Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
File:                     53ltjBnzKhyvvVt49Sds6N-ZXQo.mft (raw, json)
Hash identifier:          /WCQxxi7PosuXuL1kwL5aAU4pKTaBh/oPnzcK0i30Bs=
Subject key identifier:   26:27:AA:27:A9:9D:8C:79:77:80:4D:C2:6A:3E:FA:44:DC:E0:F4:81
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Certificate issuer:       /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial:       01901CA12B3F1FFB97BA9DCD1D014E8DEE8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 16:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:42 +0000
Files and hashes:         1: 53ltjBnzKhyvvVt49Sds6N-ZXQo.crl (hash: /9XBaSgBYqkpT8s6CBghefQizkzYeE+aCkuufArUTws=)
                          2: f1T0Oh6QPe0yPwWdPUz078bLCeQ.roa (hash: LGTy35zaESh7N+Z7ji4tW93wUhU1zf7U9cObVrnOZbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:2b:3f:1f:fb:97:ba:9d:cd:1d:01:4e:8d:ee:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
        Validity
            Not Before: Jun 15 16:00:42 2024 GMT
            Not After : Jun 16 16:00:42 2024 GMT
        Subject: CN=2627aa27a99d8c7977804dc26a3efa44dce0f481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:1d:a9:8b:0d:62:02:e0:e0:44:79:8d:9f:
                    5c:da:33:e4:45:2f:a4:a3:c2:d2:35:73:a1:e0:ea:
                    89:5e:fd:81:e0:e1:90:7f:77:32:94:52:31:dd:cc:
                    dc:20:da:48:71:57:96:80:5e:fb:d9:74:5f:ef:3d:
                    ea:3b:1a:90:5b:b1:50:16:52:40:44:be:0b:ee:59:
                    4d:35:d6:95:43:b1:56:5c:9a:ed:ed:88:7f:fe:34:
                    23:72:c0:41:90:b1:66:1e:32:b9:6c:0e:92:34:f5:
                    67:84:57:55:1a:2f:36:95:c8:d8:ed:9d:a2:f6:9b:
                    e4:3a:cb:c1:c7:77:d6:36:45:be:91:09:e2:3a:32:
                    e4:16:34:7a:d2:18:f3:1f:93:0a:30:25:df:c9:28:
                    01:76:d6:4d:ff:a0:9d:e8:e7:ce:c1:ce:bb:56:62:
                    da:a5:4b:04:a9:38:7c:df:f4:36:f0:d4:91:bc:42:
                    da:f5:df:83:70:9d:c2:fc:90:a5:25:34:bc:14:46:
                    89:bb:3a:5e:00:25:5b:6b:54:3e:11:8d:d8:6d:7b:
                    a9:ef:0b:3a:d5:54:6a:8e:9f:51:e1:ea:e1:ee:fb:
                    63:4e:bb:73:1e:29:06:eb:5e:b3:64:96:bd:ef:36:
                    f8:ed:cd:ca:1c:0c:f6:f9:1b:a4:c0:44:66:e8:b0:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:27:AA:27:A9:9D:8C:79:77:80:4D:C2:6A:3E:FA:44:DC:E0:F4:81
            X509v3 Authority Key Identifier:
                keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:a0:9b:ef:5b:b6:bb:83:64:e7:5a:ec:d3:20:cf:6e:2e:
         e8:7e:2a:ad:db:71:fd:27:79:97:86:79:6b:d8:ff:71:12:06:
         7a:68:78:65:16:62:6c:6b:e5:d7:1f:95:88:66:1c:26:43:53:
         31:dc:13:3a:e5:7c:3c:18:91:d1:2c:7d:ac:a7:28:c0:e5:e3:
         36:05:4a:52:fe:20:a1:0c:a9:be:ab:60:45:2c:c6:b3:ca:7e:
         2e:70:37:03:9d:95:7a:56:d2:49:b9:0e:89:00:4c:34:52:62:
         be:f6:a6:75:d9:a5:4d:b7:70:5b:2e:84:2b:50:8b:83:ca:e4:
         49:41:d2:e1:12:94:a7:bb:c2:49:ec:49:4e:23:b7:89:d2:1e:
         fc:d8:3b:02:a0:ba:2b:85:3d:61:40:c0:dc:6b:97:6b:94:8b:
         51:58:87:4d:27:66:7b:33:fe:01:72:3d:06:62:0a:73:03:bf:
         59:0b:3f:f9:75:7c:09:b0:59:fe:74:4f:39:53:41:5d:bf:a4:
         ec:0c:81:62:d9:79:ab:6f:8d:9a:cd:61:f8:c3:7b:33:b7:9c:
         04:e4:3b:0f:9a:05:1d:1a:11:a0:64:e6:27:52:6a:21:ca:7e:
         83:87:ef:7f:ef:68:d9:65:b3:45:a6:2e:3a:de:7a:ac:7c:d1:
         6d:d4:fe:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:28:02 2024 by rpki-client on console-ams.rpki-client.org