Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File:                     C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier:          Ci0zqkqCLtv8yibBKY7wR7UheDijykzJE7oiNRnSyLs=
Subject key identifier:   57:57:5E:CD:72:0F:69:64:84:F3:6F:03:52:21:AC:18:12:14:A1:45
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer:       /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial:       018FD3AC5A0512B7C9593B255BD51F8203CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number:          11A1
Signing time:             Sat 01 Jun 2024 12:00:38 +0000
Manifest this update:     Sat 01 Jun 2024 12:00:38 +0000
Manifest next update:     Sun 02 Jun 2024 12:00:38 +0000
Files and hashes:         1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: XqShCkhNme1YBrpvIzUmdIHTWuS08aTeoespC4P9ofE=)
                          2: pK-6EdoBzgHvOl8FOFou5sHcQa8.roa (hash: TpKsMI/atvmhcZn2ycq02yhXkLODdO3+7QaUGBqcoIQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d3:ac:5a:05:12:b7:c9:59:3b:25:5b:d5:1f:82:03:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
        Validity
            Not Before: Jun  1 12:00:38 2024 GMT
            Not After : Jun  2 12:00:38 2024 GMT
        Subject: CN=57575ecd720f696484f36f035221ac181214a145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:0b:1f:64:cd:5d:72:82:3c:0b:f8:1d:c0:
                    39:ed:89:ed:27:a2:74:f8:23:6d:3e:e5:be:e4:8c:
                    6e:12:14:a9:ff:70:cc:ea:7b:04:4f:56:e6:a5:42:
                    91:56:20:7e:11:ba:15:d2:c7:32:67:b8:61:d7:e2:
                    71:b7:2d:76:37:53:6a:4e:5b:73:5b:d5:1f:7c:60:
                    6f:a8:43:6d:c5:19:b5:00:98:76:38:a4:dc:60:10:
                    3f:04:2a:1e:eb:89:e4:67:fe:0a:23:36:81:89:2c:
                    46:93:b4:ca:56:31:8e:a0:29:70:7f:e8:eb:44:fe:
                    9b:63:d5:a5:bc:39:4b:07:28:0a:55:61:77:33:28:
                    78:20:11:ae:d5:93:4a:23:8a:63:b9:57:cd:2e:8e:
                    cf:8b:91:81:05:6f:cf:54:5a:88:2e:e4:2a:59:2d:
                    15:6a:b1:66:e5:39:80:70:8a:07:62:9c:fd:ce:57:
                    b2:a5:c0:8d:27:d7:01:49:61:02:5b:af:c6:ff:42:
                    cb:c5:19:ed:d8:26:76:93:a1:98:48:47:5b:1e:bb:
                    15:6e:23:02:a2:9f:bd:99:98:3e:86:c9:84:18:ff:
                    03:b6:53:e2:06:00:50:61:fa:ae:cf:f8:37:5f:f6:
                    b0:99:26:2c:9c:f7:c6:b2:2f:5b:1e:cc:a6:66:21:
                    ce:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:57:5E:CD:72:0F:69:64:84:F3:6F:03:52:21:AC:18:12:14:A1:45
            X509v3 Authority Key Identifier:
                keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d0:da:cf:85:a8:8e:61:38:e6:87:5f:0e:99:8b:16:a2:b8:
         17:51:7c:13:9c:9c:68:3c:d6:2d:1b:38:80:4a:a4:7b:cf:ee:
         89:a4:0a:41:84:98:2c:c0:24:55:cd:eb:e4:da:39:23:3b:73:
         2c:d9:e3:6f:a1:f2:c5:21:08:1e:12:a7:a1:64:87:d8:17:6f:
         9e:ea:bd:91:03:68:46:24:f8:83:84:2a:dd:37:95:c1:d7:58:
         c2:cb:a8:d2:06:11:49:10:d2:6b:26:55:08:a9:fd:7d:1b:82:
         26:00:9d:c2:b7:84:0f:ac:8d:54:e3:a6:44:82:02:d2:0e:31:
         2b:d0:9f:61:3e:69:2f:72:06:f9:55:a4:d2:d0:7a:9a:48:79:
         e6:af:af:f3:55:b3:ea:b2:85:d7:ea:70:42:65:71:39:ae:22:
         17:9f:3c:f6:21:8f:c8:0f:cc:9e:28:77:33:dd:23:d8:d1:c9:
         a9:42:96:4a:a0:d2:d2:bf:e8:e5:b5:84:03:ca:0b:37:fc:d5:
         f5:0e:1d:7b:c0:ff:e8:05:c8:03:51:0c:cc:f1:60:69:e3:f6:
         ce:08:3f:0f:47:22:3e:13:6d:a8:78:50:22:70:65:89:f3:fe:
         f7:05:47:6c:a7:11:d4:07:99:b6:08:c6:e0:88:f2:c8:97:46:
         f0:f0:af:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:44:00 2024 by rpki-client on console-ams.rpki-client.org