Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File:                     J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier:          hbFfS6CeE4U5uuDGuFlDA0D1pYN3TOX7KIQjaq6jz6k=
Subject key identifier:   6A:C1:51:56:63:03:35:B0:6E:33:04:B6:90:2F:D9:82:26:B8:ED:40
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer:       /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial:       019048D5198FC9ADF357BF6130623FAE7D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number:          07FA
Signing time:             Mon 24 Jun 2024 06:00:43 +0000
Manifest this update:     Mon 24 Jun 2024 06:00:43 +0000
Manifest next update:     Tue 25 Jun 2024 06:00:43 +0000
Files and hashes:         1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: 6QxxzhmKUtVzfp4zX3bUeAJ+XcoawzbZlZ2TUMi+WcY=)
                          2: q4PedCM0bA7ZyMUIvdUHwyn_hAE.roa (hash: Ot66aeSmcsEj4g1jRkL1C6rafHFNNQyI7SlYCsc7pi4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d5:19:8f:c9:ad:f3:57:bf:61:30:62:3f:ae:7d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
        Validity
            Not Before: Jun 24 06:00:43 2024 GMT
            Not After : Jun 25 06:00:43 2024 GMT
        Subject: CN=6ac15156630335b06e3304b6902fd98226b8ed40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:a4:0d:09:ff:91:a0:0d:d4:74:ab:56:6e:
                    f3:4a:0b:1d:af:1d:53:2d:83:58:0a:ec:b4:d2:fb:
                    14:41:ae:40:aa:55:2a:43:b6:e6:76:79:10:f1:21:
                    3b:c1:12:64:10:d7:b3:cb:be:15:74:30:96:8a:40:
                    bf:bb:ec:5c:18:3c:41:8e:69:57:54:e7:42:7e:c9:
                    6e:ca:fe:9e:cb:a6:70:f7:db:03:e9:80:0f:a5:e7:
                    12:cb:ff:5b:91:a7:a1:f6:cf:45:12:bc:1e:a6:1b:
                    e7:24:5e:54:4f:2a:82:a5:6f:04:10:c7:ce:4a:f2:
                    d3:5d:d4:5f:0d:02:62:5c:2e:74:8a:74:3d:b6:9a:
                    55:ef:fb:60:dd:e9:ee:0d:d7:06:42:71:6e:12:1b:
                    20:f9:9f:de:c6:3a:2e:2f:e0:22:27:19:9f:51:c0:
                    79:36:bd:75:ef:5a:6a:9a:4a:52:78:7d:89:a6:ac:
                    1c:8b:60:6c:63:bd:34:10:b8:eb:0d:31:c5:8d:61:
                    78:f5:5e:d2:2b:be:81:32:04:62:bf:ce:71:13:ae:
                    7c:6a:10:45:5a:84:57:c6:56:28:54:0f:6f:ae:3a:
                    41:3b:b9:f0:dc:f0:9f:6c:06:4a:82:eb:5e:2d:3c:
                    fb:e3:28:b7:25:ad:d3:8e:1a:bd:c8:cf:d8:f7:55:
                    ec:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C1:51:56:63:03:35:B0:6E:33:04:B6:90:2F:D9:82:26:B8:ED:40
            X509v3 Authority Key Identifier:
                keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:fe:47:44:40:9e:c7:2a:bc:60:b9:0a:40:59:7d:f7:7f:
         10:16:50:a1:37:71:05:64:7c:8f:47:b1:2c:9a:6f:a3:c5:14:
         60:5a:7a:b7:18:30:4f:8a:61:fc:01:7e:a9:c4:82:64:2b:79:
         21:d2:f9:6d:6e:c7:61:98:fe:9e:af:37:ea:8d:7d:af:46:3f:
         73:03:2e:ae:36:cb:33:85:5c:88:3c:28:54:30:65:82:b8:54:
         7e:f0:81:b1:6d:f8:97:9a:59:6c:2e:1d:7a:5a:eb:4a:c4:33:
         77:76:ee:96:e2:e9:d1:c9:91:b5:a0:c2:6b:cf:31:3b:4c:87:
         58:82:f5:7a:cb:4d:73:b7:aa:f4:6a:5e:c3:9c:41:06:cd:9c:
         92:28:a2:e3:b4:be:c0:05:52:0b:90:b3:32:b8:55:9b:d7:72:
         48:38:11:e6:1d:6d:78:95:c8:02:4d:e3:09:9c:71:8b:ea:67:
         ff:22:80:da:dc:a1:1a:d3:67:a9:e9:73:c1:3d:6f:75:0e:7d:
         1c:bf:34:43:07:a1:0b:36:b7:64:87:0f:b9:4f:5b:06:aa:ac:
         04:fc:38:24:cf:25:d2:8e:1d:13:bc:5f:c2:5f:41:9e:42:77:
         72:ce:61:3d:fe:e0:5d:1d:63:94:0c:a3:fe:95:c9:78:a9:fc:
         f6:eb:ac:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:48:41 2024 by rpki-client on console-fra.rpki-client.org