Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File:                     Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier:          TmCs/pAg9TW9NqRoGybofXcivrIJE3gjc8X8TyGvqd0=
Subject key identifier:   70:91:E0:06:3F:55:B3:E9:34:5B:1D:29:86:3A:5C:E7:E8:02:BE:9D
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer:       /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial:       01901F34A7CFEC4ACD1E35F49E5C127C0156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 04:01:02 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:02 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:02 +0000
Files and hashes:         1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: 3aBwxgKFt/gBQjnpyRsnQUiFDFoKFq0WuQWbP+vxTd4=)
                          2: abO0AnlXa0JfatT8MLBDygpfHJY.roa (hash: e2ovSDXC/WbbCatunUN2NwyvbYsJQ02CWhLNp1IxiWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:a7:cf:ec:4a:cd:1e:35:f4:9e:5c:12:7c:01:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
        Validity
            Not Before: Jun 16 04:01:02 2024 GMT
            Not After : Jun 17 04:01:02 2024 GMT
        Subject: CN=7091e0063f55b3e9345b1d29863a5ce7e802be9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:82:85:4e:e3:d3:64:bd:f9:26:86:16:a1:
                    dc:f9:c4:0b:57:c4:f0:8f:a2:78:ba:0c:c7:93:62:
                    a9:af:ce:2f:c0:c3:01:93:60:8f:08:79:b9:83:ba:
                    bf:84:a1:bb:2a:f4:9e:fb:76:fc:5f:34:24:2a:2a:
                    97:ff:60:f4:2f:d2:88:99:bc:64:3d:13:e7:be:92:
                    e5:86:15:be:bc:4b:6f:14:b5:ce:c2:df:2e:c0:50:
                    10:9a:f7:f7:f6:7a:11:1a:49:7a:07:09:4e:f9:37:
                    bb:77:c7:ad:9e:42:21:8d:11:e3:3b:60:4b:8d:78:
                    74:b8:3c:37:7d:aa:10:b4:82:54:85:6f:81:f6:d3:
                    97:ba:4d:3e:05:02:18:48:a3:bd:c0:f0:5a:29:4b:
                    53:e3:fb:51:b0:0c:81:28:d9:a4:93:3b:bb:e5:8b:
                    d5:2c:4e:93:03:06:e8:db:69:ab:87:6b:af:70:5f:
                    40:6a:e9:c8:fd:7f:3a:92:9a:5a:fa:f6:cb:6f:45:
                    0e:93:52:af:06:dc:c7:7a:e2:28:7c:b3:ba:f6:7d:
                    40:71:2a:f8:98:f3:d7:99:e5:9b:bf:5c:ea:5d:5f:
                    cb:fc:13:e9:27:2a:30:89:c1:15:d5:9b:7c:12:3f:
                    d0:e7:76:94:b6:01:bd:cf:bd:42:db:4f:4e:3b:d8:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:91:E0:06:3F:55:B3:E9:34:5B:1D:29:86:3A:5C:E7:E8:02:BE:9D
            X509v3 Authority Key Identifier:
                keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b8:9e:42:d9:a7:05:a6:3d:dd:4a:1c:dd:3a:f2:39:f0:ec:
         15:9c:51:a9:b2:c2:52:f5:dd:6d:41:2c:9d:d3:f1:fb:ec:0c:
         f7:2f:c3:b3:e4:60:01:37:6e:45:ca:52:d2:4d:cb:f4:d5:58:
         88:8d:d0:3c:b3:80:b6:98:a8:dc:16:0c:33:32:3e:cc:e3:d0:
         61:e1:58:c5:47:8b:f0:65:8e:64:34:d0:f8:23:ec:08:65:e8:
         14:90:f3:82:f8:b9:5a:52:6a:97:ef:57:cf:be:c8:9b:ae:73:
         31:4a:2b:48:e3:16:84:f5:7b:71:e7:98:47:2c:0d:4e:78:27:
         cd:6e:6e:b3:9b:a6:c2:66:2d:75:b7:89:e9:db:22:03:ba:6d:
         38:0c:38:7c:d3:4c:0d:14:25:7b:5d:3e:1a:77:24:bd:12:6e:
         37:8d:1a:e3:55:9e:b9:44:82:6e:a8:1b:54:4b:d9:06:92:54:
         3c:d9:e3:4f:2a:ea:26:d0:b4:08:52:f3:e3:81:86:80:87:15:
         6b:2f:1f:6a:71:bb:8c:d5:ee:50:41:e0:e7:a3:99:3b:76:2f:
         78:72:b2:80:4d:00:30:e6:ff:eb:35:0e:ee:b2:88:9d:de:42:
         b7:5a:da:94:48:84:6d:8f:f2:9e:bd:2e:d6:81:b9:06:0c:52:
         1b:db:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:54 2024 by rpki-client on console-fra.rpki-client.org