Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File:                     7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier:          ou4ZjsCCPN8aBPjgtA2uHaXHF7KRkyTJjahHPmv6wA8=
Subject key identifier:   1E:73:EB:C9:77:38:43:54:C7:34:F4:1F:85:F3:87:7A:10:1A:82:28
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       01901DEDA4816A89E7C728BF2E2BFF6401B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 22:03:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:51 +0000
Files and hashes:         1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: rcweZ2sUn8JAKBs1A2gNgKlelRdlgoLgIo3hjb3F+dI=)
                          2: VzQGpaqCA8RHPUIAnCZv7EEONBg.roa (hash: xjmC3GNLD8FQvyw/0xoJzOmzfZWY3q1MX4QxuAJTEJQ=)
                          3: aQFeZPNzbb8ozSfDhXuDskMBZUs.roa (hash: XRAwuyNgj6JM4C6HsNHwrLPFxzEZRLpIbrng7DxYNR8=)
                          4: iYZJVtJfNboySXl9dUlXNGBfr2w.roa (hash: ku5e4PWIFUOYYNswsP6sw/bd2iVVMyIFqGnd2T2fEg4=)
                          5: rMEvgCVgHs4ulc8DoTulEEqiQHo.roa (hash: Q8gjqCa8uKlgGI4vr5rXYa/L1uX8cdXFH2vC+QqMxtA=)
                          6: rirChDF6r25Jw6astHtI6VHUw8Y.roa (hash: aBlSv/kV+HKq66CLKR2mAzZ7ff7GCZlkcfWb0sUhpm8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:a4:81:6a:89:e7:c7:28:bf:2e:2b:ff:64:01:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: Jun 15 22:03:51 2024 GMT
            Not After : Jun 16 22:03:51 2024 GMT
        Subject: CN=1e73ebc977384354c734f41f85f3877a101a8228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:66:8e:a8:57:42:cf:37:40:09:ab:e7:55:
                    a9:fe:23:a1:09:ee:f1:e6:7c:72:c1:77:4f:4d:cb:
                    7a:7b:66:dc:be:fb:f3:ad:53:4d:fd:d2:45:bb:c2:
                    6a:a1:9c:a5:76:03:89:42:fe:71:ce:3d:aa:02:46:
                    74:36:55:6d:68:70:98:3f:ef:b8:10:82:8d:6f:ac:
                    4d:0a:59:34:18:56:1c:49:28:03:ed:e8:b6:16:ba:
                    b6:1d:c7:35:6d:ec:91:1a:04:c6:61:ce:50:8e:28:
                    1f:c0:45:fc:c5:40:a4:d4:66:61:8c:3b:cc:eb:cb:
                    38:3a:aa:73:5f:e2:f6:f9:95:bd:7f:97:63:90:3a:
                    a0:f5:48:3a:b3:b4:0f:8e:42:8e:bf:e5:25:f3:b1:
                    98:30:51:3d:40:36:82:aa:cf:06:05:88:18:77:20:
                    a8:3a:92:a3:4b:ae:62:d8:f6:f3:9a:22:b8:a0:28:
                    ba:15:8c:68:8a:3d:ba:a4:56:6d:41:eb:a4:24:11:
                    a2:e4:d1:91:48:5c:ba:34:50:6f:f0:76:0c:e1:71:
                    d9:ea:df:f8:2b:11:72:ac:f5:f0:45:4c:86:fe:c6:
                    62:36:2a:9d:94:80:8a:b3:68:b6:e7:ab:64:a2:4b:
                    56:23:c4:cc:11:9f:e9:dd:ca:25:d6:91:5f:29:e4:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:73:EB:C9:77:38:43:54:C7:34:F4:1F:85:F3:87:7A:10:1A:82:28
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:21:bc:c0:b9:09:82:79:cb:31:57:d1:b1:0f:e3:29:a2:05:
         1b:8f:cf:76:df:b9:74:b3:bc:61:13:fc:fb:3b:cf:35:b3:a2:
         e0:e4:ff:7b:25:f2:68:d9:4e:bd:9b:59:4a:f3:e7:aa:5a:87:
         8b:6c:4f:53:58:62:1c:5b:b5:01:d1:b2:2e:e4:ab:71:de:d9:
         11:0e:5d:2c:66:2b:12:6c:0e:72:53:09:95:cd:70:f0:92:15:
         cd:06:bb:3f:59:89:14:fa:6b:c9:9d:b3:a4:0c:0f:f4:52:25:
         62:e1:f8:2c:f0:84:d6:be:57:ac:ae:5f:97:43:0c:8c:79:09:
         62:a6:0b:e1:15:fd:7b:37:43:c0:f8:19:43:b2:f7:db:ad:9a:
         4a:05:ca:fa:a2:3f:c0:07:d5:f8:61:13:a6:09:0a:0c:99:e3:
         bc:7c:34:f0:cc:06:9a:49:b1:be:53:63:25:07:5d:48:6a:e9:
         8e:56:83:f1:4a:f1:f9:70:be:48:35:b1:44:25:1b:ad:dd:a5:
         68:72:aa:9e:c6:8c:09:bf:df:9b:0b:9e:9d:91:11:e9:0f:a6:
         e9:c6:ab:61:71:f5:1d:bc:7c:22:c4:2c:2d:73:d2:96:9b:8d:
         f8:6a:3b:4a:26:02:1e:21:c5:24:a7:ba:d2:f0:68:02:1f:17:
         01:a3:c6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:58:25 2024 by rpki-client on console-ams.rpki-client.org