Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File:                     10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier:          Pr0if0Lq23KL9T4idArQnHtP2tafAsHxj3bLTb9ixCo=
Subject key identifier:   5C:84:49:10:F7:BF:3D:8C:B1:42:13:7D:80:83:BF:2D:70:FF:B3:CB
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer:       /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial:       01901D45FC6A4789ACFC0446CB62B9F44C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 19:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:44 +0000
Files and hashes:         1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: 1IwBZNMuwDtVjPVwq/QnW+McEljf+RaKW+EWk3nFrVY=)
                          2: noobUfXLR01ci1yDFZxV4J538C0.roa (hash: d52s/4e1/xDmoZAgFRhZdim8aHl6OF/5NCpcyrxGJ6o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:fc:6a:47:89:ac:fc:04:46:cb:62:b9:f4:4c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
        Validity
            Not Before: Jun 15 19:00:44 2024 GMT
            Not After : Jun 16 19:00:44 2024 GMT
        Subject: CN=5c844910f7bf3d8cb142137d8083bf2d70ffb3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a4:2d:73:ca:16:c7:d4:ce:57:76:a2:66:40:
                    2b:7a:3a:4e:39:01:b4:f6:58:ca:0c:20:08:de:12:
                    da:65:c4:dd:70:c8:5d:34:93:96:f6:5f:43:16:15:
                    fb:7e:bd:6d:02:8f:d8:a5:33:57:e5:86:c8:99:1d:
                    d0:95:85:2c:c5:41:50:57:17:9a:a9:94:90:59:a0:
                    79:36:da:80:c3:44:89:d0:f2:43:38:d2:68:ee:de:
                    c5:50:a3:62:48:88:be:ae:55:2f:a6:94:3b:c5:67:
                    95:77:05:1e:b0:8c:ab:5f:da:3e:ee:ee:bc:5f:f9:
                    51:e5:bb:7a:76:b0:5f:f8:3b:f1:ab:cf:da:91:be:
                    92:b1:78:b7:a7:2c:8a:b7:4f:e2:48:2a:24:9a:44:
                    c2:78:a2:db:d7:0f:a5:8a:f3:f8:6d:f0:f0:4d:37:
                    70:f2:47:fc:02:b7:ce:cc:03:5e:f7:ce:0a:88:b9:
                    e1:b6:4e:bc:3d:89:dd:8b:b2:b4:93:62:6e:bd:57:
                    3b:8b:2e:68:67:da:0c:f1:9f:c6:1f:43:44:6d:8b:
                    cf:e3:7a:6a:ef:b7:d2:ad:24:d0:e4:cc:0d:3d:dc:
                    45:8c:c1:8e:12:61:f4:41:16:01:0b:8e:81:39:31:
                    bf:b1:28:3c:2b:b3:c5:9c:36:65:c4:66:ee:50:58:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:84:49:10:F7:BF:3D:8C:B1:42:13:7D:80:83:BF:2D:70:FF:B3:CB
            X509v3 Authority Key Identifier:
                keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:04:5c:08:3c:9a:d7:3c:66:74:cd:81:64:7a:8d:8c:13:9c:
         2d:67:bc:4d:63:d6:73:44:9a:60:a9:04:40:a1:d7:1f:fe:7c:
         98:17:59:f0:8c:46:8a:59:a9:da:2a:90:67:24:a8:a8:9e:32:
         2f:ae:a0:53:67:70:57:3b:6f:26:4d:eb:68:8f:13:e9:4f:f8:
         01:2b:d9:85:b3:ab:78:e3:82:0c:2e:b9:1b:ca:18:a7:8c:8d:
         97:1c:05:95:6d:2b:79:23:58:12:10:a4:f6:d4:34:7a:5e:7b:
         45:80:e4:5f:36:4c:39:93:05:5c:24:d4:09:c3:2f:a2:59:59:
         eb:90:4d:b4:07:74:cc:96:17:a3:c5:b7:f1:80:01:c4:a3:26:
         4f:54:b2:84:06:5e:87:1d:e3:a0:e0:05:9f:d1:aa:5d:7d:2c:
         12:74:d0:7e:56:d1:44:e2:17:6e:22:af:ec:a9:b1:2b:75:6c:
         f8:3e:bf:39:dc:ba:b9:b0:62:26:a2:1f:af:2a:da:72:6d:23:
         b7:95:ff:03:69:d2:d3:7d:11:52:b0:c1:1c:59:37:2a:52:96:
         ac:a3:b7:1f:d9:00:a2:81:57:85:ef:08:d8:2b:dd:08:c1:9f:
         52:0d:c5:9f:10:c3:df:a2:e7:2f:bc:07:78:11:5f:75:13:76:
         7f:23:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:19:29 2024 by rpki-client on console-ams.rpki-client.org