Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File:                     cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier:          flYpOkvZiB4eV5T+MUP4zBKNPfDupmeGozuJzR+rVmA=
Subject key identifier:   33:6E:2E:C0:1B:50:8E:07:E8:55:EC:A8:B3:95:62:F1:4D:F5:1B:BE
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer:       /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial:       01903818EA7A6FCA8C9E6A5C8AF7E7674C47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number:          11D1
Signing time:             Fri 21 Jun 2024 00:01:15 +0000
Manifest this update:     Fri 21 Jun 2024 00:01:15 +0000
Manifest next update:     Sat 22 Jun 2024 00:01:15 +0000
Files and hashes:         1: J1zkz-i4U4IL3Js5zXmgvBxGad8.roa (hash: 2fRwvXCTKx+rdYSQIarcjgHFEaVL9bT4QVH4tx8eZj4=)
                          2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: adISBJs9TXrxwN9K/zGC92ZuIq5mSRFQGQ1UrvCWK90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:18:ea:7a:6f:ca:8c:9e:6a:5c:8a:f7:e7:67:4c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
        Validity
            Not Before: Jun 21 00:01:15 2024 GMT
            Not After : Jun 22 00:01:15 2024 GMT
        Subject: CN=336e2ec01b508e07e855eca8b39562f14df51bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:d3:cf:dd:9e:dd:bf:46:c6:c1:e8:d6:8a:
                    9f:84:c2:6e:47:3a:b8:52:53:6c:64:bb:2d:d8:be:
                    65:44:c3:d1:59:99:ed:8d:1e:47:b3:44:54:b4:77:
                    fa:50:86:a6:89:14:4d:cf:c2:83:67:bc:e5:54:8d:
                    0d:f8:a8:e7:19:b1:9d:2d:cb:24:fe:e6:e8:89:78:
                    47:7d:3c:2c:1a:2b:94:77:d7:a6:69:06:08:3b:d2:
                    be:3a:f0:ed:46:6d:da:a4:73:3f:d5:b6:c1:af:d0:
                    13:3b:70:d4:91:02:94:fe:7a:5e:40:23:ea:1a:68:
                    d6:95:e7:80:d9:77:e5:61:5a:d8:8d:ef:40:02:cf:
                    39:94:e1:cd:cb:47:1d:f7:65:89:ae:9b:92:0a:be:
                    e9:fc:39:44:e5:a6:b7:32:7c:f6:0b:a1:19:c8:e5:
                    58:c6:aa:4f:75:9b:c3:1f:30:fb:33:a4:f9:86:27:
                    6c:6c:43:02:b8:50:28:15:ce:bb:a7:89:77:40:5f:
                    fd:e2:f1:9e:8b:dd:e0:8b:07:3a:c8:5b:10:1f:68:
                    b4:9d:76:ad:d3:5a:bc:a2:40:de:54:1b:28:88:cd:
                    9e:5b:9b:5c:8b:4e:d4:af:d9:34:88:2b:b3:9c:85:
                    62:97:b5:a7:fb:21:bf:5d:cd:8d:93:dd:ae:1d:bc:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:2E:C0:1B:50:8E:07:E8:55:EC:A8:B3:95:62:F1:4D:F5:1B:BE
            X509v3 Authority Key Identifier:
                keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:81:90:cf:f8:c3:b8:84:b4:61:19:5a:42:25:7a:dc:d2:b2:
         4c:0b:6e:b2:3e:76:7c:cc:6c:f5:f3:e5:ad:af:17:95:d2:e7:
         2d:05:c5:a6:7c:b9:b4:28:d7:96:80:e6:88:b1:cc:d9:ed:93:
         7d:17:4e:5e:f3:44:e0:d5:60:f6:55:19:a9:79:24:bb:32:52:
         c4:49:74:a6:eb:06:5d:ca:28:8a:ca:8e:45:cc:f4:4a:e4:6f:
         df:1d:3c:22:49:03:f8:f3:f0:91:b5:66:b0:54:85:5a:c2:96:
         35:cf:d5:70:65:49:b9:32:9c:f5:3f:82:5a:9b:69:f7:c4:61:
         82:d7:75:27:17:de:1e:1b:22:cb:de:38:70:41:68:88:a9:0d:
         90:f6:bd:ed:93:87:77:b0:25:02:7c:18:a5:9a:8d:59:ce:fe:
         61:e0:75:0c:f1:da:8f:2b:d0:2a:bf:27:f9:70:1f:6c:96:ba:
         52:f1:f4:5a:70:72:fd:f5:28:d1:a7:eb:4a:f1:32:42:ec:b3:
         19:0e:32:a7:62:a7:8c:85:ff:bf:be:6e:55:ca:a7:ca:ae:e8:
         2a:55:52:32:b3:8d:36:6d:0b:69:45:06:40:66:f0:64:57:8c:
         64:8a:34:6b:23:04:a1:9a:21:0b:f5:ca:54:68:19:6e:38:0e:
         66:83:d8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:21:54 2024 by rpki-client on console-fra.rpki-client.org