Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
File:                     EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json)
Hash identifier:          Nj6+xifp4kModc5OFnvjWHZNowyLMOE1GyKY8xFWK/g=
Subject key identifier:   CB:FF:CC:66:A7:E6:03:AC:7C:15:FC:42:B2:F8:B6:03:0A:B7:69:A2
Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60
Certificate issuer:       /CN=12d72718d155ac0e7d327f6384a2e4c95416d760
Certificate serial:       01901CA125EE43FFB04DBEA98B86CCBA2D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 16:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:41 +0000
Files and hashes:         1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: q7gr8J1vfruH9GvB8G3WB/NGm4g/1ngFZtG6VeuzQRo=)
                          2: QZzDVunUsVx1XzvO_4ydN0TW5XE.roa (hash: pp416bTJbRs2Ap3euetgJWvawSng5qSSjiUAQUCDzUM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:25:ee:43:ff:b0:4d:be:a9:8b:86:cc:ba:2d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760
        Validity
            Not Before: Jun 15 16:00:41 2024 GMT
            Not After : Jun 16 16:00:41 2024 GMT
        Subject: CN=cbffcc66a7e603ac7c15fc42b2f8b6030ab769a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:ba:b4:3f:2b:82:18:ad:41:52:b7:c8:6a:
                    3b:23:d9:5d:a3:44:c0:f5:03:51:f9:e7:b3:1d:16:
                    a7:9f:c6:88:a9:b0:18:46:2f:6a:83:44:29:06:04:
                    5a:b6:8b:69:6b:15:6e:dd:d6:0c:cc:6d:3c:66:1a:
                    fb:11:fb:75:1c:9c:f4:a3:75:ee:91:fe:14:04:cf:
                    b1:43:89:97:48:ec:90:77:9d:a9:fc:50:c4:2d:fa:
                    04:c5:ae:fa:a4:f3:8f:2b:a4:fe:2c:57:1d:6d:d5:
                    5e:48:92:c2:e2:35:4a:78:2e:f3:51:1f:20:50:15:
                    0c:98:91:c8:eb:22:a4:0f:48:c5:9e:a1:5e:34:49:
                    36:69:2b:ee:56:7b:9e:b9:07:2f:12:97:d0:8a:32:
                    82:3d:89:91:91:74:c8:62:1f:b7:83:60:38:83:75:
                    e5:c4:bf:6b:01:0e:37:85:48:fd:eb:41:99:72:00:
                    a8:07:cd:41:bf:7c:15:c6:e5:d2:6a:23:7a:a0:89:
                    4e:36:d8:a4:4a:ce:b8:02:6e:b7:40:59:24:0f:e1:
                    14:de:60:07:a0:11:04:f8:30:76:25:5f:9d:c8:e4:
                    21:a8:22:a1:b6:9a:6c:91:50:e4:41:15:19:ad:b4:
                    f6:0f:d0:74:64:70:da:ea:93:ae:34:a0:f0:4e:a8:
                    57:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:CC:66:A7:E6:03:AC:7C:15:FC:42:B2:F8:B6:03:0A:B7:69:A2
            X509v3 Authority Key Identifier:
                keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:7e:6f:c0:93:b5:ff:5f:d6:f6:b3:27:52:10:e6:0b:5f:1e:
         f9:f6:a7:ff:2a:3d:72:ee:4a:96:7f:58:00:bd:6d:c2:1d:58:
         2f:b2:89:c1:84:91:25:0e:60:c6:74:27:a3:c9:fe:0b:fb:4a:
         74:cf:f3:88:48:0c:35:47:2d:e3:6c:ef:20:dc:de:c6:43:71:
         00:a7:ad:bf:dc:2b:a1:4a:cc:e5:86:58:32:ae:43:ae:2f:1f:
         0a:e7:66:e5:fd:55:44:4e:20:0a:21:e8:e5:22:0f:f5:dc:42:
         92:2e:70:8b:9e:06:6d:b8:f4:d2:ac:8b:3f:90:c8:63:72:f0:
         fc:c4:77:2d:a1:d7:5d:c0:ae:fa:9d:af:8d:ed:fa:33:84:c2:
         ad:db:e2:b2:83:bf:12:e9:70:23:35:5c:07:a6:31:30:83:c0:
         61:20:a6:fa:af:b9:f4:54:4c:ee:70:ad:ca:df:fb:91:9e:e5:
         54:a8:90:00:e6:a1:c8:da:42:a7:b2:6d:e0:a4:e8:31:ed:4e:
         0a:97:8e:2b:2c:ba:6e:6b:f7:ed:cc:1c:f5:74:5a:af:8c:63:
         94:fb:56:d1:77:a4:89:50:1f:a4:11:6b:27:67:c9:7b:4f:ad:
         0e:a5:94:6f:a8:9f:64:b5:de:88:be:4c:b0:d3:4a:ea:cf:91:
         8c:b6:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:31:56 2024 by rpki-client on console-ams.rpki-client.org