Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File:                     Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier:          HVMwKKRiSlgxMAlimOZz6Awii4yZATS9u8b0UG1ZL/E=
Subject key identifier:   08:15:FA:0C:BC:30:9F:A9:2C:0C:11:73:55:8D:78:FE:3A:5E:C6:58
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer:       /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial:       01901E8FEC2F2DF1272503FF98A22C0843CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number:          0EEB
Signing time:             Sun 16 Jun 2024 01:01:06 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:06 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:06 +0000
Files and hashes:         1: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: FNf5VuyG58TVVLnJwjzs2Iv0KLhAlSLNX7kvPzMZCec=)
                          2: ubBLzYK970uCPs-YK4zluW46aDA.roa (hash: 2CPV2+SVKbtctAZjBBWKlR63hzPVXZeNXj3E5ScppHw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:ec:2f:2d:f1:27:25:03:ff:98:a2:2c:08:43:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
        Validity
            Not Before: Jun 16 01:01:06 2024 GMT
            Not After : Jun 17 01:01:06 2024 GMT
        Subject: CN=0815fa0cbc309fa92c0c1173558d78fe3a5ec658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:10:e5:cc:c1:8b:1e:9d:8a:4b:bb:b9:7b:
                    32:74:7a:6e:51:ec:40:82:e9:a9:ba:61:85:ff:d0:
                    b8:24:55:54:6d:29:41:f6:ea:c7:a7:82:26:86:28:
                    23:f3:40:ca:75:3a:da:3b:1f:af:92:a7:98:dd:a4:
                    7f:7b:70:5d:33:ef:46:cd:dc:62:48:cf:5e:b5:2d:
                    f2:5b:f9:fe:aa:f3:24:7c:9a:72:8c:6f:39:72:29:
                    db:fc:62:03:c6:2d:63:57:74:24:ea:e1:a4:9e:bd:
                    9d:2b:bc:64:1a:ed:6a:8c:03:d1:43:89:60:81:cd:
                    ea:c9:2a:92:87:a2:02:d7:bd:c8:0e:dd:eb:eb:fd:
                    a6:3b:6c:1d:25:0b:2c:7b:a7:ae:51:00:aa:5c:95:
                    87:c1:6f:25:47:7d:db:29:0a:9e:29:53:0f:13:0b:
                    d8:94:d2:7d:32:f6:8c:1b:33:8e:88:92:7b:e1:6b:
                    5e:e6:94:89:47:90:e4:01:73:4d:27:d3:e6:6e:03:
                    70:ae:d3:26:61:3b:73:fd:ce:4d:6c:ec:11:51:b1:
                    f1:23:e1:c2:3c:0e:a6:7e:95:d2:f1:f8:94:f1:b9:
                    c0:7c:0a:f8:f8:6f:bd:7e:47:50:f9:80:58:d8:dc:
                    f0:67:59:ac:15:d7:20:2e:4b:50:df:c1:97:e3:21:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:15:FA:0C:BC:30:9F:A9:2C:0C:11:73:55:8D:78:FE:3A:5E:C6:58
            X509v3 Authority Key Identifier:
                keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ff:92:95:0c:12:fd:8a:eb:f7:38:20:0d:64:cc:e8:2a:45:
         53:00:da:62:38:27:2e:0d:18:c8:48:3b:ea:0a:97:9d:c9:c7:
         a1:4b:5b:17:6c:65:4a:4c:c6:fe:72:19:d1:92:3d:d6:96:18:
         cc:dd:77:72:18:2a:68:a5:3b:f6:da:48:39:af:b3:51:d2:a7:
         5b:d6:76:fd:e5:a6:a5:19:3a:0d:0d:d1:9a:60:59:cb:ff:93:
         93:87:d7:a0:76:2c:36:bf:54:15:7d:89:53:3a:cb:3a:bb:dd:
         fe:9c:fc:d7:b4:bb:92:55:be:b7:6b:93:f0:27:99:65:12:10:
         e3:ee:83:72:cd:c5:55:9e:55:76:a9:7f:f0:05:cb:ba:df:61:
         81:65:03:ba:24:f2:16:60:ff:a4:e7:04:1b:99:84:b1:07:04:
         37:bb:f9:5b:23:f0:51:aa:7b:85:33:fd:48:28:9e:2b:1a:fb:
         55:12:d0:6f:9c:e1:59:be:7a:8c:90:9d:21:ec:58:b2:7f:cb:
         4d:ee:87:38:70:e5:32:09:39:e2:ee:e2:d2:32:67:eb:3b:9d:
         e6:2e:89:6a:3b:4e:d5:46:ad:1d:81:ae:6c:18:e5:1e:a6:33:
         ec:6f:80:0c:28:83:62:8c:2e:14:0c:69:2f:70:f9:4b:23:c0:
         45:78:a9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:33 2024 by rpki-client on console-fra.rpki-client.org