Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
File:                     7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json)
Hash identifier:          3BcJn6sbbYzM8Q2SR0Fgzf+IeDuTf0xvaewnaUpQ+aU=
Subject key identifier:   8D:4E:50:21:24:CA:D2:25:CF:FC:D0:34:55:4B:3F:0A:B1:0F:18:0D
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Certificate issuer:       /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial:       01904869E0545877CE066042115D8EC7BCCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
Manifest number:          11DD
Signing time:             Mon 24 Jun 2024 04:03:36 +0000
Manifest this update:     Mon 24 Jun 2024 04:03:36 +0000
Manifest next update:     Tue 25 Jun 2024 04:03:36 +0000
Files and hashes:         1: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: A2XEjuNskxQCjcX66j0ytmu5oaJwkNinj8el2meqdNc=)
                          2: bqXy6bBIEO3k5zsVlcH4uIh3L8g.roa (hash: jUfjBxlEQM2dDoPxwIkLaj80LU2MxlU9sd2IsS9X0zA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:e0:54:58:77:ce:06:60:42:11:5d:8e:c7:bc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
        Validity
            Not Before: Jun 24 04:03:36 2024 GMT
            Not After : Jun 25 04:03:36 2024 GMT
        Subject: CN=8d4e502124cad225cffcd034554b3f0ab10f180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:41:96:c9:08:bb:a9:8e:80:0a:6c:ce:ae:
                    ca:3a:2f:37:a7:a4:f7:b3:17:cd:76:f4:3a:00:b2:
                    70:eb:8b:ec:cc:ee:46:93:87:15:a5:32:7d:b9:69:
                    1f:85:ec:da:64:aa:2a:3b:64:fa:aa:be:46:1a:82:
                    e2:35:bc:b5:7c:39:a7:55:28:d6:50:bb:ef:f7:2d:
                    c8:9c:ee:27:ae:0e:2b:ca:6e:03:a5:c9:96:0b:dd:
                    ab:4d:1a:62:ad:fc:a9:d6:65:28:ab:79:39:57:58:
                    ec:61:37:1a:f6:55:c8:03:78:c0:ae:bf:34:c1:e4:
                    43:7a:0f:85:75:dd:0d:84:fa:8d:3a:91:25:7f:1a:
                    7e:1e:6b:c5:62:0b:b8:ab:b8:73:8b:e4:29:cb:11:
                    80:45:ac:22:2f:26:f2:22:25:66:90:fc:f9:80:1e:
                    a7:34:dd:b5:83:08:2d:e5:e9:d7:33:0c:f8:d4:35:
                    33:32:53:43:db:d0:61:6a:cd:f2:05:2f:92:75:5b:
                    a1:bc:da:7e:dd:b1:27:16:b0:a8:f8:85:d7:ad:b4:
                    af:9b:30:51:a8:a4:b2:f5:9a:77:a9:6c:35:a7:a9:
                    d0:1a:3a:7d:13:c6:f3:a7:38:1f:6d:9d:67:e6:5d:
                    33:12:48:f9:40:f5:86:9e:97:3c:a6:a2:0b:88:0a:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4E:50:21:24:CA:D2:25:CF:FC:D0:34:55:4B:3F:0A:B1:0F:18:0D
            X509v3 Authority Key Identifier:
                keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ff:a5:28:3e:e6:dd:00:03:e9:31:37:6f:a5:50:86:b9:37:
         32:7d:0b:4a:20:b5:4b:0d:fa:5f:77:43:99:9e:22:07:c0:4a:
         32:9a:b8:52:e1:7e:07:d8:70:54:2c:bc:0a:2a:be:41:4a:23:
         b4:97:b0:7a:63:55:1f:a3:9b:a9:b1:46:a1:39:4e:50:4a:b4:
         86:51:9d:7a:4d:55:2d:86:c8:02:91:a6:0a:19:c8:11:05:15:
         29:aa:cf:4d:22:ca:85:14:5c:e8:14:4a:b9:ad:10:11:5d:dc:
         de:6b:4a:99:7a:3c:49:7e:01:75:4b:38:52:2d:ba:e8:13:ff:
         94:89:a4:6f:33:95:ef:6c:c6:d9:d7:1e:39:56:5d:b9:70:47:
         4d:29:0a:b1:24:cf:d3:b3:cb:85:94:a4:e9:b3:46:75:11:ad:
         8a:9a:a4:a8:ba:b1:d2:5e:4a:05:e4:58:68:91:1e:1c:19:ee:
         45:4a:8b:a0:1e:e6:1a:6f:03:5e:33:e1:fb:dc:58:80:fc:8a:
         61:6e:06:ed:08:0e:38:dd:72:57:18:41:fb:09:08:f9:9c:72:
         0b:d9:a6:c2:fd:a7:d3:fe:c1:f3:a4:99:a9:1c:39:dc:bc:a9:
         18:5f:9f:49:05:72:b5:36:4f:0d:76:2f:e8:5d:da:3a:39:0e:
         45:a3:26:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:44:56 2024 by rpki-client on console-fra.rpki-client.org