Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File:                     2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier:          2QWOm6fIyqO05+TBMplzw/oboAA8AWVIJ95GJgn4BTI=
Subject key identifier:   B3:29:E3:7E:C0:65:D4:21:03:C4:C6:EF:AC:51:CF:6D:EF:38:8A:67
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer:       /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial:       018F22386445E3866AC6E077D5F075DFCEA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number:          1143
Signing time:             Sun 28 Apr 2024 01:01:12 +0000
Manifest this update:     Sun 28 Apr 2024 01:01:12 +0000
Manifest next update:     Mon 29 Apr 2024 01:01:12 +0000
Files and hashes:         1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: QFpjUwbz0F91zI1FlhLc6glH5aHO5oxFmCsrFvmMb+I=)
                          2: MqGSyUJ1UGYec7btXi_Onx4fB9g.roa (hash: z6UUbn8HDv0mRKV3SPjm+NmVJe+HeptVdpAg19s+4LQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:38:64:45:e3:86:6a:c6:e0:77:d5:f0:75:df:ce:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
        Validity
            Not Before: Apr 28 01:01:12 2024 GMT
            Not After : Apr 29 01:01:12 2024 GMT
        Subject: CN=b329e37ec065d42103c4c6efac51cf6def388a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:93:36:0b:90:3d:d9:6d:bc:6b:48:b6:59:
                    7c:dc:1e:d1:81:5d:89:31:5c:0f:c8:1c:32:58:fb:
                    22:3b:07:49:11:a8:e6:5e:85:79:83:b9:f1:60:a5:
                    1a:59:9d:72:76:2f:a4:51:11:55:a2:01:b8:20:3e:
                    c0:72:c6:16:f8:e8:66:5a:19:6e:d0:ea:7f:c4:2b:
                    a7:35:21:9a:88:d0:96:7e:22:e2:7e:a8:c4:e7:35:
                    d3:96:a1:10:90:66:8a:25:31:76:bc:dc:c0:4d:45:
                    9a:30:a4:44:4a:99:1a:c1:19:8a:c8:66:71:f3:d4:
                    38:32:77:3d:4c:3d:6e:9e:6e:32:90:d5:56:9a:b4:
                    a9:5e:d4:e9:93:19:f8:e3:34:f6:74:dd:c8:cf:39:
                    2c:43:44:14:97:4a:d3:c1:2f:22:e0:23:97:d2:3b:
                    c1:25:83:0f:a4:10:64:32:42:e1:44:32:c3:77:98:
                    56:bc:fe:f2:13:60:24:eb:51:98:cf:68:4a:b9:ba:
                    bd:61:dc:d8:02:4b:a9:1f:de:59:23:4c:55:e6:21:
                    09:b0:ca:e5:15:89:ac:a5:d9:2a:79:5d:ad:84:e7:
                    72:43:e7:8a:a5:7f:bf:44:98:87:64:5a:5a:a2:9b:
                    d4:dc:fe:a8:d9:79:fb:39:13:90:3c:51:94:ab:ce:
                    e5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:E3:7E:C0:65:D4:21:03:C4:C6:EF:AC:51:CF:6D:EF:38:8A:67
            X509v3 Authority Key Identifier:
                keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:29:3e:79:1e:a6:6c:85:bf:fa:82:08:65:50:5d:c9:86:b9:
         33:b6:d1:8d:62:c8:dc:9e:f4:68:1f:9a:a6:12:56:e0:bf:85:
         84:b7:6c:e7:2a:9f:53:fb:b0:17:87:d4:81:74:59:71:8f:14:
         80:96:0e:fb:df:c5:12:96:5c:2e:f5:28:9c:10:33:aa:54:48:
         18:a6:1c:da:50:78:10:92:a5:8f:54:cf:bb:a6:70:f5:90:be:
         4b:6f:97:c2:fa:be:31:c9:83:23:38:25:24:f1:47:c7:79:bc:
         1b:1b:6f:a8:cc:04:df:3d:58:d0:33:b1:ad:48:db:94:95:40:
         88:d3:d6:fa:01:bb:8f:92:0b:49:8a:55:17:91:94:9e:8a:27:
         82:f5:f7:1c:a4:de:2a:bb:ab:7b:b3:7b:b1:e1:4c:c5:22:72:
         5f:ea:c0:b8:b0:a4:e3:c4:12:dd:ca:3e:1b:58:4f:71:44:6f:
         a5:c4:b2:60:01:c7:20:00:de:21:7f:8b:7f:09:4c:c2:5e:cc:
         01:3b:4c:00:48:19:54:56:64:94:17:8c:0d:10:0a:77:75:aa:
         79:80:3c:2c:73:02:0f:36:1a:2b:5e:4a:02:af:63:1a:da:18:
         54:e5:cc:ce:76:1a:69:bd:96:36:f9:9a:63:be:a5:4d:45:23:
         a2:ad:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:31:06 2024 by rpki-client on console-ams.rpki-client.org