Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File:                     MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier:          yiDpxOb2OKM9EmA5sxn9EeAnKV9ggreBLji2Wg590as=
Subject key identifier:   4D:5C:9B:0F:DA:1D:E1:C8:7E:35:53:62:DE:A1:7D:6C:C1:A6:B7:86
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer:       /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial:       01901EC71B423F0E5A62672A33EBD73046A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 02:01:23 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:23 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:23 +0000
Files and hashes:         1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: JL7k+vFEWyKUH0xXeHVYypkHnmgY5ueOp/LWoNjZnZg=)
                          2: qQg22zxseBR6RvKqkZnkZ9ERf_A.roa (hash: zQPuQ4HlH+R5hLoobBavICO8zEfXjdJ5YjFwpC+0xgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:1b:42:3f:0e:5a:62:67:2a:33:eb:d7:30:46:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
        Validity
            Not Before: Jun 16 02:01:23 2024 GMT
            Not After : Jun 17 02:01:23 2024 GMT
        Subject: CN=4d5c9b0fda1de1c87e355362dea17d6cc1a6b786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:40:02:f3:31:65:4a:34:09:b9:5b:80:84:
                    8c:48:06:eb:88:40:1f:72:78:cc:45:90:e1:6c:82:
                    76:76:36:86:7d:7e:65:b0:f4:3e:88:02:dc:95:b0:
                    be:60:76:de:bb:7b:b7:60:01:f8:27:3b:f3:c6:ee:
                    5b:87:28:6f:fc:3c:1e:a2:3f:43:96:d8:4a:30:f2:
                    9f:63:5b:d5:f4:e4:83:47:16:cb:9b:b5:9d:41:cc:
                    65:7f:2d:17:6c:2c:2d:69:16:bc:1a:d4:0d:d7:e7:
                    b7:10:83:9d:90:8d:de:fe:a4:6d:37:ec:a8:8a:07:
                    92:6c:a0:73:a5:1e:b0:2d:3d:49:c5:3a:16:06:7c:
                    32:c3:1f:78:fa:c7:95:e8:a8:05:1e:cc:5b:01:52:
                    8a:a9:ec:bb:19:fb:6a:51:82:2a:8b:9a:00:d9:17:
                    6c:b2:f0:d3:0f:a8:ae:a0:d4:73:c5:ea:f1:20:e5:
                    a8:b4:2c:de:21:06:c1:b2:c6:6c:61:84:cd:a3:2c:
                    0e:32:9e:8e:d3:16:2a:6a:50:85:ac:49:44:49:a9:
                    d1:08:b8:b5:3e:d6:88:83:f7:da:ae:d5:1b:4b:39:
                    f4:a6:1a:ce:37:05:65:c8:21:81:99:73:c5:73:a3:
                    d2:c0:bb:4e:6f:a1:a5:94:6f:53:45:6e:f4:cf:eb:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5C:9B:0F:DA:1D:E1:C8:7E:35:53:62:DE:A1:7D:6C:C1:A6:B7:86
            X509v3 Authority Key Identifier:
                keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:48:50:04:36:0a:71:ac:25:54:0c:ce:f7:76:d2:a9:45:cd:
         48:d8:5b:03:0e:81:97:20:74:7f:e2:dc:79:f9:61:72:7a:d6:
         9b:50:94:0e:90:94:2e:a0:98:e9:61:f7:04:68:55:60:19:27:
         79:98:2a:46:36:03:fc:42:4e:fd:95:f4:62:5d:69:5e:3e:06:
         b1:76:1d:ba:d0:20:6b:45:67:43:12:c5:cb:7e:b4:c8:fc:b7:
         de:41:ca:b6:6c:65:f8:77:e3:a0:50:4d:7c:03:5a:a0:ca:15:
         93:8f:7a:4b:3a:0a:51:c8:23:13:5a:4d:03:ef:e6:54:87:23:
         8a:c8:1b:ac:aa:a8:92:7e:38:01:2c:cf:a9:9a:cf:20:57:a5:
         56:33:8f:cd:94:2c:2b:dd:c0:41:11:9f:5f:22:77:e6:41:e0:
         0f:22:85:64:11:9e:06:a6:b2:24:22:e5:0a:b4:61:8c:1b:76:
         78:35:fa:c8:b3:8f:4a:d0:8e:17:3d:71:85:e8:49:8d:5b:46:
         cc:f6:b4:a6:40:54:82:18:3c:a3:19:e8:35:35:73:11:5a:79:
         9b:ed:59:d5:dd:bf:db:32:54:f3:a1:81:c5:3a:31:11:ec:e3:
         81:dd:29:1f:e9:01:25:45:fd:0d:fb:54:90:a9:73:de:58:20:
         55:e8:a5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:11:45 2024 by rpki-client on console-ams.rpki-client.org