Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File:                     Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier:          l1EYEJEE2NY/0h1xtHBFdmg7WFBHVkFIuMLf1mkTevo=
Subject key identifier:   19:09:A6:C2:6F:36:BE:07:A0:E8:6A:7B:9F:E0:35:CD:37:37:E3:91
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer:       /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial:       01901DECF5F3B48D51A3ED06E65024968B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:03:07 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:07 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:07 +0000
Files and hashes:         1: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: dORYQlAlyYQ2JXDZJtSzkelH3362BU13d6CtMNPtKrI=)
                          2: cdCV5REndvFUwaZqF8m1fD7U3FU.roa (hash: e58VyXJPz2VlvM/a21SDawb+Gf+qKDre7w+rMmKHAg4=)
                          3: g-K66rj21wzF0waWDwtG511phW4.roa (hash: NQxRQOCv6hoCM6HJn6a6qJhblPT2EYtOR0ecGFTGSZs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:f5:f3:b4:8d:51:a3:ed:06:e6:50:24:96:8b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
        Validity
            Not Before: Jun 15 22:03:07 2024 GMT
            Not After : Jun 16 22:03:07 2024 GMT
        Subject: CN=1909a6c26f36be07a0e86a7b9fe035cd3737e391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:7d:6e:7a:0e:9e:f7:ec:88:ca:2f:1b:1a:
                    79:69:f6:8b:6c:35:6c:25:f1:3d:14:d8:6a:f0:34:
                    a0:48:24:13:71:8a:10:78:4d:a0:f5:dc:53:c0:0f:
                    a1:e7:77:15:cd:40:c0:dc:22:46:7d:ce:f9:9a:93:
                    d5:e0:88:ce:0c:81:c3:9c:4a:7e:e2:6f:92:52:1b:
                    47:6a:c4:b2:9c:78:28:0a:f8:6e:00:28:fe:0c:c6:
                    71:b1:2e:4d:df:ab:05:6b:06:f0:45:8a:06:aa:b3:
                    c4:fa:ec:44:ba:f2:66:8d:32:75:f4:53:01:3e:3c:
                    e5:e4:5d:9f:68:4f:19:15:c9:3d:91:55:99:fc:9f:
                    d4:a1:07:b9:9c:80:43:b0:ae:11:98:a8:a0:46:aa:
                    f6:17:f4:fc:5c:35:17:0d:d0:4b:8f:22:12:e6:eb:
                    87:b0:e6:ea:b3:94:bc:03:71:12:35:40:0d:54:a3:
                    8c:c3:69:25:bb:23:c2:a3:46:73:56:8b:91:a3:dd:
                    c1:cb:eb:31:25:8e:f9:a0:e9:16:f5:c9:5d:18:f6:
                    ac:41:36:5c:ce:83:be:e2:67:a2:6f:92:dc:2c:56:
                    b5:4a:ad:19:9d:c3:97:6c:da:d6:c1:80:ab:eb:19:
                    29:ee:14:7c:99:b1:04:8c:0f:37:a4:dd:f9:2c:40:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:09:A6:C2:6F:36:BE:07:A0:E8:6A:7B:9F:E0:35:CD:37:37:E3:91
            X509v3 Authority Key Identifier:
                keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3a:5a:2e:cd:6d:96:74:ae:2b:81:bd:91:13:0c:ad:03:e7:
         26:93:c1:b5:8f:4b:ab:ea:60:12:50:51:69:20:69:d9:d9:ce:
         85:c7:d5:73:c5:4a:d4:bb:24:30:ba:ab:b4:13:23:5a:da:58:
         9e:bd:2b:c2:49:c6:ce:34:6d:b7:16:44:8b:17:4d:3a:65:d3:
         64:4d:a7:bd:44:f5:df:e9:2d:7f:dc:c3:c5:1d:83:21:4e:e2:
         c5:6b:bf:45:c2:29:c3:fb:1a:ac:74:97:17:69:02:39:45:e4:
         d6:04:66:82:3a:a8:20:7c:4c:4a:15:78:cf:52:28:8e:db:b3:
         0e:95:87:7d:bd:5b:58:d4:ac:cb:5d:e5:31:f5:e6:a1:2e:ea:
         65:ce:71:99:e0:2d:c6:88:fe:a9:90:21:04:68:a9:ef:78:d3:
         9f:57:5d:f1:af:06:b8:da:f6:ad:37:a7:92:b4:55:55:da:94:
         f9:30:09:a5:db:0a:f5:9e:72:fa:ff:a5:6b:38:4f:68:bc:88:
         3e:74:0f:34:6f:da:9c:38:cd:43:62:f2:cd:9a:1c:00:c0:70:
         a1:f1:43:77:c3:93:0a:f5:22:90:59:05:78:0a:a3:70:bd:7d:
         aa:83:c8:5a:c4:bf:a2:a7:1e:66:72:47:cf:c7:b8:79:3c:8d:
         f5:71:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:45 2024 by rpki-client on console-fra.rpki-client.org