Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          OOtnAnmelAyjqeMjS8sh139QxEaSCDlL7VEhZU/nAOw=
Subject key identifier:   1C:37:61:AA:CC:93:B7:43:58:58:5E:EB:56:1C:25:D9:D5:7D:B9:F4
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       019048681437A0FC9121A0A99079E630DFF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          11DB
Signing time:             Mon 24 Jun 2024 04:01:38 +0000
Manifest this update:     Mon 24 Jun 2024 04:01:38 +0000
Manifest next update:     Tue 25 Jun 2024 04:01:38 +0000
Files and hashes:         1: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: VofMAWCh3GmBVp1vHm2KEN8fwRFa2Tn0FzAx66wPXGE=)
                          2: mF_Rk_Zp87uZO2fBaWN2TgEj-YM.roa (hash: fkxoI9zs9ttOt6gnH/tLrXodZuc6sTLh2ptdeoYN02g=)
                          3: nKS9BS4UlTOyGY_fe5atnp1QWPg.roa (hash: rqfVnzgJro3gPSz/AtBwV3vkNO5pZFh656+Ar/ihLuk=)
                          4: sdnJQ14zQxHHGNy8feszKis2hVQ.roa (hash: sdphIQdeO6/sc5o15K0fF/2eEo151YLEL8XZxxRJmPI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:14:37:a0:fc:91:21:a0:a9:90:79:e6:30:df:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: Jun 24 04:01:38 2024 GMT
            Not After : Jun 25 04:01:38 2024 GMT
        Subject: CN=1c3761aacc93b74358585eeb561c25d9d57db9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:da:e8:4c:38:2a:fa:fa:31:1a:fb:a1:1c:
                    42:ab:0b:02:d6:ba:a1:6a:c8:61:90:66:04:df:29:
                    25:cf:3e:c8:84:10:35:c6:ca:16:dd:d0:39:89:ad:
                    9c:03:c4:54:c3:d4:f0:6a:54:a8:f8:0e:45:1f:40:
                    27:b8:23:57:99:1a:03:d8:13:f2:e3:c3:26:76:ad:
                    3a:9d:8f:65:c8:d7:af:9f:0c:69:16:bf:31:0a:27:
                    66:22:7f:cf:66:e0:04:7d:7b:78:a9:f6:d6:3c:9a:
                    1e:e7:42:df:46:58:fa:40:66:7e:ce:1f:82:0b:1e:
                    6a:33:2d:6f:7b:fe:21:63:ce:ad:f7:43:8f:c2:6d:
                    66:07:fb:72:d2:94:20:a0:aa:ae:b0:82:09:99:86:
                    bc:01:fc:3c:6d:5c:01:dd:43:b0:9c:f5:6f:c9:5c:
                    44:8c:83:8a:0f:91:ab:a8:11:38:0e:01:ca:88:a1:
                    cf:d4:12:84:9e:fb:05:c4:6d:09:48:d9:2f:30:d4:
                    66:70:c2:38:63:bc:29:02:64:ff:91:9a:f0:02:4d:
                    c3:15:6a:7f:b0:e5:42:41:e2:b9:f2:75:b7:ae:dc:
                    68:d9:71:10:e7:f0:2a:aa:c1:8c:a6:c2:5a:67:be:
                    be:a2:a2:66:ce:84:cd:e5:5e:42:17:6d:01:2d:7f:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:37:61:AA:CC:93:B7:43:58:58:5E:EB:56:1C:25:D9:D5:7D:B9:F4
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:42:cc:37:14:84:fa:1c:89:52:03:6b:a3:db:56:e8:ec:f6:
         60:67:17:e5:62:52:ba:f9:72:a9:b7:90:c7:d1:90:33:53:6a:
         95:5e:0a:c1:ed:eb:52:4a:ea:38:9f:10:e4:63:06:6e:7c:fc:
         fb:f6:2c:64:5e:72:30:0f:2c:9d:c0:52:06:a5:4f:6c:ef:79:
         eb:e6:04:d1:b3:67:18:08:be:c8:07:32:84:f7:99:1f:7c:01:
         02:a9:92:29:5a:17:4f:30:9c:ae:8e:d5:50:20:96:9b:0d:31:
         87:75:5b:e9:83:f5:ad:ab:cc:bf:bc:09:b0:99:f5:ad:3d:4b:
         04:48:75:94:ca:b0:3c:97:80:72:55:60:03:88:2d:b1:f3:eb:
         86:27:cd:7c:b5:d5:c1:95:3b:49:fc:7f:53:c6:d0:2f:9a:c0:
         d6:db:ae:06:93:5e:67:14:a9:bc:83:4b:0a:59:63:4a:b1:20:
         9f:da:86:35:c8:e2:c0:6f:90:d7:d5:36:87:3a:4b:0a:f0:32:
         bf:12:44:fd:10:ae:89:43:d2:0e:8b:03:46:5c:6e:02:ac:bb:
         9a:ab:e8:57:85:25:c4:b2:58:0f:5f:8c:8d:6a:43:cb:a9:f9:
         d9:35:4e:e2:dd:c4:bb:87:65:40:07:34:06:70:51:10:1f:ed:
         ab:64:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:38:57 2024 by rpki-client on console-fra.rpki-client.org