Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File:                     7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier:          DJAcRi3aVhe/exAfEyuKhe03UX6w+fnyn1VtQAC/CP4=
Subject key identifier:   A0:6C:B8:60:B4:B6:4D:20:74:77:E4:77:2B:4D:99:34:00:3E:48:17
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer:       /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial:       01901DEB8967BBDB6C40ED50E5A6C37B8F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:01:33 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:33 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:33 +0000
Files and hashes:         1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: 74i0oFaBbhKn2jn9Dz3VTVd1LXPnSeK8MRDUvqh4jgg=)
                          2: XolyMeFrw-w4-LDhysbwnQQ898w.roa (hash: /BGdLu0JzkjUUFAsv/n97c84G46WAxR9DG/8bQOF9fo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:89:67:bb:db:6c:40:ed:50:e5:a6:c3:7b:8f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff0ab25662757afb831675319296f63d989b69
        Validity
            Not Before: Jun 15 22:01:33 2024 GMT
            Not After : Jun 16 22:01:33 2024 GMT
        Subject: CN=a06cb860b4b64d207477e4772b4d9934003e4817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:6a:72:93:c2:11:27:cc:e2:f5:31:c9:c3:
                    02:27:1a:53:0a:96:71:83:30:cf:ec:82:88:e1:c6:
                    4f:05:65:f7:26:04:31:90:c5:89:30:2a:88:55:09:
                    42:80:85:0d:44:f0:11:6a:9e:36:00:d9:cd:6d:09:
                    ff:98:98:2d:be:33:ce:6d:aa:60:20:af:57:08:3c:
                    e9:50:24:55:e2:33:0c:4b:5c:e1:f3:b7:84:db:cf:
                    24:66:c7:47:de:69:7e:1d:1d:66:28:f2:09:51:eb:
                    2f:c6:29:5a:9e:bb:0b:f1:fe:5f:61:e4:36:4a:5a:
                    97:99:6f:3c:08:4e:a3:75:8a:04:9d:74:8f:08:a7:
                    b8:7b:7b:9f:da:70:dd:65:05:fe:7c:5d:e0:bc:d1:
                    3b:e7:17:fe:b1:d4:19:06:ef:fb:23:6f:93:83:ea:
                    1d:46:6c:52:90:bf:98:b0:55:cd:b9:39:d5:f9:f6:
                    a9:5e:cc:d1:ec:72:35:a9:42:cf:37:c0:d6:77:7f:
                    de:a4:c4:b1:c5:e4:f1:22:3c:15:dc:f6:27:0b:dc:
                    91:28:12:3c:24:30:a7:4b:92:29:b4:a2:9f:ec:f2:
                    34:2c:b8:ff:dc:6b:5b:0f:c4:24:52:cc:50:60:78:
                    43:ff:45:40:b8:62:24:5b:bd:b2:a3:a6:63:c9:6d:
                    03:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6C:B8:60:B4:B6:4D:20:74:77:E4:77:2B:4D:99:34:00:3E:48:17
            X509v3 Authority Key Identifier:
                keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c1:17:53:3d:12:50:45:3e:23:01:64:9f:d2:dc:c5:69:e9:
         bd:84:2e:1e:fd:be:a1:93:26:cf:cd:7c:0d:d6:20:3b:7e:72:
         97:18:a9:95:b8:bf:45:6b:8f:15:f6:91:be:ba:43:61:be:d3:
         1e:89:d0:8e:42:6c:2c:e0:14:9d:9b:49:63:3a:8e:c5:4b:d9:
         98:02:88:53:d5:e6:f6:1e:a1:49:cf:13:86:8b:50:bb:39:5e:
         92:6f:99:34:92:12:e1:57:1e:37:98:d5:98:88:15:36:a6:e9:
         c3:6d:69:0b:21:0e:a5:2f:a5:b3:90:50:fd:85:8f:8b:78:94:
         56:17:c1:f2:77:1d:70:3b:21:44:fd:b0:53:56:6c:e1:6e:75:
         d5:d1:31:ec:fc:b5:16:01:b9:00:70:48:8c:50:fe:79:e9:4f:
         d1:e6:59:22:67:d7:01:75:ef:c5:1c:5a:de:d4:a9:f5:1e:24:
         35:86:82:1c:a8:40:20:9d:3a:a6:58:28:f9:7b:26:4a:e8:af:
         c5:35:e8:cc:2b:7e:36:d5:6a:15:d3:dc:e0:4c:72:8b:79:69:
         02:da:75:b8:9d:9b:62:13:ef:e1:20:95:7b:c7:fb:0b:fe:86:
         51:5c:fd:b1:a6:1a:f6:19:5e:c1:2e:e2:1d:1c:e4:c0:8f:88:
         c9:70:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:31 2024 by rpki-client on console-fra.rpki-client.org