Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File:                     7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier:          2w4QnC0WdrOtDrxCgLb72zTFjADdOm0EWpUrIzgoQnc=
Subject key identifier:   38:35:31:BF:A1:F9:5F:3B:39:A8:6D:B5:89:17:07:51:2B:7B:7D:37
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer:       /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial:       01901DEC5E37F00E0D1465442BDC7AB9B04F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number:          7B
Signing time:             Sat 15 Jun 2024 22:02:28 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:28 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:28 +0000
Files and hashes:         1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: fhV890DM7z0Yu1h+LlbuwQidG/M4pfx2TPA76F4aDrw=)
                          2: CjHCo1NFd_AH2pjrnS1rmZWvnRk.roa (hash: g05KUNYFZJib+zVLvVl9BBUvxp+csGGt3MAol9cxACc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:5e:37:f0:0e:0d:14:65:44:2b:dc:7a:b9:b0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
        Validity
            Not Before: Jun 15 22:02:28 2024 GMT
            Not After : Jun 16 22:02:28 2024 GMT
        Subject: CN=383531bfa1f95f3b39a86db5891707512b7b7d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:fd:6a:f9:04:3b:d5:66:a2:19:74:ac:ec:
                    3c:10:7b:ea:44:99:89:c6:fb:a8:9d:d9:0e:b1:de:
                    8a:20:7d:cb:15:4d:6d:89:cf:d5:a2:d0:e1:5d:94:
                    cf:a5:da:50:8d:9b:6a:15:0d:43:f9:f6:ab:38:2b:
                    18:ab:45:0c:c0:fa:46:7a:fe:89:07:b8:57:a8:73:
                    8c:9d:6c:f1:28:06:4e:85:f3:4e:49:0a:56:a7:c7:
                    47:4b:0a:ce:36:21:04:0d:70:2b:73:2a:e9:c5:b5:
                    3b:18:ee:1d:15:a2:dc:a8:4d:92:5c:32:4e:d1:f8:
                    d5:d6:e8:0f:0f:c1:bd:12:4c:4e:4f:19:57:d0:11:
                    09:8b:72:4e:7e:4a:bb:1d:e5:c5:ac:34:d6:5e:cc:
                    9d:01:e4:ca:ee:36:f1:37:cc:24:15:b5:2f:cd:3b:
                    79:d7:57:c7:80:3a:e7:d1:13:65:37:59:68:7a:35:
                    73:e7:cb:02:96:35:e8:b6:56:da:68:5c:70:33:fa:
                    81:37:5d:5c:4e:7b:6f:7b:df:5a:7e:50:68:96:85:
                    d5:67:71:b0:d1:26:28:06:39:6b:3c:aa:7e:0e:74:
                    1e:09:09:c1:4a:3f:29:88:28:d6:a7:fb:25:f3:84:
                    87:ed:db:61:bf:3f:5c:e6:60:03:a0:6a:32:b5:bd:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:35:31:BF:A1:F9:5F:3B:39:A8:6D:B5:89:17:07:51:2B:7B:7D:37
            X509v3 Authority Key Identifier:
                keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8b:64:7e:d0:20:98:d0:ab:18:70:00:bb:cd:16:b5:69:95:
         08:3c:d6:5a:54:51:a2:eb:f9:d6:07:cf:76:6e:bd:09:3a:6e:
         39:c7:49:94:89:f6:25:9d:ed:fd:ab:cd:e2:17:d6:3c:61:e3:
         ff:a6:b1:72:15:5a:75:83:9c:a6:5c:de:c7:e4:56:6b:0d:5d:
         7b:0b:1d:9a:eb:6e:cc:ef:2d:7e:8e:a6:0c:a7:9b:8d:fb:4c:
         bf:59:e5:86:9d:dc:ba:83:51:a5:63:76:82:24:48:53:47:fa:
         43:66:b2:a5:6a:ef:92:1d:0d:61:2b:18:42:b9:11:46:6f:62:
         72:8b:1e:62:c2:b9:95:e6:37:4b:0b:bb:de:69:86:1e:ab:a2:
         f8:83:a7:6a:4c:66:97:d9:ff:39:ae:06:e9:c9:3d:71:1a:5a:
         da:74:d4:f8:df:e8:08:8e:05:d0:7a:bd:26:64:ba:be:d6:aa:
         58:11:cf:8f:ff:b1:96:b4:ca:54:85:9d:5b:6b:a9:ab:7c:b4:
         14:c3:78:c0:13:bb:76:3a:c3:bb:0a:f1:1b:3d:45:b9:b6:97:
         ab:c0:46:79:71:56:3b:c8:92:e1:97:1a:d2:16:08:3e:1a:15:
         a4:f6:0a:fc:d8:aa:9b:7c:bd:1b:9b:e8:93:9c:48:d8:ae:ab:
         be:c7:74:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:48 2024 by rpki-client on console-fra.rpki-client.org