Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File:                     eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier:          EelqNmNwZuN/f574xXwnnlZS2rv/XYZpQJk3eMiKv4Q=
Subject key identifier:   73:43:23:41:39:73:DD:84:1E:3B:79:E9:65:A1:0B:FB:B5:05:E1:E6
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer:       /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial:       01901DEB77FACFE2890FB83CBE3C4D606FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:01:29 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:29 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:29 +0000
Files and hashes:         1: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: e8Iw+pEy7s+mIxa+auHRZzItHNanTK9zFgvXxBfpz6k=)
                          2: tas80hspRYcaRZz6aF742hwnBao.roa (hash: duO/ZvLM1WsWdR+IXRxYGxbp0g2OE0DmHW61SEd38nY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:77:fa:cf:e2:89:0f:b8:3c:be:3c:4d:60:6f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
        Validity
            Not Before: Jun 15 22:01:29 2024 GMT
            Not After : Jun 16 22:01:29 2024 GMT
        Subject: CN=734323413973dd841e3b79e965a10bfbb505e1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:7b:96:27:80:01:f3:f2:5e:c0:7b:bb:c4:
                    b6:39:1d:68:ea:f4:2f:3c:a9:ff:45:31:89:90:18:
                    80:65:d2:ac:fc:75:32:58:e1:27:ac:8c:10:66:a5:
                    50:36:9a:62:c6:9c:83:6f:ae:d1:59:b3:18:0a:3d:
                    ab:d8:a3:ae:00:7c:6d:ed:88:f6:89:86:b7:9d:66:
                    20:68:df:8c:70:17:f8:7a:12:70:94:39:47:45:7b:
                    f9:0f:65:4f:f2:fd:39:10:c8:33:b2:15:13:f2:41:
                    ee:9b:6d:7d:55:f5:51:55:50:93:38:9f:b6:d1:8e:
                    03:35:48:d0:6a:87:63:50:e7:c0:63:82:6e:76:c8:
                    2d:b2:ab:f6:c3:28:c6:41:0c:00:e7:0e:11:60:b8:
                    85:ca:60:42:ea:ee:5d:11:69:24:e4:dc:94:99:15:
                    f4:c6:0f:5d:12:74:ba:40:6f:b2:16:fa:23:aa:46:
                    9d:b3:c1:1e:d9:ba:17:0b:4f:c8:e9:50:ce:fa:d7:
                    c7:da:9b:b1:e2:46:5b:74:07:f0:d2:8f:a2:72:f2:
                    dd:f5:7e:91:de:e6:e7:e5:4e:a5:4e:94:8b:d5:b5:
                    94:d0:7d:52:97:9a:f3:28:d7:78:3d:0c:dc:63:08:
                    29:14:91:3c:d1:74:4f:aa:d7:86:ee:4c:f7:c9:57:
                    4f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:43:23:41:39:73:DD:84:1E:3B:79:E9:65:A1:0B:FB:B5:05:E1:E6
            X509v3 Authority Key Identifier:
                keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:e9:50:f4:e3:d5:a5:8b:6e:c3:33:f0:60:1f:2b:65:32:
         1f:cc:81:0d:fa:fb:08:84:f3:78:11:76:38:6e:8b:51:73:aa:
         f7:e9:63:8c:21:57:c4:5c:a3:28:03:ce:d5:24:b7:d5:70:9c:
         52:1d:4f:ea:f9:86:a9:02:6b:1d:68:1e:60:ac:a4:a5:f6:c1:
         b5:ea:42:39:39:c5:57:b0:b6:00:25:f5:f1:90:e9:8c:25:4b:
         93:9c:7f:05:ca:31:47:e4:25:b9:68:15:37:bb:fe:d5:6e:06:
         8f:b9:25:91:e2:5b:aa:00:d2:8b:d1:d4:3f:6b:29:98:82:87:
         67:69:ff:de:c5:6f:d8:fa:cb:fe:10:8b:9c:57:50:26:65:ee:
         8d:98:ee:57:1b:9e:42:b0:4e:d0:e2:0c:ed:83:6b:7a:4b:49:
         ca:3d:64:a1:a1:8f:54:b8:54:51:35:56:72:c3:2c:e8:b0:0c:
         31:94:bf:54:94:56:73:40:6e:d3:34:11:5d:dc:28:6f:34:42:
         98:2f:59:35:ee:e0:33:ca:4d:44:50:62:d1:47:e2:ea:7b:5c:
         09:df:2c:00:79:19:d0:95:e0:07:88:3a:b7:cb:ce:c3:be:7b:
         63:91:18:ee:df:e6:fb:05:f2:11:25:27:13:23:c8:4b:0f:5e:
         70:73:bf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:59:12 2024 by rpki-client on console-ams.rpki-client.org