Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File:                     B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier:          Kb5GsFNiDddk+vsMZBl0nMHkuCixYcooL+jDGJS/Myc=
Subject key identifier:   97:76:7B:31:7C:72:71:B6:FD:C5:BF:87:EC:6B:87:F0:7A:C4:F5:13
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer:       /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial:       019052115237EF2DCBD6B95611AA536EAEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number:          11E1
Signing time:             Wed 26 Jun 2024 01:03:05 +0000
Manifest this update:     Wed 26 Jun 2024 01:03:05 +0000
Manifest next update:     Thu 27 Jun 2024 01:03:05 +0000
Files and hashes:         1: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: skGoSxmBxeRF06pgN5st8zReO4gCelwB7y0ta+bS2rU=)
                          2: vBXIzmMooZKMog3VJrUIVMQmgno.roa (hash: k1uPixlDAIAWxS/SMCD1KN5W63Y3s/YrYSv6/9n81AM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:11:52:37:ef:2d:cb:d6:b9:56:11:aa:53:6e:ae:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
        Validity
            Not Before: Jun 26 01:03:05 2024 GMT
            Not After : Jun 27 01:03:05 2024 GMT
        Subject: CN=97767b317c7271b6fdc5bf87ec6b87f07ac4f513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:1e:f2:dc:41:73:2a:c3:10:5d:67:13:c0:
                    e8:14:33:7d:3f:3e:37:b3:ef:28:fb:11:6d:de:eb:
                    71:b7:dd:90:eb:08:73:15:3d:79:cd:d0:87:e4:27:
                    00:1b:81:e0:21:27:9f:d5:ae:67:0e:78:3f:16:2c:
                    bb:b2:c4:34:a9:54:68:7f:e1:c6:04:bb:ee:cb:96:
                    43:fe:68:80:02:a9:5f:05:1b:a7:f8:cf:43:4e:08:
                    26:ab:0d:cd:c8:95:95:a0:13:96:06:ce:9a:7f:83:
                    f1:d9:ab:a8:28:6b:70:49:72:40:cc:52:22:93:59:
                    f9:03:3b:b9:43:0f:f3:8b:00:f8:c9:ca:b3:13:d7:
                    15:3d:9d:45:49:8a:f0:d5:1d:34:fb:9f:94:4e:e7:
                    a1:78:34:17:4c:f0:16:83:a4:0f:9d:03:46:85:50:
                    a5:ed:76:91:83:ee:f3:ae:e5:94:14:91:a3:2a:f7:
                    32:6d:5f:e1:74:c2:7a:59:07:f9:1c:d6:2a:d0:6e:
                    20:5f:14:22:67:c8:10:1d:2a:50:46:53:8b:25:5e:
                    e8:31:ff:42:cc:6f:53:de:52:9d:2e:d5:72:f1:4b:
                    b5:3f:cd:f1:fc:a8:4b:de:21:17:12:de:65:63:f3:
                    97:e0:d4:20:02:b5:d8:3f:6b:8a:7b:df:a4:8a:ef:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:76:7B:31:7C:72:71:B6:FD:C5:BF:87:EC:6B:87:F0:7A:C4:F5:13
            X509v3 Authority Key Identifier:
                keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:00:5b:a1:84:61:3b:6d:69:e2:ba:3c:69:5e:6d:a5:5b:8f:
         86:28:f4:b5:55:be:b6:93:ca:fc:5a:e3:8a:e0:72:b2:22:15:
         d8:29:6f:95:31:78:1b:bc:93:9f:4c:80:16:bf:96:fe:43:1f:
         e8:04:76:cd:3c:52:58:3c:75:f6:66:f7:53:79:aa:79:b8:aa:
         92:cb:74:1b:1d:a7:3e:ed:a6:e3:fe:42:26:32:7c:af:d0:34:
         f3:8e:bc:e2:21:a3:bd:32:14:aa:a9:18:4c:88:10:7c:ba:2a:
         8b:89:04:fc:5b:0a:28:a0:5e:77:76:06:83:99:41:87:83:9e:
         cc:15:6a:c9:eb:c5:3c:c8:bc:07:b8:5a:c3:00:a3:20:5a:f8:
         e2:01:05:b8:60:76:4a:87:8c:30:f3:3b:88:bd:6b:a4:25:f9:
         57:e9:03:41:17:33:01:58:82:91:67:ed:3e:38:82:47:df:f2:
         b2:91:05:b9:00:8b:d3:db:61:21:b3:47:55:9e:eb:6f:eb:29:
         db:a3:39:89:ac:eb:94:df:a1:14:8c:13:94:ae:38:54:78:a5:
         e5:0e:9c:1d:c5:bf:a3:e4:72:ea:68:b2:9b:94:2b:54:23:b0:
         b5:b9:a3:33:3c:0f:01:66:20:6e:ee:74:76:02:19:b5:75:7b:
         ad:67:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:04:30 2024 by rpki-client on console-ams.rpki-client.org