Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File:                     7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier:          MDggRZp6DWB5rybuyvtXFoOcCisiXGbGLJjv5Y/IZo4=
Subject key identifier:   67:22:46:E0:A6:55:77:51:DA:37:BF:09:D8:85:AF:30:FE:10:45:DB
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer:       /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial:       01901BFEC67C2A0062B098B5E539A0C98635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number:          11CF
Signing time:             Sat 15 Jun 2024 13:03:19 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:19 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:19 +0000
Files and hashes:         1: 6WuJDLqkK5Z2xYhmx8u-BtyhDdY.roa (hash: Z9if4/2cziiCIHbICv5He2M3Y8yqRKqweMqrZaw0Dls=)
                          2: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: 7iNq+1sGD0xai67hZRL6NwQGEagJS791DmGjX4nYGa8=)
                          3: z1axDLzgcCtonhdmi2sKkKra3kI.roa (hash: qozlQVNqM5uEiSHvOmk4GEKYMvchvDy8p9FGtwuIAMo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:c6:7c:2a:00:62:b0:98:b5:e5:39:a0:c9:86:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
        Validity
            Not Before: Jun 15 13:03:19 2024 GMT
            Not After : Jun 16 13:03:19 2024 GMT
        Subject: CN=672246e0a6557751da37bf09d885af30fe1045db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:92:96:da:21:13:12:68:d4:67:a3:68:8c:bc:
                    38:9e:63:b3:74:21:7f:a2:04:df:74:0a:c2:b7:17:
                    ed:1a:5a:c0:cb:85:6f:fd:e8:60:9b:2c:b6:2e:5e:
                    df:31:85:5a:be:80:cb:fe:58:1d:65:92:65:a2:c0:
                    fa:c0:62:e8:a8:86:1b:f1:9d:1c:43:14:ed:4e:be:
                    54:8c:eb:ce:1b:32:3a:fc:1b:d9:8c:f5:d9:31:b2:
                    80:34:5b:95:20:4a:cb:74:04:bd:bc:aa:b8:11:45:
                    9a:2b:9a:1d:61:0c:1c:2c:fa:d1:6a:a5:4e:31:98:
                    a4:32:d5:7c:d3:c3:a7:d8:46:28:ba:84:8f:8b:8d:
                    78:df:94:e0:8a:de:21:bf:34:e4:7b:08:db:e1:06:
                    89:c8:f1:31:61:ec:8a:3a:c6:32:87:0e:57:26:96:
                    79:fa:ba:f5:89:10:1c:aa:97:e1:88:20:8f:59:1e:
                    0b:f8:c6:0b:e8:ad:aa:8b:a6:b2:6f:ee:d0:be:e9:
                    03:3f:24:5f:5a:f7:14:bf:ed:f0:ee:49:5c:f2:f2:
                    42:e2:e0:ab:3c:1d:52:0c:dd:7e:54:a5:eb:d9:cc:
                    a5:b6:ff:fe:81:2a:fb:c1:0f:97:0f:e8:d3:3e:7e:
                    2c:0b:cb:bd:36:37:d4:4a:eb:7d:78:71:2a:f8:52:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:22:46:E0:A6:55:77:51:DA:37:BF:09:D8:85:AF:30:FE:10:45:DB
            X509v3 Authority Key Identifier:
                keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:49:6d:da:e7:0e:18:7f:a8:3c:18:03:24:39:f0:0f:14:e9:
         5d:c3:8f:07:c3:76:0d:bb:fa:c9:da:d8:a9:76:1f:41:01:d9:
         92:be:c2:3d:1c:01:d6:98:92:ee:3c:5e:d6:af:1f:3b:d9:82:
         04:4d:3a:35:74:e7:d3:19:79:ab:35:62:d3:bc:ef:e0:ce:fd:
         2d:1d:52:75:0a:4b:53:5c:72:4b:9f:ba:3e:d3:84:c0:78:cd:
         0d:90:82:6a:58:e2:6c:03:42:d2:53:ee:04:ab:ea:87:02:39:
         e3:e2:98:82:e3:1e:ab:94:83:76:7b:eb:9f:b3:38:ac:1b:1e:
         3a:87:34:c3:9b:7a:9e:e7:a0:51:57:03:6b:9c:55:ea:71:53:
         b8:5a:11:d4:65:e5:83:b4:96:63:bf:39:a4:fb:55:d3:e2:5f:
         5e:62:f9:27:10:a4:09:0b:8c:45:f8:62:7f:6e:0e:b9:0b:e0:
         ac:04:e1:98:27:8c:7c:8f:5e:6b:b6:fe:8a:3f:bd:27:8d:72:
         5b:df:62:a2:bb:3c:b2:a2:1b:bc:e5:8b:19:81:46:50:2f:45:
         3f:cf:7a:6c:dc:6f:8e:d1:87:f0:67:f9:5e:80:eb:9d:1e:95:
         b7:1c:b9:2e:7b:a9:72:5d:ac:48:da:1e:be:31:bb:88:38:83:
         41:cd:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:02:52 2024 by rpki-client on console-ams.rpki-client.org