b:dc:66:bd:e5:c2:32:4d:19:c4:
         c3:24:f3:2f:a0:30:67:ed:e8:8f:22:ad:96:59:f6:cc:bf:ca:
         fb:0a:14:ac:53:11:ea:d8:57:7a:1e:41:8c:fd:25:6e:09:ec:
         14:82:50:89:f9:d9:e6:fc:ac:3b:29:a6:69:52:11:22:d2:21:
         24:9b:83:cb:02:18:a1:92:b8:a8:59:7b:1b:e8:63:18:b8:47:
         5a:f6:31:c2:a8:d6:80:54:1a:cc:9d:af:33:1a:57:bb:dc:f2:
         2f:a5:66:5c:5d:58:24:12:9d:6e:ae:74:2c:75:fb:ea:ca:4e:
         92:44:45:c3:2c:b5:ba:05:60:b6:dd:2e:12:1d:94:de:c1:f8:
         4f:05:db:fa:f6:50:7a:2e:b3:19:6b:8b:6d:45:98:e8:9c:25:
         b2:8e:ad:e1:49:dd:12:9a:34:3a:a2:e4:86:56:80:af:e2:1f:
         bc:e4:46:5d:66:8f:71:39:d0:de:b3:63:0d:42:36:fc:3f:93:
         08:96:cb:7b:72:3b:17:0e:66:ec:a9:da:cf:73:ac:85:f5:ad:
         07:2f:b3:3a:2c:d2:5b:5d:0d:6d:00:ef:25:ea:59:fa:b6:ed:
         ec:f5:5f:f8:6a:65:be:6e:40:8b:a9:49:48:c3:d2:d8:cf:94:
         95:90:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:35 2024 by rpki-client on console-fra.rpki-client.org