Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File:                     C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier:          GdUO7SjJV7cJ6XtbzN1P6xhPohMtIXNr8KZE5ut3s44=
Subject key identifier:   1B:CE:9B:7D:96:DF:83:13:76:21:E1:03:FA:4E:93:E0:BA:76:CD:0E
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer:       /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial:       019025A5B36170765368DCFBFACF2B9FB678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number:          0636
Signing time:             Mon 17 Jun 2024 10:02:14 +0000
Manifest this update:     Mon 17 Jun 2024 10:02:14 +0000
Manifest next update:     Tue 18 Jun 2024 10:02:14 +0000
Files and hashes:         1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: r30lhKj15OBD3CYAQo5f1L6CMi2W8ym08+YTfUuCUXg=)
                          2: RauWIj58c4UpxDKxLTJCEEAxkpE.roa (hash: aTCw/6EDu21zvqSXFFQCc9oljB3cmV+ddzW2r3mHbrw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 10:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:25:a5:b3:61:70:76:53:68:dc:fb:fa:cf:2b:9f:b6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
        Validity
            Not Before: Jun 17 10:02:14 2024 GMT
            Not After : Jun 18 10:02:14 2024 GMT
        Subject: CN=1bce9b7d96df83137621e103fa4e93e0ba76cd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:c6:cc:04:49:3a:f5:86:fb:38:ec:ae:89:
                    b8:75:b1:59:84:c9:4f:9a:9b:b3:25:bb:ec:c9:a2:
                    db:f3:1f:e6:3e:2c:46:b5:2c:62:6b:71:69:f0:e8:
                    a5:69:74:52:31:1c:18:cd:4a:c3:e6:81:d7:b6:15:
                    ed:6a:b6:19:42:e4:8d:07:c2:71:ec:26:8d:2f:36:
                    bb:52:9c:2e:75:95:6a:e6:81:57:d0:5d:4b:78:39:
                    d0:18:92:f3:53:5a:aa:69:74:99:f3:1b:e5:62:82:
                    0d:a3:aa:38:41:aa:02:46:d7:5d:65:6f:1c:64:91:
                    b5:da:e4:66:09:f6:61:91:e7:9e:f6:5e:ed:b7:5f:
                    13:7e:83:22:b0:10:ca:ae:18:cf:ee:e0:44:06:98:
                    53:66:73:5e:02:b3:de:c6:96:da:17:c0:9e:90:cc:
                    a4:f6:77:4d:2b:b9:2f:fd:98:94:63:95:9e:ca:37:
                    9f:84:d7:4f:56:57:fc:dc:2b:f2:db:2b:d5:64:dc:
                    00:2b:86:26:de:4c:ab:51:e4:1b:b3:d7:33:c0:aa:
                    be:62:84:d9:6c:f5:c7:3d:4d:64:0d:e1:92:66:77:
                    e7:5d:45:3f:8a:d5:bf:df:40:34:f1:49:b8:9e:1b:
                    55:e0:4f:67:41:35:17:1e:c0:e2:31:ee:4a:9f:0c:
                    c9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CE:9B:7D:96:DF:83:13:76:21:E1:03:FA:4E:93:E0:BA:76:CD:0E
            X509v3 Authority Key Identifier:
                keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:bd:27:06:be:86:ee:60:f5:44:ee:38:82:82:2f:15:5e:
         1d:e8:bd:34:5b:58:79:d8:9e:d7:49:56:d7:1c:3a:bb:cc:2c:
         8f:6a:29:22:9b:44:e7:13:23:e0:01:bf:f6:f5:35:4d:4c:03:
         ff:8f:4f:b4:dd:7d:5e:09:f9:09:c9:11:d2:37:31:83:f0:36:
         c2:f8:0b:52:26:9e:e9:41:bb:12:2f:fa:e0:ae:2f:e8:02:34:
         41:99:72:02:b1:b8:ed:5b:4b:96:56:86:dd:9e:2c:6c:9e:d8:
         1c:3a:bf:14:12:21:87:69:c5:67:6b:e0:71:b8:06:e1:f4:9a:
         85:eb:de:46:26:83:5e:3a:e9:68:93:1c:2f:c1:b7:07:0d:9a:
         0b:b8:a0:41:ba:0f:97:41:cf:59:06:36:86:af:c8:97:bf:a4:
         a5:b0:ff:34:bc:2e:4a:56:fd:1a:4d:eb:e2:ea:28:ce:85:f8:
         43:03:89:00:f7:a4:a4:3e:82:c4:ef:75:dc:47:41:f1:3d:3b:
         d3:a8:d3:16:69:e8:85:37:67:f0:29:f9:79:a7:96:a9:d3:a3:
         d7:eb:0a:1b:c7:b3:f7:a2:16:8f:8e:7d:d2:f9:aa:89:79:f0:
         df:2b:13:47:f0:83:cd:a3:1f:01:01:12:c5:fb:14:89:7e:ac:
         de:78:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:06:22 2024 by rpki-client on console-fra.rpki-client.org