Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
File:                     mRyTTgj1egPvTro2taTaeYolIgc.mft (raw, json)
Hash identifier:          O6AHr6LhdHn0v8TzjYGVFBu7sh7GFF5Nyep/HzpOJl4=
Subject key identifier:   C7:14:7D:4F:1A:93:4C:C1:36:E5:F9:42:99:84:6C:E9:DC:06:0B:6C
Authority key identifier: 99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Certificate issuer:       /CN=991c934e08f57a03ef4eba36b5a4da798a252207
Certificate serial:       01901EC6BB66D44DBEF0AE993CAA86B76EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 02:00:58 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:58 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:58 +0000
Files and hashes:         1: 3auDNGNWxS9ief7KHmGI9EQmBxo.roa (hash: Ke6nRvNz8fF/WTJWuhpAW3zRAM7IWaMYJ30RhJTuaQs=)
                          2: mRyTTgj1egPvTro2taTaeYolIgc.crl (hash: s3ifbQLKfHRTFnH2EYUIq5lVBIUviqOOEpDOOuqxy30=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:bb:66:d4:4d:be:f0:ae:99:3c:aa:86:b7:6e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991c934e08f57a03ef4eba36b5a4da798a252207
        Validity
            Not Before: Jun 16 02:00:58 2024 GMT
            Not After : Jun 17 02:00:58 2024 GMT
        Subject: CN=c7147d4f1a934cc136e5f94299846ce9dc060b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:67:74:99:e7:4a:20:07:bc:f7:1e:f1:07:
                    6b:c2:c8:95:16:aa:59:dc:f9:9c:95:45:ce:8d:cf:
                    2b:77:40:2d:42:ab:a0:8c:93:e8:0b:d0:69:e6:1d:
                    f5:c9:f5:73:e1:71:eb:7b:49:10:01:35:1d:fb:f5:
                    74:8e:70:45:ff:87:c6:8d:ee:8a:c7:14:6e:ca:54:
                    6f:a7:39:36:c4:62:0c:12:8c:59:4d:d7:9b:c5:3a:
                    22:e8:79:9f:ad:e1:d2:14:77:d9:9b:93:1b:e9:9e:
                    27:b9:5a:35:e8:d5:10:e9:52:12:a0:8c:47:7a:09:
                    ee:60:c9:59:b7:9e:89:6f:c3:73:45:8a:70:54:62:
                    5b:a5:78:99:22:68:c9:5a:51:8e:0f:0f:d9:37:f0:
                    ad:a0:f4:91:3e:3b:52:ec:6a:f6:9f:8c:1d:c7:00:
                    8f:1f:60:13:cb:37:88:3e:3a:be:80:14:da:ad:26:
                    b1:59:ae:a7:b2:9d:9f:af:aa:7c:9e:71:80:d1:70:
                    c2:2a:68:72:c2:0e:f2:00:43:db:1f:05:69:58:8e:
                    9c:96:63:26:b4:1f:45:55:0b:60:3c:76:21:f6:a9:
                    66:6d:a2:b9:6f:03:c3:35:2a:1d:90:32:1c:b4:12:
                    2d:84:02:9d:59:7f:cc:6e:7d:e4:58:23:cd:0a:73:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:7D:4F:1A:93:4C:C1:36:E5:F9:42:99:84:6C:E9:DC:06:0B:6C
            X509v3 Authority Key Identifier:
                keyid:99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:0e:58:e6:a9:37:be:89:37:3b:bd:a1:0b:cb:2d:11:70:94:
         bc:74:f4:e8:20:7a:c1:ac:1a:8a:17:09:c2:4a:a9:b3:a2:ad:
         e8:27:b3:2e:11:54:1c:44:9f:50:49:ae:ce:89:3c:c8:a2:f8:
         84:2d:6b:2a:eb:02:40:42:24:a6:86:da:23:40:ea:6c:76:82:
         6b:ed:e8:fc:2c:cd:2e:8c:f9:6c:73:46:bb:cf:f8:a6:28:50:
         2a:a4:a8:7b:a5:56:2e:bf:7e:f6:a0:2f:f8:c9:49:96:4d:fc:
         20:dd:9d:90:8c:c8:12:4c:65:84:ae:8b:41:17:54:25:ad:2d:
         f6:fa:9d:09:18:06:a7:c4:df:24:81:e7:6c:2c:f7:e1:f8:cc:
         2d:67:e9:fa:ee:dc:d7:ec:b3:89:0a:cb:65:a4:bc:43:9a:16:
         96:11:b1:da:a6:a8:b3:da:5c:52:5a:5b:89:9c:58:9d:a9:77:
         15:dc:90:f6:2a:35:c1:6f:72:ad:a9:1a:f0:05:76:0b:af:cc:
         8a:38:ad:90:05:c5:e5:24:35:c9:9f:bb:c9:ea:fb:93:f6:14:
         fe:7d:50:7e:84:48:1c:bf:6a:1c:d6:bc:01:e0:bc:00:8a:c9:
         a1:10:2b:26:bf:fc:6b:92:f5:68:71:c6:5b:f3:2a:fa:f5:d8:
         cf:ef:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:45:47 2024 by rpki-client on console-fra.rpki-client.org