Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0db829-6ebe-482a-a412-61fd1df95727/1/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.mft
File:                     CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.mft (raw, json)
Hash identifier:          WV0Z8n/XB7VIIDseZ2xFlKmDQQiRtBXpO5WO7+/2CNQ=
Subject key identifier:   2B:01:51:FB:E1:8C:76:7D:1B:D3:00:47:49:B9:38:A2:09:4A:03:37
Authority key identifier: 09:7B:60:35:E5:71:7F:C9:3A:83:E3:E3:EC:81:7E:66:07:64:38:44
Certificate issuer:       /CN=097b6035e5717fc93a83e3e3ec817e6607643844
Certificate serial:       01901AE9D210168346BE5D59116D2EF78E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/0db829-6ebe-482a-a412-61fd1df95727/1/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 08:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 08:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 08:00:49 +0000
Files and hashes:         1: CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.crl (hash: OLAWQtI4W7ew669kG2ccJkQTHSNMDjfjYNeGSTC6Dhs=)
                          2: F3EQQaS0u0Bp8t-nT_FHt0PFgeg.roa (hash: yvbEmWncChjDk9U9IcxH9S48aJ0JdVl3/pgLr/MJm2A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/0db829-6ebe-482a-a412-61fd1df95727/1/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/0db829-6ebe-482a-a412-61fd1df95727/1/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:e9:d2:10:16:83:46:be:5d:59:11:6d:2e:f7:8e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097b6035e5717fc93a83e3e3ec817e6607643844
        Validity
            Not Before: Jun 15 08:00:49 2024 GMT
            Not After : Jun 16 08:00:49 2024 GMT
        Subject: CN=2b0151fbe18c767d1bd3004749b938a2094a0337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4c:5d:e3:27:91:dc:7a:40:0f:a0:f5:a8:de:
                    6d:2d:e8:f3:1a:8c:30:4d:6f:45:5d:46:be:e9:a0:
                    f9:d0:e5:78:0f:ff:05:c3:b2:bd:44:06:3f:0e:5f:
                    a6:e5:b5:4d:c4:18:7f:92:8d:3e:3e:3d:32:83:8a:
                    58:b9:af:86:71:99:f4:f4:49:9f:98:f6:b3:b4:1e:
                    9f:9e:51:61:00:2f:d3:0d:f1:58:3b:9e:05:7f:57:
                    fd:80:13:f4:d9:7a:97:3a:a9:b1:2e:22:b8:ab:04:
                    f7:d6:f6:aa:1d:6d:a8:5f:f8:14:0f:0c:9d:9c:91:
                    b3:a8:9f:53:ee:c6:5d:04:7b:cf:2c:65:54:94:f4:
                    23:2c:3c:13:cc:7f:5f:22:dd:ad:89:2c:69:9e:a2:
                    5e:8a:56:2f:db:0d:c0:cf:2b:f6:1e:a9:34:81:55:
                    7d:7d:29:85:67:da:31:b9:d3:f9:fc:78:62:2d:0c:
                    47:e4:be:89:90:d4:ea:f4:07:4a:45:b8:3d:d7:5c:
                    a6:42:5d:17:4f:86:d4:58:e9:53:92:b0:84:cf:35:
                    00:3e:44:c7:10:4c:5e:9e:01:04:19:4a:d1:4a:a6:
                    a2:a7:df:f1:dc:ed:98:93:7d:b3:52:b7:26:3a:27:
                    0c:9b:df:59:fb:53:01:7b:f4:02:d6:96:89:76:ba:
                    80:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:01:51:FB:E1:8C:76:7D:1B:D3:00:47:49:B9:38:A2:09:4A:03:37
            X509v3 Authority Key Identifier:
                keyid:09:7B:60:35:E5:71:7F:C9:3A:83:E3:E3:EC:81:7E:66:07:64:38:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0db829-6ebe-482a-a412-61fd1df95727/1/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0db829-6ebe-482a-a412-61fd1df95727/1/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7e:3b:09:c6:c6:98:c8:b1:da:0e:b4:32:97:2e:77:67:34:
         18:99:bc:3e:b5:6b:13:fc:fb:7a:a0:ce:32:58:c8:85:7c:80:
         18:9a:a2:8a:c0:75:d4:06:7f:65:5e:34:2e:4c:43:61:b3:01:
         21:ca:37:15:6f:b3:0a:2a:e4:c9:71:39:fb:13:67:35:ee:f5:
         09:c7:c6:e4:75:2e:e1:ee:60:49:c3:ae:6a:37:56:87:4e:8e:
         04:c6:72:61:96:79:61:36:df:b2:da:b8:c8:96:0f:c8:1e:54:
         e3:35:4f:35:cd:e9:e2:66:6f:e2:df:71:34:d6:d8:b5:bf:dc:
         fb:5f:ab:a3:c5:20:d6:6c:71:34:30:74:ee:21:cf:1f:16:93:
         1c:d9:d8:2d:d3:c1:13:c7:14:fd:af:fd:40:07:dc:df:73:f0:
         17:0a:b9:50:8b:d0:6c:13:31:a0:b0:13:be:06:2f:76:ab:ba:
         e7:f9:67:cd:05:a6:c4:39:9f:e4:15:8c:28:53:0b:92:9c:16:
         75:fc:95:fc:70:01:68:82:a7:27:58:43:5c:a3:2c:89:6e:f5:
         c8:86:ec:d4:91:64:ce:ad:69:be:65:46:44:c3:ee:b5:b6:fe:
         5c:24:1c:0c:97:7e:2d:51:15:a6:0c:51:d9:94:28:07:95:81:
         8b:a0:b8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:10:40 2024 by rpki-client on console-ams.rpki-client.org