Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File:                     1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier:          +SfJktcGDl4fevBfRDBrsE3x6GF6Lgw+VR9m9Ua0r3Y=
Subject key identifier:   3E:C1:EC:EB:CA:B1:8C:DE:E0:A8:0B:B4:E5:52:68:27:7F:0E:CE:49
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer:       /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial:       01901CD80F7078F6A736C1FE91BA57C9321D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 17:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:39 +0000
Files and hashes:         1: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: 7RbigdpO4XgeDiyGHQy2EZ5/3Y2d1e5AQGkfotn2YRY=)
                          2: Cg9jnniW3hl5JJn2PxWRGeld7Mg.roa (hash: R1Lw2M1Vj/8FcJ6CiGZdiX2llgLpA0gjO63OfdAJeJI=)
                          3: hMOfdz7IYRfRAquZke5ca-f2lS4.roa (hash: MNCxsQPuaTgXMceVCtAdg4znJP3oml1ywl3NLZrSODc=)
                          4: n92K3tBjYXFblQmDMty-rgdYRT4.roa (hash: HMyztyd4TbGG4K4DHbgAQLNvMb4S7gFlfUR2KeVtKW4=)
                          5: r-pWZtY6PHzZUtrLVHgmYVqhibs.roa (hash: dBntIJudF5zpzD/YcnJ5cFAEa85n70cQWOiQcj1F1cU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:0f:70:78:f6:a7:36:c1:fe:91:ba:57:c9:32:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
        Validity
            Not Before: Jun 15 17:00:39 2024 GMT
            Not After : Jun 16 17:00:39 2024 GMT
        Subject: CN=3ec1ecebcab18cdee0a80bb4e55268277f0ece49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:9a:ab:10:04:15:15:72:6e:0e:66:e2:16:
                    bf:41:94:05:9a:b8:88:54:cf:4f:24:a7:77:b6:d4:
                    d9:77:6c:ee:67:c7:56:7a:55:53:0a:ff:8c:a3:3e:
                    64:28:52:24:e6:10:a9:9b:4d:f8:32:a4:39:d5:e7:
                    94:16:d9:45:69:37:e1:14:6e:87:6b:b1:c6:e9:e0:
                    24:db:0b:ff:de:00:13:91:fc:5e:3f:a0:49:99:30:
                    75:6b:68:6a:b9:36:2e:6a:bf:77:81:d8:6e:0d:a9:
                    98:33:54:6c:a8:f0:6a:5d:7d:7c:42:ae:dc:e7:32:
                    7c:d8:6f:23:97:32:94:c9:5c:84:a0:e0:62:aa:13:
                    7b:92:e7:8b:cb:e3:7e:13:93:32:d5:70:b3:be:06:
                    7f:f2:7c:49:7f:05:b6:37:23:1a:89:1c:bf:ea:a1:
                    eb:2f:f0:33:1b:4f:53:68:62:b7:45:a2:4f:93:6d:
                    9b:1f:9e:d8:54:23:8c:62:79:6e:42:6a:ca:ad:d1:
                    ce:4f:c8:d1:32:51:fd:78:03:8c:69:0f:bf:05:89:
                    3f:d9:f7:a8:1e:7c:a4:21:46:4c:23:59:da:e9:ba:
                    f6:5e:05:5b:79:09:2f:99:0b:ed:82:ad:90:5c:3c:
                    79:82:76:48:48:dc:ee:30:73:e6:21:cb:8f:c7:b5:
                    3c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C1:EC:EB:CA:B1:8C:DE:E0:A8:0B:B4:E5:52:68:27:7F:0E:CE:49
            X509v3 Authority Key Identifier:
                keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:47:5e:21:9f:2f:9c:95:0f:09:ce:6c:25:b1:f6:27:bf:23:
         39:1d:ec:c0:72:91:b7:ae:b5:b1:52:43:bd:43:60:e8:a9:9e:
         91:28:47:79:94:ed:9f:7c:89:db:18:30:b3:f4:08:b9:41:a0:
         6d:85:74:64:4a:ee:c9:9f:c0:38:66:30:b1:69:29:67:40:a4:
         d2:a0:2f:41:8b:87:bd:ee:9c:72:8c:8a:cf:e1:2c:65:3a:d8:
         4f:c3:ae:d3:9f:2f:38:7f:67:1e:10:a1:ac:03:62:60:a1:7a:
         73:03:1a:dc:96:74:16:ae:f7:57:09:c5:83:46:13:17:3d:77:
         f5:d2:d9:f6:bc:25:40:27:40:73:a3:92:3a:49:7c:5e:cb:09:
         36:3e:73:33:0d:24:73:2a:13:c4:3e:e2:62:f2:1f:91:2c:00:
         ba:77:44:ff:24:bf:39:b7:19:e0:a5:da:54:05:8a:18:89:fe:
         c2:78:46:54:3c:f5:ab:99:e7:57:7a:b0:9a:5e:dd:91:5c:2c:
         f0:0b:24:0b:07:81:6a:48:fa:32:39:96:4c:eb:9f:65:a7:f9:
         5c:09:10:ce:7b:c5:e3:72:01:68:eb:79:c8:22:a2:4c:04:1f:
         46:1e:52:cb:98:a9:d6:5e:9a:53:0a:03:08:df:1a:23:ef:e1:
         dd:ae:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:51 2024 by rpki-client on console-fra.rpki-client.org