Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File:                     CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier:          et30pcm2Ke3Pm32a8mNAnyjvJXWCMv7SopmFOTdg/mg=
Subject key identifier:   64:81:05:A9:65:24:99:F5:40:7E:28:23:AA:7A:5E:20:29:69:61:94
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer:       /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial:       01901DEC19EC713DD8E0108B88BFF22DCB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:10 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:10 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:10 +0000
Files and hashes:         1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: dLm3iAvKvbpd0I8ctQJnUFswMBt02RqJhMSD22awKt4=)
                          2: iMMH1Fgw9EttOFfxgbHxGk2m0Bg.roa (hash: mY2YPs4rCSz69TeCgeSjqpo/A4eB0i+BtIFSmaMNwyA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:19:ec:71:3d:d8:e0:10:8b:88:bf:f2:2d:cb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
        Validity
            Not Before: Jun 15 22:02:10 2024 GMT
            Not After : Jun 16 22:02:10 2024 GMT
        Subject: CN=648105a9652499f5407e2823aa7a5e2029696194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:c7:6b:f4:78:96:24:bc:ed:65:4a:dd:90:
                    75:bd:b0:06:71:e3:2c:fe:f5:63:36:97:db:3d:cf:
                    93:0c:5f:3c:04:89:e0:61:b4:cd:c5:35:a7:5c:62:
                    18:ca:d4:4a:d6:f0:8f:ec:a4:9c:72:8a:20:e2:1c:
                    45:d7:f6:3a:7c:96:79:66:c2:5f:63:bb:10:63:a4:
                    81:bb:24:a1:17:16:f1:19:87:09:cd:b4:2a:cf:4b:
                    68:5b:9d:b3:55:2f:80:d9:f8:6b:0f:16:27:bc:f8:
                    bc:3c:ef:07:46:0e:c6:de:4c:22:97:e4:0f:50:f5:
                    93:30:5b:0d:19:72:6a:bd:1d:0f:cf:32:26:fc:a3:
                    15:f0:c9:52:c7:6a:22:de:aa:47:80:53:84:3e:ff:
                    7c:54:74:37:1e:f8:47:5c:96:8d:12:f7:9d:5c:2f:
                    d4:01:49:9d:54:51:85:dd:f7:13:b9:1e:a8:59:34:
                    23:d5:22:15:91:b8:bf:51:fc:1d:95:03:ae:ef:62:
                    34:96:10:f4:71:9e:d2:80:68:cd:15:e9:95:49:30:
                    30:35:ab:92:5f:6e:49:de:a2:54:dd:48:75:ee:b3:
                    9a:b4:9a:a2:e2:e3:bb:7d:80:eb:ec:cc:50:67:6b:
                    f0:f2:a3:c4:df:c0:31:6c:f6:2c:a5:0f:df:04:51:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:81:05:A9:65:24:99:F5:40:7E:28:23:AA:7A:5E:20:29:69:61:94
            X509v3 Authority Key Identifier:
                keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:90:27:69:e3:e5:d3:1f:a1:40:62:9d:b6:a7:5e:83:32:
         6c:06:c9:89:87:a7:8f:b3:64:ce:e5:bc:01:fa:99:fe:ee:c4:
         f3:d7:3a:d4:4d:53:dd:81:19:ea:aa:9b:93:e6:f1:20:01:7d:
         a9:40:ce:1e:41:94:ab:bc:2e:ba:e5:9f:a2:b6:b5:36:1f:d1:
         3a:dc:2e:65:a0:e1:4f:c2:a7:de:be:4f:09:f8:27:b9:9c:3a:
         05:0f:90:1c:70:22:62:e0:51:1d:83:f5:52:88:8b:7d:cc:a5:
         08:cc:df:66:fa:dd:6e:34:3c:ae:4f:ab:1a:97:21:c0:40:79:
         14:2f:45:32:13:c7:81:2b:8a:05:f7:63:e8:38:38:35:c6:4e:
         44:ed:02:90:60:a0:26:1e:34:70:9e:ed:03:63:54:ee:69:fa:
         cc:35:75:4c:72:82:7f:2a:a3:ab:d6:ee:65:17:ea:d2:b1:76:
         e8:04:4e:9a:1b:f9:69:d2:86:77:c0:9d:67:c2:c1:5f:15:4f:
         7d:33:b5:63:2c:eb:33:09:48:75:ce:d3:f6:68:51:7e:77:61:
         a4:1a:5e:5f:60:d8:e6:f0:40:c5:2d:71:28:ea:01:a4:dc:86:
         27:ad:4d:6f:2f:ed:1f:d2:8a:a9:1c:cf:80:a1:3d:ec:51:35:
         a6:43:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:53:30 2024 by rpki-client on console-ams.rpki-client.org