Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File:                     dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier:          QefIbHjHFUyc8FKUGFUYEGWsswGFIysokd+H69m8mIE=
Subject key identifier:   7E:24:45:48:66:A6:D2:B1:0F:97:E7:DB:5E:55:88:3F:92:AD:39:0A
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer:       /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial:       01901E58A1D5490C049DA06DEB9BCA1855E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 00:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:43 +0000
Files and hashes:         1: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: BTH0GC4BOEYJrz755PfbqqYQPAudZ0DX3WOnR6ShCIE=)
                          2: ze9RQ4O_kXZQFQ6PyQ_agiynTLg.roa (hash: zVmVyK3qt2PyrLyXnTZdZG67ziURIOPc/S8QBCH8zx4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:a1:d5:49:0c:04:9d:a0:6d:eb:9b:ca:18:55:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
        Validity
            Not Before: Jun 16 00:00:43 2024 GMT
            Not After : Jun 17 00:00:43 2024 GMT
        Subject: CN=7e24454866a6d2b10f97e7db5e55883f92ad390a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:50:68:6e:e2:5d:2d:72:f1:46:e5:a2:57:
                    d1:19:a1:ac:9d:60:e8:3d:40:2c:a3:90:10:c4:cc:
                    5a:7e:5d:c5:46:bd:c5:1b:dd:e0:39:7d:74:06:45:
                    13:b3:ee:46:99:f2:5e:8b:61:73:c7:97:43:b9:28:
                    21:c0:4a:cb:df:d0:0c:81:ee:5e:47:65:1c:68:02:
                    3d:53:b8:30:62:6c:17:7a:f7:e1:e3:44:c8:7a:2c:
                    14:86:bb:5e:5c:94:e3:8e:1b:9b:43:df:af:e4:5f:
                    93:cd:a0:73:d4:6d:c2:60:d8:2e:b6:f7:ee:2b:e3:
                    ec:31:31:4f:ca:6a:c2:db:79:85:00:e1:b1:86:b0:
                    41:a5:71:27:9b:9c:55:ac:b7:b8:a8:19:f9:9a:2d:
                    c4:6e:43:20:a0:54:ac:da:70:98:71:b4:7d:b0:c1:
                    f3:6a:c9:05:70:be:fe:18:9b:2f:37:f5:e7:8e:69:
                    87:5c:08:96:d6:dd:52:78:a5:b4:57:19:05:74:f7:
                    6c:16:97:f2:45:64:e2:54:27:75:b5:3a:c4:d2:3c:
                    3a:d2:5e:d6:f3:d3:1f:2b:ca:9c:62:f9:b2:94:de:
                    4a:4f:85:7e:cd:7e:5a:89:da:5f:86:43:98:c7:a0:
                    b5:51:47:77:cd:ab:ab:f7:5a:eb:10:fc:b3:c2:7b:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:24:45:48:66:A6:D2:B1:0F:97:E7:DB:5E:55:88:3F:92:AD:39:0A
            X509v3 Authority Key Identifier:
                keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:08:f5:88:55:51:7d:71:e2:6e:57:42:73:0b:55:b3:c3:
         d0:91:26:c6:ba:13:8f:81:77:31:49:0a:46:58:73:e1:5b:8f:
         4c:77:6d:6c:ad:bc:c1:1a:bc:2f:87:79:02:5f:07:a7:e5:cc:
         87:d5:c5:de:be:78:6c:d3:35:2b:1a:cd:26:51:84:bb:fe:a1:
         12:6a:45:93:25:9e:c9:a4:5b:da:56:7a:1f:12:c3:95:fe:98:
         fb:82:c2:57:d5:f5:eb:87:94:a4:4c:09:1a:f6:e9:06:21:4c:
         de:6f:07:dd:e9:1e:76:9b:bc:47:79:cd:9b:e6:69:aa:74:02:
         08:1d:61:b0:1e:20:11:4f:fb:5f:75:ec:f4:fe:46:ad:0c:61:
         ed:d9:14:ba:e0:a9:9e:54:8f:e3:90:44:d8:bc:36:19:07:33:
         69:dc:82:06:04:fe:55:f3:a6:5c:56:9c:3b:e3:b3:7a:49:02:
         7b:85:48:5c:89:d5:70:0f:9e:80:ab:98:48:58:52:91:37:a6:
         bc:37:3a:0b:32:4a:64:d7:6c:c6:c2:f8:0e:9c:3f:5f:18:3f:
         f1:a0:3e:ca:79:50:06:a9:e0:0e:2c:3c:f1:a3:76:58:b4:37:
         17:d9:0f:7f:34:82:8a:36:90:be:2d:0f:51:68:5d:5d:6f:9b:
         28:17:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:19 2024 by rpki-client on console-fra.rpki-client.org