Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File:                     Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier:          NhK6zaIv47z8Qh53mz0/yOyENYoiQjKmV8LDbrfxecA=
Subject key identifier:   C6:1A:8A:F4:40:13:4C:9A:91:1A:3A:E8:3F:6E:4F:63:92:F2:5E:B5
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer:       /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial:       01901EFD50733A2A425C2B5BFC3FD5881675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number:          0E5B
Signing time:             Sun 16 Jun 2024 03:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:35 +0000
Files and hashes:         1: NgIqyBbr9FZQ87TP7arvQKj9pMc.roa (hash: EJaRajFsQL9HVbiGxqudLiOhYfZ72YBjmZRATIp9f64=)
                          2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: /SwxfneDYjFRZrgG2GOompWanhMKZldhr+uDUNlFewc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:50:73:3a:2a:42:5c:2b:5b:fc:3f:d5:88:16:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
        Validity
            Not Before: Jun 16 03:00:35 2024 GMT
            Not After : Jun 17 03:00:35 2024 GMT
        Subject: CN=c61a8af440134c9a911a3ae83f6e4f6392f25eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:01:bf:60:e6:2c:b0:ba:46:11:ce:49:82:
                    54:0f:1b:32:0a:80:1d:3a:21:06:1a:2a:71:ed:b1:
                    a3:a2:7e:5d:76:a5:0c:ec:13:0f:77:2b:b4:c3:c6:
                    55:16:a7:0a:8d:5e:74:75:2d:2a:d5:2c:00:6b:df:
                    20:b0:05:85:48:c0:a0:a5:18:4a:1b:91:dc:4c:71:
                    d5:22:b8:da:17:67:77:8c:af:cb:61:3f:3f:32:56:
                    43:eb:3e:4b:77:02:36:74:bb:08:96:66:e4:65:5d:
                    84:b3:35:e4:b0:a0:5e:93:7f:25:42:cf:8d:57:10:
                    94:63:2b:f5:b1:01:f4:af:c3:6b:22:bd:e4:92:ba:
                    62:4d:72:a9:94:05:57:d2:e3:34:e3:51:e6:d5:83:
                    b3:a2:1f:59:81:7a:42:4e:5e:c8:e6:79:c8:e2:62:
                    a1:c2:80:1a:bf:40:ba:b9:f8:5f:60:f5:2f:a2:ef:
                    0e:37:13:7c:db:cf:5e:6d:e8:b7:9d:80:9b:76:3a:
                    4c:3c:a1:85:a9:90:28:78:fe:b5:bb:c1:cb:ff:f5:
                    f1:70:5b:d2:07:72:cd:c7:7e:6d:af:c3:7c:26:68:
                    08:63:02:7d:24:2a:a0:84:1b:85:1e:e6:e5:02:80:
                    95:02:de:9f:b8:78:38:ec:c4:ac:97:b1:11:13:ce:
                    1b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1A:8A:F4:40:13:4C:9A:91:1A:3A:E8:3F:6E:4F:63:92:F2:5E:B5
            X509v3 Authority Key Identifier:
                keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:fe:c5:6d:3d:df:1e:78:c9:f8:15:45:2c:34:95:07:5f:26:
         b2:9b:ee:1a:a3:bd:e5:f0:c5:ae:c7:bd:d9:63:9a:29:a8:77:
         37:b6:a1:f7:ad:62:bb:c8:3a:b0:f2:77:ed:9b:a6:75:92:d5:
         e1:2a:2b:79:51:c1:0e:35:32:75:7b:f1:20:51:65:ef:0c:53:
         a0:bf:c4:b1:e3:fc:78:0b:9b:a1:8f:01:4c:38:0b:d6:50:82:
         c5:4e:d5:38:4b:82:6b:25:dd:80:a4:84:12:11:d5:c4:22:b2:
         3d:2c:54:d7:b3:04:4a:03:ea:c1:87:da:9e:77:5f:49:f0:9b:
         c9:e5:69:37:4b:e1:df:9b:4c:99:0d:75:d6:a3:d5:75:22:82:
         d2:98:40:e8:09:06:e9:82:c5:3f:ea:83:57:34:7f:74:ee:81:
         cf:2a:e2:31:94:c1:5c:e2:2a:6c:4c:36:89:91:c7:be:ab:45:
         fb:10:8f:91:94:c8:b9:6c:5b:dc:ad:55:95:58:d9:e4:8e:67:
         4d:fd:dd:1f:02:cc:97:63:ac:0e:76:7f:a9:4d:fd:ba:39:8b:
         38:89:8d:c5:63:11:51:d8:05:a6:e2:73:e6:c4:a8:fd:5c:d1:
         af:7f:ee:ad:b0:06:42:34:1d:40:33:04:f2:e7:22:f7:17:e3:
         d0:ca:8c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:07 2024 by rpki-client on console-fra.rpki-client.org