Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File:                     1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier:          bXMMIM2yZ3KI0nVpVCjq2Z5KTCAuv8h4Xk3JS+tCcRU=
Subject key identifier:   CA:B8:E6:51:9F:DC:6E:46:9E:F5:A2:2D:B8:1C:3F:C6:DD:53:C6:21
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer:       /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial:       01905358EB6698A749FF2FE74C3CE1BBBD5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number:          11E1
Signing time:             Wed 26 Jun 2024 07:00:54 +0000
Manifest this update:     Wed 26 Jun 2024 07:00:54 +0000
Manifest next update:     Thu 27 Jun 2024 07:00:54 +0000
Files and hashes:         1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: BqwpOMopig5QTuEhPeCDBtp8U0k54fykJ6AdmnKAnsE=)
                          2: 6G-7DNn5r1X--f0ZG0pvtCZBEnQ.roa (hash: 4yNbO4qdE37IgG1Z3g2kHP7ACidSlQaVnCOZpBIS4sM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:58:eb:66:98:a7:49:ff:2f:e7:4c:3c:e1:bb:bd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
        Validity
            Not Before: Jun 26 07:00:54 2024 GMT
            Not After : Jun 27 07:00:54 2024 GMT
        Subject: CN=cab8e6519fdc6e469ef5a22db81c3fc6dd53c621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:fc:3a:ca:86:5e:d7:0e:c6:ca:aa:e1:bf:
                    2f:09:a2:d9:1a:5f:c2:8d:49:cf:74:5a:2c:8a:69:
                    93:04:65:72:f8:e8:0d:64:9b:33:5d:da:4f:60:e6:
                    5e:6d:38:d1:23:fb:24:68:cc:2b:bf:b3:37:53:ab:
                    3a:6d:c0:a9:23:fb:d1:61:a4:c9:a6:ae:bc:94:53:
                    92:14:b4:2d:c3:c6:62:50:85:2c:50:c0:c1:7e:6a:
                    6f:5f:12:88:23:a9:7f:8e:80:67:e5:7f:a2:c9:ba:
                    9f:52:1f:c8:eb:bb:cb:39:08:25:bf:ea:b0:aa:ee:
                    bb:f7:c9:db:07:b4:ea:86:d4:c4:58:d8:b0:3a:ad:
                    30:8f:75:85:46:07:d6:57:aa:4d:57:9b:89:89:bd:
                    e0:47:86:3b:ac:e4:21:79:85:6a:11:5c:88:35:46:
                    6a:b0:a7:d0:42:3f:95:ce:99:33:06:4b:f7:c1:d6:
                    a3:06:fe:97:8c:a1:6a:77:35:74:fe:b8:0c:bf:0e:
                    95:db:43:79:af:09:53:fe:6d:5c:ad:92:5b:38:cf:
                    94:e0:5e:41:72:21:a2:6d:3c:d3:b9:a6:35:03:78:
                    98:1e:29:ba:0a:c3:b0:be:a3:4e:4c:13:76:8c:95:
                    05:93:1a:21:87:43:3c:54:34:4c:55:a7:a6:b9:ad:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B8:E6:51:9F:DC:6E:46:9E:F5:A2:2D:B8:1C:3F:C6:DD:53:C6:21
            X509v3 Authority Key Identifier:
                keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a1:5c:4d:76:e3:71:c4:e4:4c:1e:b1:f6:30:5e:fd:80:f4:
         6d:7c:13:83:13:91:6a:b5:0a:74:df:e7:40:71:15:75:05:5c:
         95:66:7d:8a:f8:30:29:c7:fd:a4:93:bb:c5:6b:2e:d0:51:bf:
         30:82:1b:ca:19:f4:7b:af:b2:c3:62:b2:b9:22:52:32:52:15:
         91:59:4f:f6:18:c7:31:a6:7f:15:ae:40:82:6e:1e:29:ce:28:
         10:5a:c5:f0:4c:81:5f:cf:0d:9d:6e:e7:50:64:50:cb:1e:99:
         4d:5b:32:ae:a3:5b:9d:76:f3:81:54:9c:27:40:ae:c0:d6:38:
         3d:3a:d2:a9:7f:6b:9f:2a:2c:91:fa:ef:1c:24:95:15:00:2e:
         8d:a2:76:50:6d:f4:75:ec:dd:33:11:26:1f:83:78:1f:55:0e:
         b5:9f:be:ef:62:f8:70:bb:f6:de:56:d3:6d:e2:a9:1c:b3:bb:
         3d:f4:ad:0b:21:d5:92:74:a7:ea:ab:63:ef:ef:a2:a6:4f:e3:
         e4:11:80:00:b4:be:8e:bf:2a:b4:9c:8d:97:28:e2:55:cf:5e:
         7b:a2:d4:36:75:4f:ce:a5:ab:a6:07:69:fb:44:73:97:64:44:
         8b:50:74:6e:ad:46:23:e5:11:52:2a:7c:6d:8d:f7:54:2e:d4:
         1a:9e:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:47:25 2024 by rpki-client on console-ams.rpki-client.org