Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File:                     9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier:          tCeXLpKYq3pjddE8bFiIyD/IKQZtMW1O3YaKh2w3Qio=
Subject key identifier:   BB:A8:C5:3A:F1:1F:2B:A4:26:3F:35:D4:18:BF:6F:E7:09:12:19:CF
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer:       /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial:       018F460E1D07C001CA41C5CB30A92D97DFDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number:          106C
Signing time:             Sun 05 May 2024 00:01:20 +0000
Manifest this update:     Sun 05 May 2024 00:01:20 +0000
Manifest next update:     Mon 06 May 2024 00:01:20 +0000
Files and hashes:         1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: pTRgWUGY55e/rLU+jOzi4EAWtVGdgWFFR4BHobxADOA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0e:1d:07:c0:01:ca:41:c5:cb:30:a9:2d:97:df:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
        Validity
            Not Before: May  5 00:01:20 2024 GMT
            Not After : May  6 00:01:20 2024 GMT
        Subject: CN=bba8c53af11f2ba4263f35d418bf6fe7091219cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:63:e0:93:5f:03:f7:0a:83:ab:fe:f1:02:
                    2a:6f:f7:09:01:77:e1:70:c0:b1:1b:60:d1:fb:69:
                    ca:f5:3f:72:2b:da:10:8d:c3:ef:21:48:e1:a2:5d:
                    8c:38:0f:4e:d7:e7:d4:00:a0:3a:ae:55:48:ce:07:
                    31:d1:df:fc:40:41:01:95:9c:b6:9b:99:36:ea:f5:
                    5b:51:4a:cf:c9:d8:b3:08:72:3f:ab:df:37:ab:98:
                    1d:08:28:bf:0a:08:d7:04:00:f0:ce:a5:a1:4e:7a:
                    b5:95:36:f9:5d:7a:4b:53:af:89:09:17:73:f5:e0:
                    04:99:23:76:f5:43:1c:68:79:7c:0f:bf:92:a1:ec:
                    20:b9:04:eb:60:c6:75:a2:48:a5:a9:56:1e:81:27:
                    df:a3:4e:12:49:27:e8:5c:2f:e0:f0:9f:c6:18:96:
                    44:56:14:88:fd:7d:62:c9:c1:6b:48:fe:fb:05:aa:
                    49:db:df:2c:40:6b:ba:d2:a3:74:3d:0d:4f:90:ef:
                    63:4d:6a:a1:41:9b:d0:ed:c8:d4:15:7e:b5:31:9c:
                    32:97:b0:36:61:6f:b6:81:9e:5e:36:9b:d6:be:95:
                    af:6b:81:4a:23:00:8f:ab:80:a8:da:cf:64:cd:c5:
                    62:cc:12:7f:7d:6c:fd:8e:93:41:e5:3a:f8:de:18:
                    ea:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A8:C5:3A:F1:1F:2B:A4:26:3F:35:D4:18:BF:6F:E7:09:12:19:CF
            X509v3 Authority Key Identifier:
                keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e3:b1:80:a5:e9:7b:8d:1d:c9:58:78:ae:df:c3:ef:3b:ef:
         ba:36:71:3c:67:2a:f7:28:d8:ff:b5:fb:3c:48:94:99:a9:d3:
         f2:75:f5:4a:b6:51:5e:5f:68:3e:53:7a:7d:a4:b9:a3:52:4e:
         cc:a0:4c:de:55:ff:4d:3b:f5:37:5b:b0:04:14:6a:9a:e4:09:
         16:0d:7a:4b:6e:3c:60:37:fe:0c:3d:fc:ca:91:1c:1e:e9:11:
         83:35:9b:cf:ee:ec:52:4a:c9:a9:b5:8c:eb:0f:e2:2a:6b:4e:
         8e:e6:cf:3c:51:d7:dd:a6:c9:6a:ab:82:2a:67:b5:46:19:34:
         b4:55:29:ad:27:52:ee:66:16:7c:0d:30:aa:4e:ec:10:9c:95:
         f9:af:33:d7:f6:57:df:a2:36:be:60:55:49:b8:4f:ae:41:39:
         8e:37:d3:c4:f2:f0:63:39:e9:ad:de:42:be:2c:56:af:5c:c8:
         aa:3a:a1:6c:42:a6:6d:d9:95:5f:b0:61:4e:85:29:19:2a:4f:
         31:93:d9:82:b7:e7:d0:97:67:0f:71:8d:1a:47:1a:f7:af:b8:
         ea:fa:31:79:d3:59:8b:a0:ad:86:2c:4d:44:16:f7:da:95:52:
         8d:ea:d4:e4:49:45:e9:54:6f:79:0d:eb:31:ae:06:49:39:12:
         82:1d:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:30:09 2024 by rpki-client on console-ams.rpki-client.org