Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
File:                     e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft (raw, json)
Hash identifier:          wf2AZFHmSaN2eHmo95AI30tcNobejxP/OFBLxKY2LAo=
Subject key identifier:   4D:ED:4F:F4:57:40:1A:A5:6D:2E:0B:AC:F2:E3:CA:B5:26:36:40:63
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Certificate issuer:       /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial:       01901DECFDE24CC8EBEE469078E9DD453ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 22:03:09 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:09 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:09 +0000
Files and hashes:         1: 6fHnoC5fLobRKJZM0QUMfPDpJvQ.roa (hash: K0BP/bubvzFw3rjQ6sweFTZkS6klXj8ajrgJBRsj4Tg=)
                          2: e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl (hash: QHTvmro0EnBKyXwAsUFoRKlFSxTvjKnlrnp3X4l4CcI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:fd:e2:4c:c8:eb:ee:46:90:78:e9:dd:45:3e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
        Validity
            Not Before: Jun 15 22:03:09 2024 GMT
            Not After : Jun 16 22:03:09 2024 GMT
        Subject: CN=4ded4ff457401aa56d2e0bacf2e3cab526364063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8e:ac:97:d0:67:5c:28:a6:27:97:ab:d6:24:
                    5d:95:b7:78:cf:29:1e:51:94:f3:3d:64:20:5e:7d:
                    14:d2:0a:30:4d:e0:92:0c:08:03:ba:b9:58:01:0c:
                    e3:4c:03:19:5d:0b:70:fc:0c:37:0c:0d:7b:bf:04:
                    fe:ee:f0:ce:39:a3:05:55:e5:5e:7a:2d:a6:bd:69:
                    67:c1:b9:93:97:16:8a:3f:55:58:1e:4f:7c:08:ca:
                    4c:b4:5d:d7:cc:8b:19:07:6f:7d:cf:60:9a:8a:e5:
                    15:9e:56:f2:a3:07:c7:5f:c6:ac:e4:af:70:91:ce:
                    21:28:41:5f:d4:ff:72:5b:8d:2d:87:af:8f:8a:65:
                    fc:98:5d:61:14:91:ff:c8:31:61:8a:5f:89:bc:38:
                    e7:38:2a:ca:e4:89:65:8f:86:88:0d:53:fd:88:30:
                    de:f8:b2:6d:94:86:7e:d4:f4:d5:48:d7:6e:46:b1:
                    c4:8d:6f:67:9a:e1:ad:e6:e4:21:96:8c:0f:93:c7:
                    1e:07:7a:e7:ce:bb:c7:a7:f8:fd:ff:5e:3b:82:e8:
                    f8:61:c8:e7:fc:a9:ee:ee:83:72:51:4d:52:31:28:
                    ec:d8:1e:80:26:a8:28:3a:b8:f4:3f:50:2e:b8:9a:
                    c7:b0:fe:49:b5:8d:aa:f0:e7:a5:56:29:3f:59:fa:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:ED:4F:F4:57:40:1A:A5:6D:2E:0B:AC:F2:E3:CA:B5:26:36:40:63
            X509v3 Authority Key Identifier:
                keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:08:24:54:94:9f:20:24:d6:88:70:71:c6:9e:63:d1:51:
         1e:09:42:b2:47:c9:27:eb:15:5a:15:9e:58:20:d1:62:ed:49:
         b9:40:99:f2:ea:61:26:cd:02:3e:67:75:56:ee:c2:ef:71:69:
         64:16:03:dc:99:23:39:a6:11:4a:fb:29:99:22:cb:dd:5a:68:
         69:7e:d8:ad:59:90:4a:24:4d:e8:06:4b:57:95:0f:46:59:d1:
         ee:3a:55:bc:43:c6:ec:a3:5a:c0:a6:af:bb:9a:50:48:da:a8:
         7f:15:62:b8:9e:37:3f:e3:40:a3:ba:52:b6:33:03:02:57:97:
         dc:11:93:58:80:66:32:05:45:06:5d:8e:23:40:29:6e:30:f3:
         26:4d:66:0a:d4:5f:a2:a8:bb:1c:95:0a:5a:57:6e:d7:50:83:
         17:10:fb:1b:af:9a:72:e5:6e:f2:9a:c0:dd:e6:da:6a:b7:98:
         a5:d4:43:ec:ea:97:0e:37:13:ed:d3:87:21:dd:99:d5:1b:44:
         2b:bc:de:41:d0:f6:58:ef:46:21:ef:40:e4:84:e5:20:d0:8e:
         63:cb:0c:09:8b:53:0c:a8:33:99:3b:83:35:2c:ac:f4:39:30:
         7b:ca:cf:00:5f:5a:de:74:97:e2:e4:e0:c1:55:f0:6b:f9:24:
         f2:dc:cf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:06:59 2024 by rpki-client on console-fra.rpki-client.org