Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File:                     B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier:          GazQxDhUZlwXvOc0KnFSagb9+zzuHyzSG3obnXb3c88=
Subject key identifier:   35:5B:A1:56:D6:45:5D:A9:08:72:B3:48:19:99:F3:7F:03:70:0C:6D
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer:       /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial:       019025A68A95E0CEE91E3D395C9F6B63ABAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number:          11CA
Signing time:             Mon 17 Jun 2024 10:03:09 +0000
Manifest this update:     Mon 17 Jun 2024 10:03:09 +0000
Manifest next update:     Tue 18 Jun 2024 10:03:09 +0000
Files and hashes:         1: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: EHM3hNryUZkjxCnjmjNrcFaNumbOK7iTIZh0bPUoRv4=)
                          2: vBXIzmMooZKMog3VJrUIVMQmgno.roa (hash: k1uPixlDAIAWxS/SMCD1KN5W63Y3s/YrYSv6/9n81AM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 10:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:25:a6:8a:95:e0:ce:e9:1e:3d:39:5c:9f:6b:63:ab:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
        Validity
            Not Before: Jun 17 10:03:09 2024 GMT
            Not After : Jun 18 10:03:09 2024 GMT
        Subject: CN=355ba156d6455da90872b3481999f37f03700c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:3a:54:53:8d:a4:ad:d3:78:12:ff:88:58:
                    bd:48:e5:39:c0:b1:fb:88:a5:2a:b3:0d:2e:9d:5e:
                    af:5c:2d:9c:c9:6e:3d:17:3d:b4:aa:eb:08:b7:b0:
                    29:96:1f:4d:62:bd:f7:6d:8b:34:08:5f:37:c5:c8:
                    18:db:67:5d:f5:ff:84:84:67:85:dd:b1:d2:8e:6b:
                    3c:ed:27:fe:68:98:9c:b8:1d:a3:5c:c8:5d:8a:32:
                    a3:b1:e5:d1:bd:8a:9a:b3:ec:77:34:77:58:d8:1a:
                    95:f6:28:a4:8a:07:88:d0:a7:1e:a6:cc:ae:c3:59:
                    07:f8:54:ec:e8:83:1f:20:b7:df:7d:d2:43:65:79:
                    26:5e:dd:2c:44:70:67:ac:28:ea:02:92:4a:9a:10:
                    95:aa:77:1e:16:c8:cf:63:98:b1:fa:7d:08:bb:68:
                    18:2c:2b:5b:4f:db:fc:a5:07:20:36:de:c8:19:fc:
                    5d:6c:58:09:c2:76:0a:82:9f:80:57:3b:98:bb:c1:
                    a1:54:00:2b:0a:38:c7:84:2b:0b:6c:44:0f:a4:4c:
                    9c:71:84:d9:86:ac:62:c4:c8:5e:83:99:65:c4:36:
                    55:9d:bd:c9:16:8b:87:dd:1c:df:19:7f:22:68:d0:
                    85:81:f5:42:b0:3d:4b:6e:f2:05:c2:8e:e6:67:3f:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5B:A1:56:D6:45:5D:A9:08:72:B3:48:19:99:F3:7F:03:70:0C:6D
            X509v3 Authority Key Identifier:
                keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:82:da:91:af:4f:eb:9c:1e:03:97:29:03:78:e7:e1:cc:d0:
         34:9c:1d:b5:0e:63:88:c4:0b:aa:3e:4f:c8:b8:b9:86:93:b0:
         ec:96:16:93:ef:db:16:c9:00:de:96:7f:1e:5c:5c:53:cd:79:
         ba:7e:a7:32:0f:0f:8b:e8:1c:16:b9:75:b7:77:d7:fd:65:0a:
         ec:69:a0:9e:8b:dc:06:80:7f:1c:24:b3:63:64:12:62:6b:98:
         43:70:04:cd:a9:80:ca:67:6c:79:c1:da:d7:ca:19:b7:20:c4:
         cb:c7:7c:1e:da:4b:9b:55:f8:4e:83:13:d4:0a:7a:2b:fd:cd:
         14:51:de:31:c1:51:26:13:f5:72:c6:10:ce:ab:16:a6:19:81:
         7e:56:40:95:0f:10:f1:13:07:d5:c8:72:d2:6f:9e:44:da:46:
         b6:ba:9d:4b:d3:ce:ff:46:3b:ab:ec:2e:f2:bb:a0:32:6f:cc:
         80:85:17:85:da:4e:9b:fb:ee:61:d7:c0:bc:c5:e3:22:59:a0:
         fa:d5:d8:54:38:25:86:e1:b6:34:03:40:6d:65:d1:60:e8:8d:
         6c:77:70:5c:1f:fc:57:3d:49:00:25:6b:ca:5c:70:4e:aa:e5:
         e3:9f:8b:26:db:a9:77:a0:51:21:9a:36:5c:ee:56:6e:be:d0:
         c7:12:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:33:32 2024 by rpki-client on console-ams.rpki-client.org