Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File:                     CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier:          JcCrIdGfGODe0Aa2rt01IJhVhlm5WlvTWCDgvKxU+SE=
Subject key identifier:   65:B4:47:A2:63:E2:B2:4D:B4:AC:F2:89:F0:E2:1D:66:F0:1D:92:1F
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer:       /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial:       01901FDB64C93B2721B8A460AF5489FF90A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number:          0276
Signing time:             Sun 16 Jun 2024 07:03:10 +0000
Manifest this update:     Sun 16 Jun 2024 07:03:10 +0000
Manifest next update:     Mon 17 Jun 2024 07:03:10 +0000
Files and hashes:         1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: RkvYpxMb7pQQNzlsqfYQwW9wjcjAu55F+2RAZSwItjA=)
                          2: tqR85yvb0m5D72Xt4vbLiVW4Vi4.roa (hash: IMZcUnMtjuzdcFHFTANC94RWzMHTMx78WzTPgGlofbQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:db:64:c9:3b:27:21:b8:a4:60:af:54:89:ff:90:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
        Validity
            Not Before: Jun 16 07:03:10 2024 GMT
            Not After : Jun 17 07:03:10 2024 GMT
        Subject: CN=65b447a263e2b24db4acf289f0e21d66f01d921f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:8d:4f:dd:10:48:f3:23:7b:2c:2a:16:41:
                    d3:2f:bc:2a:69:f8:0a:d7:47:c4:98:3e:a1:07:22:
                    45:ac:ad:81:6a:8d:4b:ee:c6:06:58:da:51:b2:c2:
                    bc:16:32:b6:e3:95:dd:23:12:69:f2:d5:a3:d9:ce:
                    67:c1:f7:49:2b:90:32:77:a2:ed:bd:92:72:8e:ab:
                    05:70:1e:f2:c8:55:87:1e:7c:23:d9:c8:80:96:87:
                    1d:1b:ca:1d:26:ad:4d:59:ed:d1:37:32:e7:9f:c5:
                    e7:7a:1e:35:eb:54:2c:f8:41:a7:75:5f:52:7b:bb:
                    33:31:c7:91:7c:db:89:6c:2d:a9:56:b2:0d:6b:a4:
                    25:ff:dd:ed:69:59:8a:c0:9a:7c:7a:da:3a:c3:bb:
                    f2:9e:45:f9:dc:63:68:40:ea:b2:22:85:79:20:4b:
                    19:00:87:a3:7c:72:f0:f8:b7:17:11:48:46:4c:c5:
                    54:32:92:11:37:98:48:4f:19:da:1b:32:44:d5:b4:
                    52:9d:6b:d6:6b:3e:b3:2d:2e:12:68:e3:af:a3:38:
                    34:9d:18:c9:7b:d7:52:c9:3a:34:f1:f9:79:cf:ed:
                    28:54:1e:43:76:86:e6:70:21:dc:c2:17:5e:dc:29:
                    6f:28:66:ab:56:22:ad:17:73:dd:7e:20:22:78:77:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B4:47:A2:63:E2:B2:4D:B4:AC:F2:89:F0:E2:1D:66:F0:1D:92:1F
            X509v3 Authority Key Identifier:
                keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e5:82:62:80:4c:cc:7b:3e:14:91:92:0e:30:93:ae:fa:29:
         44:8b:62:95:5b:4d:27:95:63:60:82:85:f0:af:f2:d6:f7:13:
         fb:fd:8d:23:79:fa:b1:8f:c5:26:f3:77:d4:8d:0e:39:4d:91:
         f9:23:2d:12:7b:64:9f:d9:ab:f8:32:1f:cb:6d:25:01:6d:01:
         44:6a:20:6e:42:f9:08:87:a1:8c:3b:14:14:f2:88:3f:d3:73:
         c9:2d:e9:66:b7:55:2e:ab:76:a1:fb:50:8f:4f:1d:d6:87:e4:
         ab:86:f5:a2:7c:ee:51:0f:31:ec:f5:43:90:e5:db:c9:6b:46:
         2e:8b:1b:94:29:ab:a7:7e:98:b4:58:68:d9:91:f5:7e:fd:18:
         2f:14:1b:c4:0b:6f:97:ef:bf:a3:72:94:66:3a:d6:d0:00:04:
         82:21:27:71:b1:7d:6c:48:29:1b:6e:50:af:b2:91:ea:40:f8:
         ab:f2:57:84:0e:56:7d:50:ef:ff:3e:f2:3b:b1:99:e5:51:d0:
         8b:8b:60:6a:fd:b8:33:8f:87:69:e7:1c:5e:20:e5:e9:96:2c:
         c9:29:34:78:ec:b4:97:25:e0:0c:59:79:e5:41:0d:99:32:52:
         67:81:68:00:4e:e2:73:53:29:6b:af:9c:89:c8:51:21:95:f7:
         1a:0f:2e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:04:30 2024 by rpki-client on console-fra.rpki-client.org