Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
File:                     T7EQS7paPx3dLe67o0gZGfT5YaQ.mft (raw, json)
Hash identifier:          QOW5lgYcsOYseqMxIT+fhdJd5txQfRjFNaTWOBcFaog=
Subject key identifier:   13:AC:28:2F:40:21:A9:C7:1D:89:B8:D3:EF:2A:B6:CF:C7:61:EF:CE
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Certificate issuer:       /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial:       01901BFEC11A5E72839E96D730E32934AE17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
Manifest number:          0BBF
Signing time:             Sat 15 Jun 2024 13:03:18 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:18 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:18 +0000
Files and hashes:         1: 9aq1pBYuIxy30soIvi0x7AjaHlo.roa (hash: VIPwbqNvEQeGvdN16ZmjDCxGvCRLMNJmNwnkG4OQ2mo=)
                          2: T7EQS7paPx3dLe67o0gZGfT5YaQ.crl (hash: XmNw7I+8ZnCLDaf61yzWFGOZN6SfIT8pZXn1XwaF+J8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:c1:1a:5e:72:83:9e:96:d7:30:e3:29:34:ae:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
        Validity
            Not Before: Jun 15 13:03:18 2024 GMT
            Not After : Jun 16 13:03:18 2024 GMT
        Subject: CN=13ac282f4021a9c71d89b8d3ef2ab6cfc761efce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:be:8a:ab:6b:42:db:5c:ce:a0:dd:32:b6:
                    bf:b3:ba:82:cd:27:7e:fa:23:97:1f:61:25:2d:a7:
                    ab:63:2e:b4:a6:1a:86:8c:53:fc:f7:34:7b:b9:1e:
                    52:3b:e9:12:86:43:ae:76:16:19:00:24:c3:0b:be:
                    cb:77:15:7a:db:59:7f:8d:0c:3d:ee:2e:a9:1a:4d:
                    0c:81:e4:28:f6:ed:dd:f0:b0:8b:d2:50:75:a0:48:
                    e6:4f:89:bd:5d:5b:0e:5f:4c:55:1c:8b:3b:db:a2:
                    58:1f:16:eb:f7:ea:0e:67:1a:24:99:e1:da:f7:77:
                    a4:93:62:08:eb:6e:fd:b0:9a:8e:a0:fb:49:03:e4:
                    e4:2f:2c:3b:2c:86:83:a6:81:2d:85:97:c7:5f:d2:
                    a8:0c:f3:69:83:1b:7e:17:05:99:f3:88:46:20:fe:
                    fa:81:f9:06:38:27:03:56:5b:02:ab:82:a5:d6:50:
                    ab:f8:57:f6:53:42:d6:27:33:84:22:af:33:5d:fc:
                    5b:af:c0:e3:b6:36:0a:a8:b2:01:78:19:98:7f:62:
                    06:7d:64:14:5e:fe:d7:d8:35:43:4c:f8:1d:57:98:
                    0e:3d:ea:27:1b:45:25:b1:5f:6f:a8:9c:e1:c5:24:
                    86:d8:d9:64:71:2e:a3:87:8c:1c:da:82:62:d4:f2:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AC:28:2F:40:21:A9:C7:1D:89:B8:D3:EF:2A:B6:CF:C7:61:EF:CE
            X509v3 Authority Key Identifier:
                keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:24:66:8d:ae:76:94:66:51:89:cb:93:5a:c7:58:9b:a4:5c:
         81:31:eb:31:99:54:87:81:8b:e1:fb:5f:c7:48:44:0e:9c:c0:
         9a:8d:3e:1a:af:3b:f9:93:aa:54:f9:3d:62:96:e1:20:9e:92:
         bb:d5:76:35:c8:52:bc:05:3c:98:b1:ec:fb:78:eb:dd:ec:f0:
         8f:fb:89:ef:f5:80:b7:f8:94:9d:89:8e:fc:e3:ad:ba:6f:60:
         9f:a5:4b:b4:2c:39:c4:d3:ba:63:f4:ba:4d:58:16:01:d1:21:
         6d:9b:db:39:22:48:23:55:f8:56:1e:60:99:3d:18:eb:79:d5:
         36:c7:6a:2d:90:87:92:07:00:f2:9a:b0:e9:44:d7:18:a5:53:
         eb:db:91:00:1c:d7:72:00:e2:e8:08:00:b7:d9:3a:8e:fc:b2:
         b2:25:2f:27:6b:49:8f:2c:dc:c5:5b:07:6e:97:29:a0:2e:ef:
         7c:f5:21:a6:89:5d:91:af:1a:01:c8:f1:9c:81:46:28:cf:8b:
         79:9b:31:4e:bb:24:33:c2:75:26:34:b4:d3:3d:9a:c0:d8:51:
         01:8f:c2:d8:a4:8f:b8:a9:db:fe:f0:eb:f8:25:b5:f4:1b:37:
         0e:53:df:9b:94:b1:9d:3c:ee:7c:9b:49:02:04:dc:8d:0e:cd:
         10:f5:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:31:40 2024 by rpki-client on console-ams.rpki-client.org