Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File:                     7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier:          TjkJrcyiQwPltbjc9iZPGbt1+Ico+RskzCbDdENjl6k=
Subject key identifier:   0D:8D:55:2C:AA:00:CB:5A:90:11:8D:17:F1:8E:AE:9F:D1:E8:EA:3E
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer:       /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial:       01901D465E6BD0AE1A335B22764010DE362A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 19:01:09 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:09 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:09 +0000
Files and hashes:         1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: pf5IwD48//SScaYTL/sRFUR84bNioEK28qsBxsGtKGk=)
                          2: vs81DAzz8TtCU6KLFn9q0GBGM8E.roa (hash: 3dF4yXIWWVGznGRXj2+4WluXD4thndbxYeSMDTGwvvw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:5e:6b:d0:ae:1a:33:5b:22:76:40:10:de:36:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
        Validity
            Not Before: Jun 15 19:01:09 2024 GMT
            Not After : Jun 16 19:01:09 2024 GMT
        Subject: CN=0d8d552caa00cb5a90118d17f18eae9fd1e8ea3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:d7:5a:1b:64:f5:42:8f:c4:bc:88:aa:21:
                    db:08:bb:e9:c2:75:22:67:67:0b:8c:1e:3e:d9:d1:
                    6b:ce:90:09:14:65:aa:b0:09:d9:4f:3f:a9:5e:c0:
                    64:aa:15:db:16:5b:19:97:37:9e:13:91:03:f9:45:
                    a7:94:7c:63:ee:b1:c2:d5:bc:18:83:67:70:4f:56:
                    32:00:e0:91:af:b0:b7:16:cf:a9:78:db:83:d4:49:
                    92:ee:2b:e7:d7:ca:a4:63:01:ce:7f:5a:ae:1f:d5:
                    59:a7:2e:af:43:d2:2e:95:34:bb:cf:c8:e7:6f:03:
                    91:04:ed:dc:7b:a1:98:39:8b:20:ee:3a:c9:52:8b:
                    d5:da:19:48:c8:2c:a4:eb:6a:1e:c1:f2:3d:15:36:
                    04:3c:3b:cb:a5:8e:da:16:76:28:ec:d4:d0:9a:b3:
                    ea:3d:ce:74:6f:3c:ca:6d:4a:8a:49:02:e9:0c:02:
                    88:eb:87:65:3d:73:f1:23:d0:ee:cf:a3:d6:c5:75:
                    00:fe:20:12:d5:ea:0a:a2:6d:6f:da:5d:03:34:24:
                    03:b3:58:f2:d1:bf:db:74:63:ab:79:3f:28:47:6b:
                    06:d2:1b:14:fd:80:61:e5:75:5d:a8:d2:99:bb:6f:
                    be:39:5e:f3:0d:1b:5a:de:3f:78:c8:3b:bb:e8:be:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8D:55:2C:AA:00:CB:5A:90:11:8D:17:F1:8E:AE:9F:D1:E8:EA:3E
            X509v3 Authority Key Identifier:
                keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:d6:ff:4b:ff:67:69:34:7f:41:70:5e:21:9f:95:b3:7c:
         d7:8d:97:da:26:65:6a:b6:2f:28:4a:6b:3f:08:a7:b6:d1:39:
         19:36:51:1f:fe:56:ff:03:0a:43:2d:42:53:21:3d:4e:5b:00:
         d7:8d:b2:d8:48:7d:c0:ee:44:a3:6c:bd:01:14:f4:f7:78:b4:
         10:9b:2c:2a:61:e2:6e:10:07:e7:78:2d:74:33:65:b1:84:d2:
         60:91:58:b0:f5:04:87:6f:ce:f5:1c:65:36:30:73:68:1a:00:
         ae:62:60:57:39:7a:99:9e:a7:52:16:15:9d:32:5d:49:5d:d3:
         ae:04:ea:ab:96:9a:b2:cf:d7:8c:db:90:03:55:bf:fa:48:0d:
         e6:ed:d0:a9:c3:4e:98:e9:3d:1a:4c:d8:27:a8:89:74:5d:38:
         5a:9f:f9:bd:a4:c5:df:3b:e9:8b:24:3f:04:e1:8c:7f:5a:58:
         67:f1:ba:80:9d:85:b3:df:df:01:44:f5:7b:80:5b:e0:f3:4a:
         79:3e:65:9b:4e:10:90:30:68:c9:fc:01:22:35:85:a6:7c:e8:
         b1:77:53:d5:e9:c8:67:84:9c:de:1c:1e:b5:75:1b:22:3a:c9:
         14:d7:b3:01:96:4d:43:d5:0d:f7:8d:0b:cc:2f:20:dd:69:31:
         6a:2d:8c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:03 2024 by rpki-client on console-ams.rpki-client.org