Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File:                     md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier:          Tn5XgK+cwwq+RDvrHZ7Z2fxzeZyMhis1vJCU6CzhoK8=
Subject key identifier:   BF:85:5D:D5:3B:81:CB:62:84:41:57:08:51:AB:A2:D8:87:7D:75:61
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer:       /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial:       018F8635942B6BA813534F44411CAFC69DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number:          0B61
Signing time:             Fri 17 May 2024 11:00:09 +0000
Manifest this update:     Fri 17 May 2024 11:00:09 +0000
Manifest next update:     Sat 18 May 2024 11:00:09 +0000
Files and hashes:         1: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: +VCKOaJ6OVb/vpLIxhEN15qZJB4Q9Be5jK02YYY9Vyg=)
                          2: ogNQzi7HEBODKuqOdpA7kLwg4Ns.roa (hash: Dryouedj5k2fw1IGto73Bmz1rrsygej3wSiW3JRIXm4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:94:2b:6b:a8:13:53:4f:44:41:1c:af:c6:9d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
        Validity
            Not Before: May 17 11:00:09 2024 GMT
            Not After : May 18 11:00:09 2024 GMT
        Subject: CN=bf855dd53b81cb628441570851aba2d8877d7561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:10:4f:07:22:11:a0:97:cf:d0:28:26:9b:
                    ec:4b:27:42:9f:89:4c:0d:d5:25:84:62:93:60:59:
                    b3:b0:67:9b:63:69:65:74:77:6f:10:2c:eb:64:26:
                    1e:08:87:c8:c5:ec:9b:16:2d:bd:12:d1:41:f3:cd:
                    99:bc:b6:c4:5b:2c:81:46:e4:1d:4e:45:8d:c4:ed:
                    e0:c9:34:55:bf:6a:b8:9d:40:4b:5a:54:44:a5:f0:
                    58:bf:d7:17:fa:18:22:36:67:f2:26:0c:eb:43:c9:
                    cf:ef:f0:54:3c:0e:0f:1c:de:a0:51:24:44:5d:65:
                    f0:27:5e:a7:e9:d8:2a:7b:3b:7e:2a:3d:26:58:d7:
                    e8:43:6a:dc:ec:81:e3:82:1d:6f:18:e5:fd:dc:03:
                    f9:57:27:91:6b:7d:6c:11:6a:81:3a:cc:db:89:f0:
                    f7:5b:ea:fd:15:f4:31:3d:79:d5:fc:24:69:ab:1e:
                    07:a1:dd:b9:c3:5b:fd:d4:e3:d7:5b:5d:f3:6b:1a:
                    27:3d:7f:bb:0f:86:e3:d6:1f:ca:4a:2d:37:7d:8b:
                    7e:76:1f:2b:02:f6:bf:9b:83:79:4e:b1:b2:e2:7c:
                    8a:82:6c:4c:a7:34:c7:01:3d:fb:9b:a8:8a:f8:a9:
                    8c:68:35:0d:cf:fd:fe:3c:68:60:78:ca:af:c1:7c:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:85:5D:D5:3B:81:CB:62:84:41:57:08:51:AB:A2:D8:87:7D:75:61
            X509v3 Authority Key Identifier:
                keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8c:12:20:50:6d:a5:8d:9e:ac:aa:54:a3:29:f9:d8:2a:3f:
         07:e4:3c:92:bc:fe:2d:59:2c:bf:36:98:1d:80:a0:59:49:ac:
         bf:11:22:11:3d:bc:83:39:df:f4:aa:a1:a6:93:68:42:10:b9:
         cc:6f:2c:bc:bd:6c:98:bd:a1:6e:4c:0b:d3:bd:ac:65:7a:f9:
         0f:b8:c1:95:b3:9a:4f:8a:91:32:14:14:ec:c7:11:b6:8b:f2:
         a2:fa:97:c3:95:2d:a2:02:7b:a5:48:2e:4e:03:4d:00:82:81:
         92:74:61:25:37:36:48:85:db:17:81:3b:15:94:6c:fa:23:e7:
         05:df:ab:04:f8:83:32:4f:aa:cd:a5:05:c3:f8:bc:97:4d:24:
         a2:85:e0:2d:4b:85:49:63:cc:9b:1e:11:52:ac:30:16:1f:4a:
         c2:fe:95:05:38:da:80:91:53:cd:65:48:b2:49:18:70:c8:44:
         ea:43:f0:42:82:f6:1b:9a:7a:c4:dd:e1:3d:61:9f:f6:bf:66:
         dd:44:a0:97:9d:0d:e5:f9:d8:89:69:6b:1f:3a:1a:c7:9f:fe:
         0c:05:74:c8:c0:d1:f2:ec:81:d4:1e:60:d9:d3:5a:92:1f:e5:
         5c:9f:77:2f:7f:1e:78:46:26:70:05:a4:28:cb:70:b1:dd:55:
         c9:c5:32:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:47:21 2024 by rpki-client on console-ams.rpki-client.org