Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File:                     4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier:          sHjC79GnRRJ2mb5UXwL6pcynUXLuoZ+jU3Qbb1oqeZw=
Subject key identifier:   1D:4D:58:0F:31:D6:3B:AB:38:38:02:CC:C4:A9:CA:AB:F8:14:5A:16
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer:       /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial:       019037E1C0AC213A244EEE2CA1E5A69B3CD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number:          069C
Signing time:             Thu 20 Jun 2024 23:01:00 +0000
Manifest this update:     Thu 20 Jun 2024 23:01:00 +0000
Manifest next update:     Fri 21 Jun 2024 23:01:00 +0000
Files and hashes:         1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: HtnZSxsgjTr4CBbLEv+giHYijGasS5lkpPtomylT7UQ=)
                          2: KSTzKgVWUvCIUrWJkDbNAZRY1eU.roa (hash: BxEzAu5+3GhcCrQFPuD3DtLekD9rPewvnpsmFGOhsVM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 23:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:e1:c0:ac:21:3a:24:4e:ee:2c:a1:e5:a6:9b:3c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
        Validity
            Not Before: Jun 20 23:01:00 2024 GMT
            Not After : Jun 21 23:01:00 2024 GMT
        Subject: CN=1d4d580f31d63bab383802ccc4a9caabf8145a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:f1:6b:cb:a4:64:d3:d9:06:fc:40:e8:3c:
                    e9:a6:3c:18:87:3e:3c:07:45:7a:24:d5:fe:87:73:
                    a1:99:27:db:ec:28:a2:da:2d:be:35:96:d5:07:fa:
                    2c:a4:35:e9:b4:dc:36:b0:70:97:e9:db:27:5a:bf:
                    d5:32:42:26:94:76:b2:f4:09:1b:bc:d5:bf:b9:f4:
                    10:d9:a4:30:d6:9d:ab:b6:27:31:d2:e9:f6:49:1a:
                    33:dc:bd:2a:3c:43:70:86:2c:e0:89:9a:07:39:40:
                    41:05:5f:c8:bb:1a:04:27:c8:ad:4c:e6:61:9e:8f:
                    e8:f0:16:a3:91:bd:1c:96:cc:1c:7e:55:9d:ef:7a:
                    fa:c5:d5:76:0c:e4:5b:02:fe:38:90:92:b2:b4:aa:
                    3e:b2:d5:17:1e:d8:29:80:e0:a6:07:2b:16:af:04:
                    69:8a:83:cc:d9:a1:d6:95:f3:05:20:b9:ea:a7:42:
                    b9:86:c1:62:7e:79:18:94:26:0c:b2:6f:ed:dd:3f:
                    b8:c1:d0:96:6d:8c:0e:3c:21:3c:9c:8f:09:33:d7:
                    96:56:fb:84:dd:95:21:74:c4:3f:4b:11:1c:2c:96:
                    78:f7:6e:26:5c:43:8b:54:24:9c:5e:24:8c:56:52:
                    10:d7:97:17:8b:a1:e5:6f:bf:83:3f:71:08:a1:ad:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4D:58:0F:31:D6:3B:AB:38:38:02:CC:C4:A9:CA:AB:F8:14:5A:16
            X509v3 Authority Key Identifier:
                keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2f:17:0e:c5:64:89:73:65:be:d0:11:18:45:10:e7:1b:4c:
         2f:5c:2a:25:e7:84:1b:64:8a:5c:67:fa:0d:97:cd:bc:b1:46:
         4a:d5:27:0b:91:57:2a:b6:20:8b:2e:82:79:b8:c6:b0:3a:fd:
         2f:29:ab:b1:bc:e9:25:57:43:e6:d2:8d:ad:5b:57:1f:82:8f:
         dc:55:2c:f5:be:1c:30:b4:05:c7:1a:97:c3:80:d8:0c:e0:f2:
         a6:5c:5a:92:41:38:ae:05:88:60:01:5b:37:ec:c0:32:8a:52:
         fb:d7:6a:cf:be:26:51:1d:9d:3e:01:1e:28:70:9d:7c:33:86:
         1d:2c:05:1c:fc:29:ed:3f:e1:00:5d:6c:45:32:72:a6:65:d2:
         2b:9a:d9:3e:99:e1:42:63:2f:25:aa:4f:f3:16:a3:76:41:39:
         29:ec:28:8c:b9:9a:98:ff:9e:e9:3d:09:2a:7c:f0:34:a4:74:
         7c:1e:96:d2:7b:63:61:b5:8a:5f:c9:25:42:00:e9:c7:d6:f2:
         46:b8:52:47:76:7e:f6:f0:bc:f3:ae:5a:ec:98:54:09:3d:6b:
         f4:fe:4d:01:bd:6f:c2:1e:00:94:98:01:49:ce:c2:11:83:be:
         44:c2:d8:f8:5a:ad:0c:55:40:8b:ca:9c:3c:b2:d3:60:84:de:
         03:82:ec:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:35:25 2024 by rpki-client on console-fra.rpki-client.org