Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File:                     L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier:          llYnTQANIUW/qqtGIN5EXYdCEtd0T2h5zLjfqme8xdI=
Subject key identifier:   58:0A:8D:C2:0B:DC:3B:02:6E:01:1A:C7:BC:91:97:66:63:36:E6:D1
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer:       /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial:       019040AF2D3E0CE6955F5D28B8205DB08834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number:          0832
Signing time:             Sat 22 Jun 2024 16:02:20 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:20 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:20 +0000
Files and hashes:         1: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: xdXHBkaTqF4EFrTUADfdVNI+X1+4PeufIbqYYj8H9Ko=)
                          2: a1EwcgsyBO4lXsUiLtwP0UD8Wxc.roa (hash: BCVUZ+J/TpmcpVt/hTAeoCCKJNekSKf80dsvhLB1fxw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:2d:3e:0c:e6:95:5f:5d:28:b8:20:5d:b0:88:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
        Validity
            Not Before: Jun 22 16:02:20 2024 GMT
            Not After : Jun 23 16:02:20 2024 GMT
        Subject: CN=580a8dc20bdc3b026e011ac7bc9197666336e6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:52:94:07:72:dd:04:17:1b:fe:96:21:f2:88:
                    c8:65:7f:8f:e0:87:1f:67:61:fa:9d:ef:5a:f1:c0:
                    bc:fd:a9:f6:b2:9c:98:15:b7:2a:05:36:07:df:51:
                    ae:18:27:33:2e:b8:a8:26:4f:8c:38:5e:0a:23:39:
                    1f:f9:33:58:3f:46:55:50:7a:49:f8:5a:f5:85:06:
                    87:dc:54:76:de:4b:d1:55:bf:0d:87:3b:43:e6:bd:
                    6d:92:fe:02:d3:fe:5e:d0:26:0b:97:63:78:b8:fb:
                    a6:d1:7b:0b:07:1c:35:57:55:9e:5f:37:8f:e0:07:
                    8c:64:3e:4c:11:9e:47:81:0b:ec:2a:ea:68:60:7a:
                    b9:2c:02:29:00:89:0c:f6:50:28:01:80:bb:8a:ed:
                    03:fe:91:13:3e:db:6c:25:4a:f3:db:e5:67:0e:47:
                    13:c5:da:94:b7:91:d5:3d:6a:bd:13:36:d8:08:df:
                    0b:03:63:1f:f2:70:01:7a:49:8a:55:a8:a4:bc:42:
                    f7:37:df:9c:69:8b:72:bd:a8:70:a2:1c:5d:c6:86:
                    25:8f:d8:b3:ce:ab:ee:8f:f4:d5:63:a4:67:42:e0:
                    4d:80:69:cd:68:b6:61:96:a5:81:6b:34:23:0a:23:
                    49:a4:50:d4:c0:df:4e:d8:42:11:51:a6:db:6d:3b:
                    f7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0A:8D:C2:0B:DC:3B:02:6E:01:1A:C7:BC:91:97:66:63:36:E6:D1
            X509v3 Authority Key Identifier:
                keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f8:3d:26:62:33:2c:d4:98:9f:68:71:5d:5a:50:14:82:2a:
         6c:32:8c:b4:f3:b4:67:61:d5:0a:69:f2:ce:4e:be:40:d8:e1:
         84:63:68:57:59:b5:92:df:1f:17:9b:3a:e5:00:f8:f5:d9:2c:
         9d:ff:42:9c:ff:be:2d:d5:17:09:dc:a0:d3:b2:31:12:d4:16:
         5b:1d:86:03:71:6d:3f:1b:d0:f2:36:ef:f6:ec:41:5c:c7:eb:
         87:bb:37:8a:5f:d2:3a:01:56:85:bd:a9:4e:d7:ce:5c:c8:f7:
         ff:04:2a:8f:2a:4d:e0:f8:d3:a5:9e:79:12:1d:c4:f0:ac:40:
         ff:66:60:ae:15:0d:e7:8c:60:a3:2d:97:75:da:ae:9d:77:69:
         34:8e:eb:23:b3:f1:85:d7:b5:bd:0c:26:f3:ca:2c:98:22:3e:
         9a:6d:5f:9c:9b:db:73:84:22:4d:a5:ae:4d:7a:f1:b1:7b:99:
         46:ae:5f:92:db:16:64:5b:4d:a0:29:5b:28:e4:f8:62:3f:11:
         dd:75:9e:71:f0:ec:c4:69:ec:92:ee:11:74:68:7a:3b:ed:c0:
         84:53:72:f4:6e:4d:21:f9:c7:de:ac:58:81:f8:52:9d:a1:45:
         7d:02:e0:c0:f4:6b:d0:86:70:21:ac:e1:c8:dc:fe:6e:21:36:
         93:f5:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:47:08 2024 by rpki-client on console-fra.rpki-client.org