Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.mft
File:                     tPszH6QvtFHkVRxvkcu5wZ7jek4.mft (raw, json)
Hash identifier:          f3p/Kcp1UkqSPglkmR2UwKp2KzsUeRhOE+oalpZru68=
Subject key identifier:   27:F7:C4:05:4F:8F:D4:F4:83:35:C6:C0:18:3E:CC:F9:08:7E:F0:CB
Authority key identifier: B4:FB:33:1F:A4:2F:B4:51:E4:55:1C:6F:91:CB:B9:C1:9E:E3:7A:4E
Certificate issuer:       /CN=b4fb331fa42fb451e4551c6f91cbb9c19ee37a4e
Certificate serial:       01901DECD991F1526F0122837D16D7049832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPszH6QvtFHkVRxvkcu5wZ7jek4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:59 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:59 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:59 +0000
Files and hashes:         1: jco7O9UUxnLIClEpq58b1MWy6e4.roa (hash: gNcNfHHhvG+69kur5cgPMgsTy6iIVdfLsPj8dL8Mz/M=)
                          2: tPszH6QvtFHkVRxvkcu5wZ7jek4.crl (hash: MTl/6dCBCFksn+s6wnoS38XSihcXssSsKBH95XNzJ1s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPszH6QvtFHkVRxvkcu5wZ7jek4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:d9:91:f1:52:6f:01:22:83:7d:16:d7:04:98:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fb331fa42fb451e4551c6f91cbb9c19ee37a4e
        Validity
            Not Before: Jun 15 22:02:59 2024 GMT
            Not After : Jun 16 22:02:59 2024 GMT
        Subject: CN=27f7c4054f8fd4f48335c6c0183eccf9087ef0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d1:dc:be:84:d0:77:65:bd:f6:9e:36:34:44:
                    ae:01:e8:61:2f:61:35:e1:58:28:b1:40:20:be:ac:
                    e9:15:91:e9:a5:df:f1:02:5a:1f:dc:99:b4:00:e1:
                    8e:68:6a:81:5d:09:1c:3f:4e:25:ec:b7:cb:1f:12:
                    67:03:a7:65:5e:ea:a7:0f:c1:41:28:22:e7:f2:e6:
                    61:df:f2:c8:e3:6a:0b:ae:d0:bb:6a:42:2a:f4:f3:
                    1c:a6:15:b2:43:b1:3d:c9:01:e8:70:e3:ff:e7:61:
                    3c:fd:5b:a2:ea:47:bb:18:8d:07:67:c2:c3:c0:fc:
                    10:25:f6:ee:91:21:d6:49:b7:2e:3f:51:79:eb:cc:
                    a6:b4:7f:26:90:8f:fa:38:d0:ee:c5:a8:10:10:77:
                    ad:17:af:18:8c:6c:d8:97:f3:3e:32:ce:69:e9:b4:
                    80:04:ef:95:58:ec:23:21:a9:81:45:bf:ec:63:f5:
                    83:74:f0:4e:06:7a:d0:65:07:af:8d:aa:a5:f5:8d:
                    45:7c:af:ff:9b:e2:6d:73:03:3e:fb:94:66:65:ac:
                    3c:42:ee:59:b1:12:e1:4f:38:19:60:e9:d9:e3:ed:
                    a5:e7:df:95:52:9d:4e:eb:8e:54:d3:a6:0b:3e:87:
                    41:f3:92:e7:77:97:8f:26:96:9e:48:9c:9d:5e:40:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F7:C4:05:4F:8F:D4:F4:83:35:C6:C0:18:3E:CC:F9:08:7E:F0:CB
            X509v3 Authority Key Identifier:
                keyid:B4:FB:33:1F:A4:2F:B4:51:E4:55:1C:6F:91:CB:B9:C1:9E:E3:7A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPszH6QvtFHkVRxvkcu5wZ7jek4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:54:fd:2d:0d:4d:f5:79:72:b3:ba:ee:d1:46:07:63:46:9d:
         4a:a8:f1:c0:89:f0:75:3a:98:61:08:c1:4f:41:7a:ad:5d:3c:
         b6:ad:67:2d:3e:38:83:5b:b8:d6:48:8f:31:0b:44:94:f9:53:
         8e:15:2f:38:6f:d1:b9:e6:cf:fd:64:2f:ea:e5:f3:f7:b2:ba:
         6b:6a:8f:1f:33:3b:6f:cc:47:e0:76:fa:b6:40:0b:84:78:76:
         87:74:67:c5:2e:da:a2:e1:2b:79:ea:16:2f:f9:0e:4e:96:11:
         09:5d:59:95:ab:47:75:5a:6c:fb:44:a1:6e:da:e3:ac:e2:11:
         80:6c:85:ff:f6:60:88:3e:c4:8d:ad:2d:bd:86:11:81:98:48:
         70:b4:8b:03:ea:48:64:d0:2d:21:17:4d:fe:49:19:35:88:ba:
         52:43:10:75:04:a0:00:98:07:07:82:38:70:58:c8:21:0f:34:
         e3:7c:d0:f5:cf:69:2f:4d:c4:ca:44:2f:a4:21:91:e7:f2:1b:
         bd:18:ff:85:4b:e0:c9:88:39:f7:95:78:e5:12:e5:69:1a:c8:
         92:15:40:bd:b4:a8:4c:94:0d:8e:c0:f2:b4:bf:23:5d:1e:5f:
         d0:ae:5e:7c:f8:fb:a8:83:54:e0:83:77:d6:59:c2:bd:f3:70:
         9e:7b:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:32:54 2024 by rpki-client on console-ams.rpki-client.org