Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File:                     MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier:          8TuifTgf5DdXnLfdaIpfTvMbdnhdGmbljMY8pnigRlA=
Subject key identifier:   B5:D6:AA:62:35:5E:F5:AD:D0:1A:65:0E:CE:14:2C:8A:98:41:64:8F
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer:       /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial:       01901EFDCF5F7D3928A5A93AFC995FA3D0E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 03:01:08 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:08 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:08 +0000
Files and hashes:         1: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: HrBbW2svqVgGB/qFI9QUY/eycoc1HR0KNNSlt4IS8gk=)
                          2: Qk9wM4rxWES1N6-jJSrtMUgwxFw.roa (hash: znPCgeZtv+bsBaBMupYSiq0ledPLoOtJBJ5vS4vwtoI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:cf:5f:7d:39:28:a5:a9:3a:fc:99:5f:a3:d0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
        Validity
            Not Before: Jun 16 03:01:08 2024 GMT
            Not After : Jun 17 03:01:08 2024 GMT
        Subject: CN=b5d6aa62355ef5add01a650ece142c8a9841648f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:58:33:81:76:41:18:76:bd:d4:5f:26:b6:
                    91:50:ea:23:4d:c6:f0:2c:b1:b8:b8:e7:29:2d:a6:
                    85:1c:e9:19:de:92:ea:a3:dd:8f:e5:33:f1:aa:40:
                    7e:8d:ae:6a:c3:b1:ac:8d:d9:b4:4f:b1:39:7c:b5:
                    2d:7e:1e:75:4f:d2:2d:c1:96:9a:b0:36:cf:e5:b8:
                    b9:99:13:f5:28:cf:85:44:a4:07:c2:f8:15:58:fe:
                    7e:17:b2:a9:85:64:35:ae:6f:e4:8b:6b:f0:5c:a0:
                    46:62:16:c1:16:8e:74:22:0b:dd:7e:ac:aa:3a:df:
                    f8:ae:f9:81:21:85:4b:c7:e8:69:1d:42:56:79:62:
                    24:0d:64:48:f8:04:80:19:00:b0:b7:dc:f5:75:4d:
                    5a:ed:c2:4b:94:1f:5a:75:dc:34:15:02:eb:8e:df:
                    47:d7:d6:79:cb:b2:ea:2b:30:82:ed:fc:0c:1d:ba:
                    09:bd:5d:7e:ca:4d:9f:a1:c9:b4:df:11:90:6a:97:
                    e9:72:5f:8a:e7:d3:83:b5:72:11:8b:2c:4f:42:5b:
                    15:93:aa:54:95:55:3d:dd:43:e2:84:74:33:54:8d:
                    16:1f:b6:40:c8:e2:13:5e:5d:a1:27:fd:96:c0:2b:
                    20:fc:84:01:b2:42:40:8b:48:ae:58:ae:38:00:8a:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D6:AA:62:35:5E:F5:AD:D0:1A:65:0E:CE:14:2C:8A:98:41:64:8F
            X509v3 Authority Key Identifier:
                keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:70:3f:4c:1b:dc:8d:19:41:8c:3f:c3:b2:02:0f:b9:55:90:
         ec:9e:3f:b4:47:7b:19:6d:b5:0b:d5:36:91:34:b7:47:eb:0c:
         14:eb:59:1f:1a:18:b4:38:c7:18:81:9e:81:b2:11:20:7a:7b:
         5b:47:6d:dc:18:08:4b:6b:a5:53:a1:24:2c:5a:54:c9:bf:d3:
         e7:5e:e5:fb:a0:fc:2a:73:a7:d2:d8:c1:be:16:70:5f:c2:3d:
         fb:d7:58:d6:ea:3a:23:5c:07:d8:35:98:f4:66:98:78:d8:3b:
         90:fe:ab:c2:27:41:4a:6a:66:22:63:91:06:14:05:c0:68:22:
         23:bb:b2:d2:ca:56:7b:eb:e2:14:07:e2:9e:84:47:70:a3:1e:
         d3:b5:fd:d2:57:10:a4:f8:20:fd:5e:fe:ce:7a:52:84:87:89:
         d0:12:f3:98:6c:53:cf:e0:23:15:1e:9a:1b:1e:d5:0d:d4:85:
         da:97:63:d7:1b:53:ea:b7:74:ab:0d:68:4e:9f:9e:c2:27:c6:
         38:5e:ca:4a:f8:f6:f4:b7:8c:0b:e8:3f:59:44:e4:86:fb:69:
         da:b1:0f:cf:0f:f5:a3:b2:56:7b:ff:0b:3d:21:21:11:80:33:
         17:bc:56:3b:da:e1:92:a0:b8:e6:9a:eb:45:cb:c5:65:59:5e:
         ae:55:88:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:28 2024 by rpki-client on console-fra.rpki-client.org