Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File:                     H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier:          IGQeYsmo/tib6Ji6AOE6yFzt+LL9rnmYRxtRIFJT2Xo=
Subject key identifier:   43:2E:9C:D9:9F:B5:3A:92:C0:52:3C:3B:41:BF:46:CA:51:0B:AC:34
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer:       /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial:       01901D0F54948CC45BCC9ADA456BE26BA72E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number:          0D4C
Signing time:             Sat 15 Jun 2024 18:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:02 +0000
Files and hashes:         1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: Lnvrdw27EBNX/HpRIbeFtLeEibzYocCIM7wOwRcQpFs=)
                          2: xODRiu7LJF7dUOfDZz2ItY_9vbY.roa (hash: pOqs08if8uAeQ2VViy6bzyDVIT2c7BFB4v71m908NpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:54:94:8c:c4:5b:cc:9a:da:45:6b:e2:6b:a7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
        Validity
            Not Before: Jun 15 18:01:02 2024 GMT
            Not After : Jun 16 18:01:02 2024 GMT
        Subject: CN=432e9cd99fb53a92c0523c3b41bf46ca510bac34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:02:a7:14:0c:d9:3c:2c:58:2b:29:3d:7f:
                    16:f9:4f:48:b6:2f:0c:4c:5b:16:cf:f1:ac:9e:e9:
                    72:55:b1:d7:21:23:6e:f7:04:d9:96:10:93:a0:64:
                    9c:e5:ed:22:1d:d6:df:b5:4c:91:36:38:43:c1:d0:
                    52:e5:db:a1:6c:dc:df:1a:69:2c:de:55:85:1a:35:
                    01:72:2f:cc:cd:ec:9e:3b:4c:8c:bf:1c:82:ae:e5:
                    71:9b:59:77:a8:b9:4e:31:91:56:2e:cd:42:62:1d:
                    43:15:03:f7:bb:d8:61:06:68:9b:c0:bd:35:9a:d0:
                    0a:c5:24:e3:2d:c7:cd:34:e4:e5:31:dc:be:6c:ed:
                    2c:21:d6:b3:93:c3:30:4e:8c:aa:c6:69:fe:a8:5d:
                    37:a2:e7:eb:03:06:f6:08:8b:a2:c3:66:ca:4a:e9:
                    a6:66:97:bd:70:00:90:aa:24:ab:a1:68:78:98:07:
                    bc:f5:46:2e:a8:e3:11:32:a8:48:35:ac:97:61:90:
                    d1:8c:eb:68:d0:80:2c:5f:34:dd:cf:67:c8:d6:c8:
                    3d:3b:55:2c:a8:bc:3a:6d:20:d5:dc:18:76:eb:bc:
                    09:e8:ac:cb:29:6c:c7:ef:6b:6b:5d:f2:dc:13:bf:
                    6f:0a:26:7b:55:3d:a9:e2:8c:f8:1f:40:1f:4c:1c:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2E:9C:D9:9F:B5:3A:92:C0:52:3C:3B:41:BF:46:CA:51:0B:AC:34
            X509v3 Authority Key Identifier:
                keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:bc:9e:7c:88:86:3e:df:19:25:a2:0c:97:a0:75:ac:57:48:
         22:5b:70:cf:30:f8:84:d8:f2:5c:ef:73:98:9d:76:1c:a5:3a:
         c5:0a:b2:83:7d:8a:ba:62:8f:27:f9:67:52:27:3c:7d:bb:e4:
         0b:3e:52:51:20:dc:ea:0a:3d:00:fc:c4:c6:c1:ec:12:f6:bb:
         0d:22:fb:15:7f:fd:52:b5:40:ea:94:91:35:86:bc:5c:1d:36:
         b6:4e:18:2f:94:66:ed:d5:bf:c6:60:28:30:db:06:49:44:1b:
         d7:82:ca:2d:e3:e0:33:03:9c:78:a4:46:10:89:0b:55:ac:51:
         96:53:a5:34:75:c2:f0:4b:5e:a9:f6:bf:dd:49:fe:6a:27:49:
         7f:50:a9:fe:1b:31:ab:55:18:c2:f8:d4:d2:97:e5:dd:1d:e0:
         1a:66:e4:15:e4:c1:22:04:3c:54:d6:68:d3:06:be:59:4f:d9:
         cf:7e:d7:0e:88:44:79:74:24:72:ac:fb:0f:77:72:f0:dd:c4:
         ee:c7:2a:c7:25:53:38:58:20:5d:c2:76:d0:c6:ff:c3:ec:24:
         fd:48:19:2b:cf:f1:e2:f2:93:60:d4:d3:1b:96:a9:5f:ff:98:
         ef:5f:80:9c:d0:ca:5d:b3:8b:d2:e7:f5:2d:7a:bc:d6:2d:b1:
         52:f0:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:10:49 2024 by rpki-client on console-ams.rpki-client.org