Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File:                     73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier:          vmwJY2k8JXXyKiNIi/R3XEeS/nacNq9m9S/c1H7grLI=
Subject key identifier:   CA:9B:5E:32:5C:FE:31:AE:9F:6F:C5:5D:EF:3A:B1:DA:18:BE:6C:73
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer:       /CN=ef75517b3161a047762413301614217679a82608
Certificate serial:       01901E903FBA9D987BD865CB5B8FE35D4F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number:          B3
Signing time:             Sun 16 Jun 2024 01:01:28 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:28 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:28 +0000
Files and hashes:         1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: EvUWCJt5fXtXcHAnaxF8jCOkN6XbbgLijUVShd/0rtM=)
                          2: PBx77Cfoqn4EL1ZkzcRKpln_28c.roa (hash: +HOQRukDSjybshPbEXhp7b1Z1FV+ltp0SFjv4PVKWmM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:3f:ba:9d:98:7b:d8:65:cb:5b:8f:e3:5d:4f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef75517b3161a047762413301614217679a82608
        Validity
            Not Before: Jun 16 01:01:28 2024 GMT
            Not After : Jun 17 01:01:28 2024 GMT
        Subject: CN=ca9b5e325cfe31ae9f6fc55def3ab1da18be6c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:10:6b:7a:ae:bf:89:b1:9a:ab:cb:d7:7e:
                    3b:bb:8e:db:ad:3a:bd:fb:72:1c:02:bb:e7:27:99:
                    39:72:2b:35:22:df:00:a0:43:6f:fa:08:72:2b:82:
                    81:33:64:3c:c0:3d:51:56:3a:01:ef:fe:6f:fb:94:
                    b7:ef:5c:46:2b:a6:07:aa:2d:20:f8:78:91:dc:58:
                    32:7d:43:b7:45:7e:7b:88:2e:5c:91:20:60:53:3c:
                    c0:d6:7b:c6:75:fc:c2:0c:ed:23:6f:b4:f7:3a:67:
                    71:07:63:ea:de:73:59:ef:02:55:12:9c:2c:76:dd:
                    17:65:8b:78:05:af:c4:02:67:95:ed:66:be:ff:ae:
                    68:f6:58:de:97:a6:50:ef:c9:4f:44:59:29:33:5b:
                    77:46:1a:86:5b:69:67:ea:64:f8:45:19:a3:b5:c2:
                    c4:17:86:2f:de:39:e8:d9:6b:16:d4:b1:11:8a:7d:
                    66:a2:c7:6e:68:ad:c2:e2:f5:7d:b4:16:a7:ff:a7:
                    73:c6:c5:7f:e6:90:54:3e:ca:d8:0c:3f:0c:26:b7:
                    72:b7:57:9c:5d:3d:09:a0:1b:2a:d2:b3:22:1b:7d:
                    44:77:75:d8:53:16:de:6f:ab:2c:a3:9b:40:eb:1d:
                    6c:37:ad:8b:14:73:51:07:b4:d5:9d:17:a6:63:1c:
                    2a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:5E:32:5C:FE:31:AE:9F:6F:C5:5D:EF:3A:B1:DA:18:BE:6C:73
            X509v3 Authority Key Identifier:
                keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:92:9e:88:0f:c3:b8:46:b2:de:ed:4a:03:d8:0e:7e:f7:59:
         23:0a:4a:3b:ad:59:5e:d6:97:e8:ea:9f:db:67:f4:32:95:f9:
         eb:0f:4a:5f:91:15:8c:e8:9d:e5:bb:74:5f:ff:66:ae:3f:55:
         2c:5e:97:92:1e:8c:e1:b2:13:82:5d:19:ec:12:a3:e3:a7:8b:
         1f:9f:f5:48:d5:72:ab:e2:33:dd:79:48:4f:04:53:b0:c2:a1:
         f3:87:c1:14:5c:f6:a2:fd:24:3d:4d:44:37:cb:46:2e:4d:29:
         09:e1:12:09:27:14:5d:e3:96:63:dd:aa:5b:f6:73:cd:29:e9:
         c6:a7:a8:51:76:f5:96:e5:48:ce:e9:00:22:09:8a:6f:61:19:
         7c:8d:12:fe:82:f0:bd:ac:4a:a9:e7:49:0c:38:94:d0:6b:c9:
         15:5d:db:2c:d8:4a:a7:d4:01:02:35:b7:28:8c:cc:56:81:a9:
         69:6c:bb:9c:3e:ac:bf:8b:79:2c:14:cf:a7:13:23:88:8a:a3:
         77:77:2d:1a:8d:d4:49:7c:56:cb:47:b0:72:44:3c:4c:ef:f5:
         45:e0:26:ab:a5:61:32:d3:7f:0f:de:87:eb:a0:88:06:22:87:
         88:53:fd:bb:30:ea:f1:e2:26:69:42:96:35:fb:ea:ce:20:a5:
         a0:52:9d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:01:30 2024 by rpki-client on console-fra.rpki-client.org