Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File:                     Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier:          BtpGMEUeTq90YIrNIT8NS9afHbqFAs90OcI7lk0HKO0=
Subject key identifier:   7F:25:4F:C8:25:9D:2D:B3:78:F6:25:D2:9A:3A:1A:73:F5:7E:0A:21
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer:       /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial:       01901D467934022BFFABC9507191AB7073D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 19:01:16 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:16 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:16 +0000
Files and hashes:         1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: 58ao0bjqm0iIVeSuo/oHmW81DMdKr9Cz3z7GFVLfgm8=)
                          2: OG8L4yd0LzOMp6o0XUtlSWrcsp4.roa (hash: Biv6V1jcJV2BNpdTs8w89i5mI6F0lipZootlGh5QXZI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:79:34:02:2b:ff:ab:c9:50:71:91:ab:70:73:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
        Validity
            Not Before: Jun 15 19:01:16 2024 GMT
            Not After : Jun 16 19:01:16 2024 GMT
        Subject: CN=7f254fc8259d2db378f625d29a3a1a73f57e0a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1a:a3:d1:97:ac:96:91:b5:0d:5c:b6:a0:c5:
                    3e:1c:3a:b1:15:7c:03:d0:2c:15:b3:db:24:00:61:
                    f2:01:aa:84:1b:ea:19:54:10:f3:b8:f5:e4:83:07:
                    02:69:53:c2:44:b5:46:39:f8:02:dd:74:76:38:4b:
                    fe:03:24:6d:0d:97:9e:36:8f:96:06:44:d1:b3:9e:
                    83:a8:01:6f:76:92:be:31:fb:0b:c7:d6:74:3a:8d:
                    9e:b2:74:d6:cd:6b:cc:85:2e:dd:8e:3c:3f:c6:c1:
                    09:e2:d6:08:58:59:05:34:05:6b:a9:2e:6a:e3:a3:
                    b1:92:91:d2:43:e2:ca:d8:41:e1:f4:d3:e3:1e:62:
                    7d:ee:b1:48:fe:01:e4:6f:9b:ed:b0:f5:07:d2:e7:
                    85:0e:21:2c:58:fa:72:8a:54:9c:9b:ba:50:1e:05:
                    67:98:9a:56:e1:75:41:78:c2:63:16:5b:7b:8c:06:
                    af:59:3d:2a:9d:02:6f:9a:fa:15:de:17:1a:24:e8:
                    2e:b8:7b:a8:97:02:b6:d4:14:c7:2f:3f:52:84:06:
                    85:1b:94:a2:79:02:6f:e6:2d:78:8b:c6:e8:4f:78:
                    65:09:f7:97:ab:d2:c8:d2:56:34:4a:1a:c1:68:d2:
                    61:40:7e:09:22:2a:0f:34:2b:95:17:f8:c0:2e:35:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:25:4F:C8:25:9D:2D:B3:78:F6:25:D2:9A:3A:1A:73:F5:7E:0A:21
            X509v3 Authority Key Identifier:
                keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:62:7c:4f:a4:77:39:c2:a8:59:e6:ed:69:a2:f3:73:9e:49:
         f4:6c:d3:07:be:47:d2:17:a2:7e:23:fb:11:7a:0b:36:21:8e:
         1b:0b:74:c6:de:ae:62:b2:69:97:17:41:e0:80:5b:17:5f:dc:
         b4:f7:f9:5c:c7:00:2b:70:a1:27:60:e3:6c:cd:b2:51:47:43:
         a3:7f:c7:6b:40:97:95:c7:b2:b5:b8:2e:2f:29:48:38:ee:63:
         79:af:4c:b3:0c:99:6f:6e:db:5f:c9:58:60:cd:9d:77:92:91:
         bf:ce:4f:5d:36:2e:0e:1a:9b:bd:f4:d4:70:39:cb:4d:03:be:
         ee:e8:dc:0f:8d:04:99:c3:9b:f5:43:8b:fe:de:eb:bf:98:c5:
         86:eb:2c:5b:b7:4e:7b:56:ae:71:39:0d:57:e3:fb:47:09:23:
         2b:2d:8b:db:a8:fa:ad:9e:ea:ea:36:92:89:76:19:5f:d8:3c:
         c8:d4:91:c6:55:0d:ef:ca:b8:ee:b0:84:63:6b:a2:43:37:08:
         7e:39:6a:0c:76:05:9e:2f:d2:75:bf:0d:3a:55:b4:2d:a9:66:
         6f:51:d9:04:1a:43:8d:dc:b5:a4:85:08:6c:7a:59:6d:46:76:
         cd:5f:f6:0f:23:3d:a2:43:28:b9:d6:06:f2:de:59:61:2e:b2:
         d4:7f:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:47 2024 by rpki-client on console-ams.rpki-client.org