Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
File:                     YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json)
Hash identifier:          TMf338qRdPJvYtkdeQS/lCgWOdW2Ow4ZxHoWlTw7jYg=
Subject key identifier:   C1:8B:17:AC:6C:A1:EA:63:3A:46:A3:9F:2E:D0:53:8A:A9:1C:CE:4A
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Certificate issuer:       /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial:       01901BFD9FCA3C1E4536C1FF0B7DBED7AE8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:02:04 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:04 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:04 +0000
Files and hashes:         1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: qTDLWDtjGtKkiJAsmv1M8PzbNe3jy3XuCsk095k05zM=)
                          2: bFS1EFMBTUVsBkxaR9nobqfB_k8.roa (hash: 9MC6MXlM9JbCmwcX29kHXgPA+1RJctfh/h3DImG/m/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:9f:ca:3c:1e:45:36:c1:ff:0b:7d:be:d7:ae:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
        Validity
            Not Before: Jun 15 13:02:04 2024 GMT
            Not After : Jun 16 13:02:04 2024 GMT
        Subject: CN=c18b17ac6ca1ea633a46a39f2ed0538aa91cce4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:83:24:1d:de:6c:44:66:2d:50:0b:77:a2:
                    03:28:e0:e8:ca:b1:2a:fe:7b:f0:53:60:58:f4:4c:
                    67:d9:26:17:cc:7d:5d:60:ec:60:57:e4:72:fa:6c:
                    bd:45:1e:02:46:5a:a5:a3:4c:21:bf:46:76:b7:12:
                    ad:fe:03:01:3c:54:84:3f:b1:9f:5d:54:a6:e4:58:
                    1b:5a:0d:f0:12:9b:c4:c4:ae:5b:36:e5:a5:cd:56:
                    ed:46:15:c5:71:d8:94:5f:c2:22:46:ef:0e:ff:ae:
                    42:2e:f4:be:ac:b6:d5:76:98:c4:bf:ef:d3:90:76:
                    52:40:2a:29:81:84:57:6f:1e:90:e6:de:6a:b6:94:
                    1f:51:5e:8e:ea:80:48:4c:9b:3e:8c:d7:fc:fb:6b:
                    62:3e:85:61:29:d2:14:2f:17:82:39:e8:73:e1:da:
                    7b:ba:7b:fb:44:86:44:1b:ab:0a:8a:84:5f:59:a3:
                    4b:0a:54:dd:e5:8c:6c:0b:49:00:da:d8:bd:43:a6:
                    ff:66:39:70:85:1f:a0:19:52:1f:2d:5a:28:2e:3d:
                    0d:7f:f9:eb:75:e5:20:54:ea:18:44:67:e0:24:4d:
                    0d:6b:2e:7f:e4:f4:11:dc:e8:6d:21:59:04:9b:e8:
                    20:48:be:17:a4:47:4c:82:d4:23:81:46:37:84:a2:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8B:17:AC:6C:A1:EA:63:3A:46:A3:9F:2E:D0:53:8A:A9:1C:CE:4A
            X509v3 Authority Key Identifier:
                keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:3d:01:bd:3b:2f:b1:cd:e2:ba:80:6b:69:8b:f1:f1:bc:64:
         fb:c8:42:00:4f:71:1a:48:62:09:a4:da:28:d4:b5:ec:67:69:
         7f:ab:b7:7d:38:c4:7b:15:09:d9:d7:96:b0:40:4a:bb:f2:76:
         26:c6:a5:ec:0d:24:4c:6e:a9:06:ee:68:2b:94:c5:c0:14:96:
         c7:19:64:66:35:f9:bf:10:52:99:f7:05:74:bc:f5:d2:8d:ca:
         99:48:da:ba:2c:ae:7a:7a:b3:95:43:ec:ed:a9:ef:1e:17:68:
         2f:ad:d0:6c:2c:92:87:c4:8e:e5:aa:ab:fd:c7:ca:55:9e:75:
         2b:57:b1:80:c6:d5:5a:1d:51:2d:1b:99:81:c8:6f:73:4c:67:
         96:0b:25:d7:36:64:a7:05:ff:10:46:94:b0:ec:ef:d5:65:73:
         e6:1d:ff:b3:b4:2e:72:e7:86:57:14:50:0c:0a:16:17:fb:36:
         49:ae:24:91:68:09:52:cd:80:a5:f8:bb:d3:1e:09:19:06:97:
         eb:f3:5e:c7:79:fd:a9:12:58:f2:87:8b:ba:24:5a:d6:6f:a3:
         59:9b:29:02:43:7a:25:9e:24:44:85:a2:4c:c1:3b:c2:62:96:
         03:fe:49:68:88:37:82:2b:c7:6d:09:ca:f9:33:98:65:ff:c3:
         98:c2:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:57:29 2024 by rpki-client on console-ams.rpki-client.org