Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File:                     1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier:          Iqx1q7+/eYT/dhRgvxVLaUnmGvh7GCOhMCRhKF5r5Ks=
Subject key identifier:   AB:AF:15:B5:21:7C:06:8A:BD:8B:79:27:34:66:E7:D5:75:1B:67:34
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer:       /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial:       01906E2AE0456C39CA23B9633318ECD5C8DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number:          1133
Signing time:             Mon 01 Jul 2024 12:00:21 +0000
Manifest this update:     Mon 01 Jul 2024 12:00:21 +0000
Manifest next update:     Tue 02 Jul 2024 12:00:21 +0000
Files and hashes:         1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: jOtU9n2Lnir+rSciFFj54FXZLYuAN2c/gR2/jk8btxE=)
                          2: RUup6ZAYEB0NU4Ezdzj7YZPHSFQ.roa (hash: EcWja9P/r40KDFV6S56pWkNEWfNgYdWfx1gNKqYfAKs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6e:2a:e0:45:6c:39:ca:23:b9:63:33:18:ec:d5:c8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
        Validity
            Not Before: Jul  1 12:00:21 2024 GMT
            Not After : Jul  2 12:00:21 2024 GMT
        Subject: CN=abaf15b5217c068abd8b79273466e7d5751b6734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:57:76:5e:88:01:82:42:cd:09:9e:57:94:
                    66:87:70:5d:f7:1e:a6:1f:f2:4f:f5:ad:ba:2b:94:
                    e4:bf:7c:e1:05:e2:f1:ae:b6:b6:93:5e:da:3c:e3:
                    4e:49:2b:da:8a:9b:44:2d:56:37:de:02:4e:7a:08:
                    50:dd:fb:12:86:6f:88:e5:e7:10:00:c8:97:34:cc:
                    02:03:13:a8:8c:21:e6:8c:2d:3c:d5:55:8b:9f:fa:
                    e3:1d:a2:cd:1c:47:88:07:99:dd:a6:bd:05:1f:21:
                    d0:c0:8d:ed:2a:58:4d:0c:48:ad:cb:c5:c1:86:94:
                    9b:a0:00:90:69:23:8c:7a:4d:b2:ea:8a:4c:32:02:
                    b9:f9:d0:be:ad:97:41:f0:f7:a8:d6:e4:23:1c:51:
                    d1:82:a7:09:b8:96:83:d0:26:f6:c3:89:9d:d7:b5:
                    6c:a6:c4:1e:8f:bb:f3:c2:ad:6c:e3:e2:c1:5e:3d:
                    16:00:c4:f5:98:bc:8f:c3:68:9a:87:06:09:bc:93:
                    ca:a6:b7:f6:2d:7d:1c:4e:2d:2b:88:79:cb:50:12:
                    b9:59:4b:63:9e:28:58:26:97:48:9d:a4:cf:b6:1e:
                    dc:42:d0:40:0a:8d:6d:d8:09:40:51:5c:66:28:fc:
                    b8:59:6f:20:ad:08:67:f5:09:ff:38:f6:b4:19:9f:
                    3d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AF:15:B5:21:7C:06:8A:BD:8B:79:27:34:66:E7:D5:75:1B:67:34
            X509v3 Authority Key Identifier:
                keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:83:9d:03:f3:3e:6b:52:ed:f3:b9:20:09:1f:51:f0:3f:d2:
         ad:ca:49:f4:4e:5e:16:f5:84:e2:8e:93:ce:6b:df:9e:36:18:
         52:75:05:1c:03:43:3d:52:36:4f:44:4b:ed:56:a5:bf:58:5d:
         46:92:b2:8c:e3:21:eb:9c:c6:54:0a:2d:5c:e1:d5:38:85:ee:
         a3:21:a3:64:6b:18:25:b8:b9:d7:4d:f1:c8:4d:e8:5b:fb:9a:
         e7:e2:13:60:49:f9:69:27:bc:d3:52:de:d0:6e:03:5f:81:e2:
         45:42:84:b8:0a:74:f5:e7:b4:41:32:22:86:19:48:07:57:4a:
         2e:80:e1:37:cf:86:f3:34:78:62:1c:9a:26:54:e1:b3:d0:b3:
         29:d9:9b:cf:f2:7d:09:58:e3:4e:07:5b:c3:c1:f3:fc:02:2f:
         d3:41:48:28:05:a6:e1:41:0c:48:01:47:38:1f:2c:40:a0:2e:
         b6:06:70:48:9d:13:77:f1:7b:a3:68:d2:e0:e6:c4:24:2a:3c:
         5a:d7:dd:21:51:db:cd:5b:26:57:09:5a:ac:b6:79:78:e8:5e:
         23:c5:20:2d:1b:52:dc:09:48:ac:50:c4:ec:7d:35:7c:e0:be:
         bd:d7:56:9c:a2:d5:f1:f9:8c:04:69:d4:61:a4:1a:12:0f:6e:
         fd:5a:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 19:33:33 2024 by rpki-client on console-ams.rpki-client.org