Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File:                     T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier:          hqEdp3ZZoCq6aNQVQlV0mk08WmO7SeVVufMynC32o1c=
Subject key identifier:   48:B6:62:8C:25:0B:3C:4C:17:09:C1:ED:3B:27:E6:17:5A:B1:A1:6D
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer:       /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial:       0190459D7356EE3601326BB1203C10E988E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number:          017C
Signing time:             Sun 23 Jun 2024 15:01:04 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:04 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:04 +0000
Files and hashes:         1: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: jn7I2nF7+0DGmC2ULJmksUsNpqQk7RUOk9Fx9Yf1eQ8=)
                          2: qAjqdcrzxY2iEEdfrbshgbr4g0A.roa (hash: jfLoUl8esb2uSKw9XcFiXoNTgHT8AvUHJcp7crjVvc8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:73:56:ee:36:01:32:6b:b1:20:3c:10:e9:88:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
        Validity
            Not Before: Jun 23 15:01:04 2024 GMT
            Not After : Jun 24 15:01:04 2024 GMT
        Subject: CN=48b6628c250b3c4c1709c1ed3b27e6175ab1a16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:2a:11:eb:73:1a:6b:57:60:de:a0:a5:66:
                    de:ed:4f:84:9c:c3:0d:1c:67:ae:46:09:c9:30:a4:
                    00:b2:04:e1:12:1d:9f:92:eb:35:56:d0:b2:fe:ab:
                    37:a9:51:5d:7e:82:6f:38:c4:fe:db:64:4c:46:46:
                    ad:33:00:27:35:c3:c1:a7:fa:cb:d8:70:29:da:3d:
                    36:ca:00:be:78:79:b2:b4:d4:75:d2:21:73:fc:79:
                    92:e3:aa:5e:2c:05:04:cb:3d:ec:70:bc:a9:84:1a:
                    13:6e:cd:72:f1:09:71:de:31:1d:db:35:d9:ab:5f:
                    f4:f5:b9:38:8d:35:88:ac:64:cb:a2:51:57:cf:2c:
                    7c:8c:4d:82:08:48:20:b3:20:d8:23:8b:43:b1:ae:
                    64:70:29:46:60:2a:c5:26:cc:18:f1:9d:09:c1:c1:
                    81:39:ae:1a:39:24:f0:80:de:58:7e:4f:dc:81:45:
                    df:4c:83:b8:ef:fa:e1:e6:7a:ef:05:59:7b:f1:b6:
                    14:3b:c2:10:99:34:2a:b2:8b:8d:db:3c:fa:52:7a:
                    a1:7c:d2:a7:be:49:9d:61:c5:c1:d3:25:a3:9b:cf:
                    3f:7f:6a:39:ee:c8:73:e6:20:3d:93:a5:73:d6:ca:
                    e7:55:1b:5a:8d:92:f1:ab:b9:14:a9:e9:1f:a9:8e:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B6:62:8C:25:0B:3C:4C:17:09:C1:ED:3B:27:E6:17:5A:B1:A1:6D
            X509v3 Authority Key Identifier:
                keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2a:c2:82:b5:97:24:77:ad:e2:c0:4e:3b:17:7f:40:c2:e7:
         cc:ba:2f:b2:8d:d5:5a:79:37:7b:63:0e:b0:6c:a3:1a:ea:5b:
         36:53:99:bc:14:1d:02:56:c2:3f:ce:79:89:74:a8:f6:eb:e7:
         c5:a5:b8:34:77:66:a8:5c:a0:9a:d7:11:36:2d:a1:7e:aa:e1:
         70:4a:59:d4:ab:fb:61:43:77:65:4b:61:d2:26:5a:70:50:9f:
         13:ab:05:9c:63:d2:1e:1c:36:f1:58:38:aa:86:9a:72:6e:10:
         72:17:9b:14:b3:0f:0c:cb:f4:16:95:11:a4:fb:98:ea:7e:69:
         0b:30:ee:66:c1:de:86:3c:eb:ec:af:4c:ac:76:d2:fe:5a:b6:
         9f:43:3c:61:17:96:77:29:17:ff:32:c4:58:53:28:5c:35:18:
         a4:2d:0b:a9:8a:f4:c1:84:02:81:96:79:c0:87:11:db:a5:12:
         24:a6:a2:96:48:01:fe:6a:12:db:8f:92:8f:f6:b2:b0:94:03:
         44:9c:84:20:49:e5:77:90:19:3e:ff:05:82:83:d3:0e:38:52:
         be:76:73:04:c9:a1:62:d8:14:89:05:0c:d9:f9:ba:07:f0:62:
         9a:cc:4d:30:a3:ed:52:76:5a:c4:6f:eb:a1:fe:bb:fd:a7:26:
         27:e7:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:55:11 2024 by rpki-client on console-ams.rpki-client.org