Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File:                     tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier:          KIOr4900EJfyps77BOmwYPp7HubDM6WuK1hya0aPLG0=
Subject key identifier:   61:BD:CC:AE:A0:F5:0B:B3:A4:5F:F9:5F:7F:5A:3A:73:C3:8D:EB:40
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer:       /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial:       0190452F8D6543C8C4A0F137661A0E47B9DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number:          11E1
Signing time:             Sun 23 Jun 2024 13:01:02 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:02 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:02 +0000
Files and hashes:         1: p9icaqo4eZFIFqd3ZGkYRm6LEdE.roa (hash: vwbGP0kKGPNyqf88Ip6R7Lfe6PRKb9SUUmvZGVoUsbo=)
                          2: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: zP25pSkjvPlhheVNvkRwNz4HCvcX23D59tfoz6/IXc0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:8d:65:43:c8:c4:a0:f1:37:66:1a:0e:47:b9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
        Validity
            Not Before: Jun 23 13:01:02 2024 GMT
            Not After : Jun 24 13:01:02 2024 GMT
        Subject: CN=61bdccaea0f50bb3a45ff95f7f5a3a73c38deb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:68:94:54:0a:00:f1:ce:2d:98:19:7e:2f:
                    9e:24:c7:b2:23:41:9a:48:33:bb:e0:dd:dd:b2:a8:
                    15:3b:0d:cf:cc:5e:85:39:3a:1f:54:a2:1c:fc:0f:
                    9d:08:3b:32:3c:35:ce:a0:82:6e:a6:6f:42:c3:08:
                    b9:03:f0:89:7d:0d:86:9b:04:28:e6:b6:f3:bf:1e:
                    e0:4c:46:56:53:1d:f0:2f:bd:f9:ff:a7:ec:6a:92:
                    b8:3a:cf:37:93:08:3c:7f:4b:5e:00:e1:54:d3:0a:
                    36:6c:94:aa:77:42:61:b5:89:d2:cc:57:13:92:b5:
                    62:96:5b:28:45:21:0a:7e:3f:7b:62:ba:27:7d:44:
                    d6:9c:be:34:8f:d5:ce:10:54:92:93:7f:77:af:f7:
                    49:46:31:c8:9a:0f:21:bd:87:0e:7c:2b:4c:4d:db:
                    ac:ce:92:66:a7:da:fe:ab:02:86:5f:e7:ab:db:c9:
                    24:36:f3:6c:37:8d:f6:ba:0b:7b:63:0c:39:f6:d1:
                    9a:4a:b5:9a:2d:b9:65:7f:f6:3a:23:4b:9c:6a:54:
                    cf:a4:b5:37:4a:9a:98:76:f7:a3:81:3b:ce:25:cd:
                    1a:8d:02:73:0c:be:3e:9e:c9:49:0c:4f:c2:58:5f:
                    70:d5:8c:7d:b2:1b:6b:2a:46:b2:65:ee:a9:20:57:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BD:CC:AE:A0:F5:0B:B3:A4:5F:F9:5F:7F:5A:3A:73:C3:8D:EB:40
            X509v3 Authority Key Identifier:
                keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:49:34:0f:30:d6:0e:02:e0:57:f7:6f:3d:43:ab:43:8b:79:
         01:b5:32:12:39:5b:01:c6:c8:d3:ec:c2:46:69:d3:22:69:d5:
         63:34:3b:2a:93:c5:a5:82:1f:03:e5:dc:cc:10:9b:b0:07:b4:
         c2:0c:25:b8:d8:10:0c:6c:ec:e0:b9:60:c3:f9:7d:89:65:ac:
         91:f9:22:cb:06:5c:49:03:9c:57:95:58:ac:74:af:0f:f6:24:
         f3:89:da:04:0c:6e:e0:58:6e:27:94:46:3f:87:c1:65:08:ef:
         0b:0a:ef:5c:62:99:6e:fb:f4:8f:45:ab:47:91:be:3b:b7:2a:
         15:01:f5:15:c2:86:30:b7:1f:c9:49:7b:2a:46:ac:ad:11:e0:
         ce:55:37:b9:b8:a0:64:ad:6e:b6:5b:35:8e:7c:af:9d:95:5f:
         b4:b2:6c:12:02:04:45:5f:a3:e3:ec:ae:26:1a:a8:5e:6f:03:
         9f:12:91:9f:29:8c:e3:70:22:13:c7:31:bd:1e:58:5a:11:dc:
         0b:b4:de:21:ec:b8:77:db:a1:0f:cb:0a:34:2d:19:c6:ec:3b:
         63:9a:b7:6e:24:08:d0:2b:90:1a:aa:21:52:a5:93:0e:8f:33:
         c7:95:97:c3:d0:ca:12:5c:fc:76:6a:a7:93:66:76:9d:ed:f0:
         7a:f6:6c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:27:26 2024 by rpki-client on console-fra.rpki-client.org