Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File:                     g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier:          CfizcY6lw7qT8sd8KUp1Nsft1YdxjmN1pFuTd9y/LdM=
Subject key identifier:   54:CE:20:35:89:86:BF:16:E1:32:CF:86:D3:31:48:AC:CE:DA:DD:48
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer:       /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial:       01901BC5578D67409834CD048307B81BE2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 12:00:36 +0000
Manifest this update:     Sat 15 Jun 2024 12:00:36 +0000
Manifest next update:     Sun 16 Jun 2024 12:00:36 +0000
Files and hashes:         1: Jsd1PBVXghRoMq4SybKusKw4c4M.roa (hash: Sj7l5Tf3TFI4DnuyKhbtYkbaR4etcH0GexAV/DLMLvo=)
                          2: McFWJNiVWMPNzW1GXCqc84Qk5YQ.roa (hash: H3rDFU7SLyW2/UJ8CLmBSp7sR6m+AaAAl5Dc+lanoVM=)
                          3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: +RyYELq1toDlqrEEE24mnjhRyW3Kzf1+q8Vmyc4IE5E=)
                          4: gRhVoQUL2lG0ur91-25EnZnvPrc.roa (hash: mEhD5MB3rtovLG98MVUqDRSyGdJurMsUEkV+Nx7qDzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:c5:57:8d:67:40:98:34:cd:04:83:07:b8:1b:e2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
        Validity
            Not Before: Jun 15 12:00:36 2024 GMT
            Not After : Jun 16 12:00:36 2024 GMT
        Subject: CN=54ce20358986bf16e132cf86d33148accedadd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:de:39:d5:3c:e4:9d:9f:11:e0:93:a5:33:
                    9b:30:5b:33:56:8f:29:7d:37:a8:be:d9:0b:5f:cd:
                    82:67:b8:ff:92:4b:72:84:6a:b4:08:e1:6a:42:30:
                    a3:3e:59:23:85:43:a4:a4:cf:13:75:a9:1e:7b:56:
                    44:cc:85:a7:c2:a6:5a:d6:4d:3c:4d:12:e1:bb:3b:
                    13:8a:e0:b7:15:5d:9a:bb:29:dd:56:46:77:00:7b:
                    5f:6b:cc:2b:ff:93:ef:17:33:fe:02:51:9a:f1:1a:
                    26:5b:ff:5a:b6:a5:b0:a8:18:59:cf:dc:5e:fd:14:
                    80:08:3e:ea:f7:46:ee:86:8c:f8:a0:75:cf:18:42:
                    dd:34:97:40:d8:53:f0:34:0c:3f:85:30:27:25:d0:
                    ad:a3:4c:01:6a:80:60:eb:4d:03:2f:4c:97:3d:c0:
                    50:3c:6c:eb:94:dd:d7:a6:1e:27:32:48:09:b4:13:
                    2e:bf:f4:7d:b2:04:c5:5c:05:dd:dc:db:65:01:04:
                    84:95:3c:03:37:71:62:ec:f5:31:a7:ec:45:65:b8:
                    e2:cb:d4:6b:4f:64:3a:2e:cf:6b:26:0d:29:d3:7e:
                    d1:bc:4d:47:eb:7a:8c:a2:76:ac:98:20:de:79:e2:
                    d4:08:80:f5:e5:98:b4:aa:6a:5e:a9:37:bd:84:ed:
                    e0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CE:20:35:89:86:BF:16:E1:32:CF:86:D3:31:48:AC:CE:DA:DD:48
            X509v3 Authority Key Identifier:
                keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:5a:af:8f:55:8a:1e:04:5c:c4:9d:7f:81:7f:43:78:88:
         52:06:c4:d2:e6:98:72:64:c0:a8:52:05:b7:2f:35:45:65:48:
         27:f7:95:29:86:ec:fe:7f:cd:10:c3:05:e8:9a:d1:18:dc:99:
         bc:63:34:6c:89:7d:53:00:b9:9a:19:cd:21:45:38:2d:a0:9a:
         a1:c0:3d:c6:a5:81:6c:d8:51:a2:11:63:60:15:03:d2:1f:cb:
         a9:cf:cc:fa:07:63:f7:55:dd:e7:07:59:38:0f:cd:44:d5:ee:
         32:e8:4a:70:8a:46:9e:f3:80:2d:73:62:b1:a5:9d:23:95:53:
         2b:64:46:bd:57:ef:79:6a:cf:f2:5c:a5:05:6a:7f:67:7e:1a:
         bb:25:ba:a2:a9:59:4d:40:a1:3c:71:69:c9:71:f7:b0:87:ba:
         ce:75:2b:16:4a:0c:d2:df:89:25:da:0e:c6:a3:ec:a1:e5:af:
         5e:4d:15:57:2f:7e:4f:d6:b8:d6:32:b2:bb:44:90:08:3f:15:
         18:63:23:ee:00:58:bf:fb:fc:82:27:1b:af:bc:32:bc:42:42:
         80:b8:3c:58:7e:87:e2:a5:2b:63:ad:07:38:73:aa:6f:b7:59:
         51:8a:fd:ab:b2:6f:e1:f0:43:f6:f7:9b:98:73:e8:67:0d:24:
         33:ff:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:49:10 2024 by rpki-client on console-ams.rpki-client.org