Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
File:                     MNimSQPPohc3l0nxi3_c6h2rbbQ.mft (raw, json)
Hash identifier:          vVt20NldliZitJjvaOgCYstMvAmqaH5ivt8BJ8/Emn8=
Subject key identifier:   D9:D6:A3:C5:8E:72:EB:20:CC:93:E6:99:94:2E:56:5C:89:14:34:38
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Certificate issuer:       /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial:       01901BFE035389FFE10C84EA9C26EC50EAC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 13:02:30 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:30 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:30 +0000
Files and hashes:         1: MNimSQPPohc3l0nxi3_c6h2rbbQ.crl (hash: dMxN9n7SYYsbWHbe4TEn0Sa2QhHLO0e3R3s8ADekJHk=)
                          2: i-EIobW_VIoQHymP2W4ULs4o-MU.roa (hash: rPPfcnNGc5DNOjWMnrH1sw6q3GZ00JmFqia4xzTXZBE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:03:53:89:ff:e1:0c:84:ea:9c:26:ec:50:ea:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
        Validity
            Not Before: Jun 15 13:02:30 2024 GMT
            Not After : Jun 16 13:02:30 2024 GMT
        Subject: CN=d9d6a3c58e72eb20cc93e699942e565c89143438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:2e:61:67:f0:e7:34:3e:b7:b9:96:29:01:
                    06:44:89:1b:a2:f1:79:61:5b:13:92:d5:0d:1d:3e:
                    09:b0:8f:b0:06:64:3e:0b:0b:4c:e8:4e:34:e2:f5:
                    31:7b:73:fe:2e:58:92:45:b9:b8:2d:3a:59:f3:a0:
                    88:98:2a:93:41:fd:7f:f8:d3:62:7f:a3:f6:89:cf:
                    a0:90:b8:4e:d4:a3:a4:96:40:da:d4:ce:66:3f:a4:
                    ac:7e:80:11:0e:20:89:d6:4e:be:00:b7:05:47:29:
                    a8:49:fb:63:90:c2:2c:00:93:c2:f5:72:fd:14:c2:
                    39:b5:02:e0:74:2c:84:c4:1f:4f:64:f5:53:d6:ab:
                    47:33:1a:89:f6:8c:07:b3:6c:f7:23:7f:a6:1c:e5:
                    21:96:52:df:0b:76:25:de:dc:2a:b2:65:a0:22:04:
                    18:8f:4e:90:b6:3a:98:1f:65:b5:d9:42:fe:f3:84:
                    d8:e3:63:28:c1:ed:ff:cc:2b:0d:42:ec:eb:dc:b0:
                    3c:0f:af:18:d2:19:34:6d:6d:c0:f2:06:d8:51:aa:
                    69:2c:d8:df:a4:2a:7e:0c:b6:fc:26:67:0f:fd:66:
                    7a:2b:b5:f3:ff:14:37:4b:7b:f5:06:ca:ae:af:ab:
                    22:f0:7e:42:77:ef:df:17:27:dc:bd:96:c3:37:c6:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D6:A3:C5:8E:72:EB:20:CC:93:E6:99:94:2E:56:5C:89:14:34:38
            X509v3 Authority Key Identifier:
                keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e1:a5:d7:50:ac:52:b8:c7:40:d8:d7:30:f9:a5:56:9d:5c:
         e1:32:2d:1d:52:0f:42:83:fc:7c:1d:2f:ad:35:d3:1b:ab:61:
         7c:36:76:b3:70:49:3a:73:2b:7c:94:50:7e:40:ee:6b:ca:9e:
         03:d6:bb:45:2a:c9:b8:67:5e:03:61:8b:b4:0c:ea:da:51:99:
         34:81:ca:30:03:01:c8:c2:3f:b1:6e:dc:ff:17:8f:9b:dc:2c:
         70:8e:15:d7:4d:ed:b4:33:4c:0e:61:31:e8:cf:d9:53:e4:06:
         9b:88:36:25:9c:8e:86:c3:c1:55:00:a8:40:77:03:ce:ba:bb:
         b3:96:eb:6b:28:d0:43:85:ac:eb:0e:10:d3:b6:a6:5b:cc:66:
         00:97:5b:86:c1:2c:14:b4:27:2e:29:ac:74:1b:9d:21:2f:43:
         58:95:a0:5f:71:97:b8:37:46:27:d9:d5:87:be:97:5d:32:5c:
         96:46:4e:8b:53:bb:07:b7:34:d7:38:9d:2f:a6:8e:cf:a2:ba:
         95:e0:7f:84:a1:80:f6:15:ed:e2:d6:82:06:d3:1b:6b:fc:1a:
         da:8c:41:9a:10:9e:6a:f9:32:91:e8:ac:21:78:98:63:b0:e9:
         b6:e2:7c:99:c7:96:c6:7a:9e:9f:3b:f9:62:91:31:80:2d:14:
         9e:79:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:51:52 2024 by rpki-client on console-ams.rpki-client.org