Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
File:                     _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json)
Hash identifier:          8ZIfL81UedsOurJ0V+sn+dY1DaEElkyS5lmSNtRoo1U=
Subject key identifier:   A6:83:FE:47:5D:60:50:BF:76:0E:95:8E:B7:A7:9A:D3:40:1A:09:40
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Certificate issuer:       /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial:       01902A263109BA61B156605B02F5ED584175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
Manifest number:          11CA
Signing time:             Tue 18 Jun 2024 07:01:04 +0000
Manifest this update:     Tue 18 Jun 2024 07:01:04 +0000
Manifest next update:     Wed 19 Jun 2024 07:01:04 +0000
Files and hashes:         1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: mu/xGH9R/lKEuT/Vv2ScB6oNYYww8KVLYZeo7IdPivY=)
                          2: _bpQxkOlq5E5sfD-TRrVShfO1_g.roa (hash: Cmap0SfmTY3ewNfpHCQp60zls00ay/Wfaow7zPF2W9U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:26:31:09:ba:61:b1:56:60:5b:02:f5:ed:58:41:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
        Validity
            Not Before: Jun 18 07:01:04 2024 GMT
            Not After : Jun 19 07:01:04 2024 GMT
        Subject: CN=a683fe475d6050bf760e958eb7a79ad3401a0940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:2f:d3:db:1b:70:96:8e:a5:ed:56:35:04:
                    50:61:1f:88:e9:9d:49:d2:ff:ab:92:e7:dd:23:71:
                    79:2c:3b:f0:ed:a8:dd:3e:d6:d4:40:6f:ff:9c:50:
                    e2:d2:79:ec:2a:18:ee:ea:1f:7c:dc:8d:9b:ab:d9:
                    62:bb:56:22:a6:37:01:67:f8:5c:2b:36:25:7a:a6:
                    1a:24:cf:19:bf:fb:f7:95:9b:10:d4:53:c7:78:37:
                    c1:55:35:45:53:cf:0f:ea:d0:99:a7:11:9b:aa:8c:
                    c4:ae:b7:32:e5:40:cb:8e:5b:d6:36:14:5c:a1:4e:
                    62:9d:1a:53:4d:55:72:7a:a1:23:d1:75:c7:f4:10:
                    de:08:ae:7c:0d:87:7d:48:59:38:d7:96:b6:e6:5e:
                    ac:1f:d8:33:e6:fd:81:de:af:0e:cb:b2:8b:db:50:
                    79:cd:b9:a9:41:63:7c:8b:b2:99:ba:69:7a:ba:8a:
                    ce:e0:b4:48:7f:38:05:44:ea:71:7f:e9:9c:5b:72:
                    15:73:b5:44:88:43:29:87:45:5a:8c:3c:c9:b0:a7:
                    77:da:52:de:df:a6:51:f8:50:8d:f8:ba:1a:04:b2:
                    18:26:86:81:92:13:da:c7:58:61:25:ee:54:70:15:
                    1c:6f:cf:a9:1a:fb:5b:38:85:68:b6:fd:93:85:dc:
                    51:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:83:FE:47:5D:60:50:BF:76:0E:95:8E:B7:A7:9A:D3:40:1A:09:40
            X509v3 Authority Key Identifier:
                keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3b:86:76:5d:d7:57:a7:3b:00:0c:6d:b7:fc:d0:1d:4a:97:
         ee:86:82:17:a8:12:8b:2c:3a:d0:64:9a:8d:f6:75:62:1c:ef:
         26:d3:6f:54:e4:1d:e9:7a:99:9c:67:b2:3e:af:bb:a4:18:e4:
         c3:13:20:03:a6:25:4e:96:0d:4a:05:1c:1b:e2:e4:74:9f:30:
         a5:2f:88:b4:a1:5b:ab:a7:60:c0:55:45:c7:81:1f:52:d9:5b:
         4f:5d:22:1f:2b:7c:96:f2:06:af:ed:9d:3c:17:fd:ba:11:eb:
         4f:52:1d:36:7f:59:97:cc:09:5f:56:5f:4d:e5:b2:d8:f0:bb:
         90:a6:74:4a:92:db:fd:11:99:c3:52:48:e1:01:88:a7:f8:8d:
         9d:2a:3a:4b:c7:a3:e6:61:e3:27:9e:1d:69:09:ed:d0:83:94:
         58:14:8c:66:88:0e:cc:9e:69:a5:c1:42:c8:d9:ec:25:d5:86:
         93:70:5f:3e:62:7c:29:c2:3f:4f:9f:fb:02:39:e3:4c:37:d9:
         9c:9e:99:87:35:b8:89:17:d6:d9:ed:5d:19:f4:50:76:4f:ba:
         95:32:1a:21:29:1e:00:a3:cb:3e:d9:a0:13:9d:e6:1c:46:da:
         36:25:4a:1f:79:f8:47:6f:52:c3:16:4e:fd:59:30:bf:5d:0d:
         21:cd:51:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:29:10 2024 by rpki-client on console-ams.rpki-client.org