Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File:                     4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier:          jR4ettt+rDzSr7lzNfIfN5UIR5ah60Z9izjI3dfmlzo=
Subject key identifier:   9F:90:A9:45:25:C5:20:DC:B8:36:C2:9B:7C:85:19:05:AA:FC:72:67
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer:       /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial:       01901CD8B4B559536A5969EBDD08D30F632A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number:          068E
Signing time:             Sat 15 Jun 2024 17:01:22 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:22 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:22 +0000
Files and hashes:         1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: Vp6zFJ6iUFWRrcpbu8Jc9fQTPbBQRyTFH0Aa3WCODmY=)
                          2: KSTzKgVWUvCIUrWJkDbNAZRY1eU.roa (hash: BxEzAu5+3GhcCrQFPuD3DtLekD9rPewvnpsmFGOhsVM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:b4:b5:59:53:6a:59:69:eb:dd:08:d3:0f:63:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
        Validity
            Not Before: Jun 15 17:01:22 2024 GMT
            Not After : Jun 16 17:01:22 2024 GMT
        Subject: CN=9f90a94525c520dcb836c29b7c851905aafc7267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:19:72:fc:ae:67:61:86:2b:43:d8:0f:21:
                    54:80:6a:b6:3f:2c:76:b1:8f:90:17:f4:92:b6:4d:
                    a5:c8:f1:5d:7c:ae:15:50:2d:dd:1b:f2:a8:31:47:
                    57:64:6c:0b:2b:56:cb:fd:b0:67:59:49:70:48:17:
                    08:00:74:4c:1a:9e:8f:91:ac:90:ab:04:ec:12:e2:
                    80:70:7c:56:c5:4e:61:f3:25:6a:71:c5:75:8a:a3:
                    c0:fb:4b:43:40:90:5c:59:eb:a8:10:51:7b:49:7d:
                    a5:99:81:ff:bd:45:df:e1:b1:49:82:62:2d:5d:39:
                    26:34:08:3d:e5:ce:79:01:ff:9d:06:96:e9:50:c1:
                    de:5b:43:fd:6a:a3:65:d0:8f:a9:69:a1:4e:6a:85:
                    b7:9f:ce:3b:d8:28:2f:42:91:eb:f6:1b:91:d4:5b:
                    ed:ee:69:65:9c:69:00:21:fe:b3:e7:f2:db:2d:2f:
                    a0:ce:c2:15:76:0f:f0:08:89:11:65:dc:90:00:b0:
                    a7:a3:21:d8:d6:a4:ab:9e:e9:15:fe:4d:0a:89:79:
                    0a:bf:c2:3e:84:5a:3f:2c:39:5e:f1:48:ae:0c:45:
                    f6:84:b3:52:4c:c9:a8:25:27:61:ba:47:0d:90:8c:
                    c6:2c:ed:60:be:b4:d7:ac:55:36:70:4e:e1:70:bb:
                    92:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:90:A9:45:25:C5:20:DC:B8:36:C2:9B:7C:85:19:05:AA:FC:72:67
            X509v3 Authority Key Identifier:
                keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:d5:1f:bd:f5:d4:02:74:00:ea:44:b8:d3:d4:e5:f5:af:
         b9:90:30:50:c7:ea:c9:37:99:7f:34:6a:53:53:51:53:e1:71:
         c8:35:71:9a:70:3f:9e:6d:7a:04:a5:35:d7:ac:b6:20:39:29:
         1c:da:65:87:6b:68:f4:27:41:d2:1b:73:95:d5:e3:29:f4:56:
         4a:d9:f2:f7:d2:9b:9d:13:d0:d5:a6:10:fa:8e:c4:de:35:26:
         41:0e:c6:30:10:3e:a6:ea:f0:8b:9f:d6:e4:93:cb:4a:83:53:
         8a:80:20:14:50:0c:36:94:3e:cc:4d:90:41:ef:f9:00:90:52:
         9a:d7:f2:ca:9f:8c:3d:93:65:4a:aa:53:e6:4d:e2:db:e1:af:
         3a:48:f4:38:d3:ea:d2:bd:8c:9f:00:b7:0a:2c:8e:15:5c:77:
         62:a2:16:82:e8:f9:76:03:26:ab:b0:86:f9:31:9d:96:d1:20:
         8f:8b:4a:81:17:af:6e:6a:1d:65:70:b6:23:28:31:57:5e:b8:
         fc:34:cd:b9:69:62:dd:25:13:5b:0c:6b:3c:e9:34:68:49:81:
         0b:d5:a5:1d:79:a3:e9:26:83:fd:b0:19:19:e7:e3:f6:50:81:
         2c:3d:e3:38:09:01:ab:a6:72:d5:ff:0a:6b:74:55:8e:d3:41:
         35:2a:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:53:01 2024 by rpki-client on console-fra.rpki-client.org