Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File:                     dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier:          x2K2P8/W9amD82scXcuQGsnRVWyNugDTrCmmi1onmok=
Subject key identifier:   E1:DE:7B:66:6F:40:A4:9B:35:02:4E:D1:13:93:89:C2:82:C1:5F:B2
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer:       /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial:       01901EFDCEA72A99E57E657A9B6B28634453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 03:01:08 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:08 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:08 +0000
Files and hashes:         1: bSRavz531iDXgyDmegycAlmSi1A.roa (hash: 30/VTvTFxf6FwBl6PAApQuXQp4KL0lqvLPS6Ry6wNhE=)
                          2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: C3r7B/AO7ry93EAHcAtRXPhyDNl3yD8kE3TfQbRupWo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:ce:a7:2a:99:e5:7e:65:7a:9b:6b:28:63:44:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
        Validity
            Not Before: Jun 16 03:01:08 2024 GMT
            Not After : Jun 17 03:01:08 2024 GMT
        Subject: CN=e1de7b666f40a49b35024ed1139389c282c15fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:d4:50:62:6f:2b:81:e6:01:d2:f3:ff:7a:
                    42:28:4e:20:8b:88:9c:10:99:b9:39:8a:ef:c6:ca:
                    1e:ee:75:89:8e:32:2b:0e:b5:ae:e1:77:a9:2e:87:
                    7e:1a:f9:ac:e3:39:3c:b3:63:31:20:19:90:8c:42:
                    29:bd:21:c4:fb:4b:34:26:14:60:9f:db:6a:8e:2d:
                    36:6a:86:79:16:27:9b:6d:d8:c6:a2:22:83:0b:bb:
                    31:ac:01:a1:63:b4:64:49:35:e9:eb:fe:a8:1f:16:
                    e4:08:6f:f1:67:63:35:9e:df:f3:15:db:51:7c:75:
                    68:70:96:c6:09:87:6b:1e:92:b1:fe:80:42:c7:b4:
                    52:6c:31:cf:25:e9:04:a3:20:28:57:ed:01:de:7d:
                    e0:3b:8e:2b:64:3f:95:5f:bd:67:3d:d8:a0:4d:c8:
                    14:e6:6a:33:08:45:ec:ce:80:b6:d1:22:59:b4:38:
                    02:ca:c0:d1:69:8a:d9:9d:69:da:4e:62:f3:16:08:
                    81:23:8c:86:c4:90:dc:d2:4c:aa:26:a8:50:83:b7:
                    6d:c8:93:78:81:00:2d:c3:60:8c:ef:5e:ac:44:df:
                    83:2e:e6:39:b6:4b:5c:1a:4a:0b:de:d6:93:c9:ff:
                    ce:8b:7c:4a:e4:33:b9:a8:0b:b5:75:d3:bb:6d:b1:
                    bb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DE:7B:66:6F:40:A4:9B:35:02:4E:D1:13:93:89:C2:82:C1:5F:B2
            X509v3 Authority Key Identifier:
                keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:24:f4:da:15:63:b3:28:67:fb:26:92:3e:a7:e9:68:28:54:
         1a:e5:37:37:a2:71:4a:cc:2b:35:22:5e:02:dc:6e:b8:40:ef:
         42:f0:71:23:9b:89:8e:5c:ee:b6:87:94:96:75:d3:1c:f8:30:
         59:ca:1d:f1:a9:d8:4e:6d:ae:1a:82:cd:5e:b0:ca:fd:19:1b:
         2a:8e:50:c3:ad:64:4a:6a:7f:55:4e:9a:16:a6:12:8a:df:bb:
         e7:dc:88:7b:ef:f7:7b:4d:c7:a4:b7:dd:b0:27:73:1a:0a:99:
         ea:b2:b8:bc:b6:e8:56:4a:d1:64:d4:26:cc:7d:55:9a:3d:fb:
         75:db:b6:66:72:3e:ee:99:e5:a5:2b:5a:c0:d6:01:e8:1c:1e:
         f4:5c:03:cb:d9:8a:6b:52:81:1a:d7:21:ad:80:c0:6b:c3:28:
         f8:ae:38:98:2d:b1:72:d3:67:eb:b9:1a:1f:b9:9c:0e:ca:da:
         44:4e:e5:f9:57:fb:7e:6f:19:76:50:34:68:c2:df:4a:52:0b:
         28:0a:c9:7d:1d:7a:5d:3e:e5:a1:9a:6d:0d:10:0d:0c:1f:fe:
         a0:69:5f:c3:c6:c8:f6:59:dd:1f:33:91:39:23:e8:54:72:83:
         06:29:48:49:1c:fd:4a:f5:bd:d2:46:83:fe:48:73:3f:2b:3b:
         08:89:ba:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:06 2024 by rpki-client on console-fra.rpki-client.org