Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
File:                     L42NDO68zXW2BrpJaPXHlG6NR8A.mft (raw, json)
Hash identifier:          Q+XAPYXbKvs4pBl1fVNEosuaEEqEJrOIAn2m+EKwh1E=
Subject key identifier:   B4:C7:A0:96:FE:A6:83:1F:C8:31:F3:1A:10:8A:BA:04:A0:0D:E6:05
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Certificate issuer:       /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial:       0190452F436BC44747A2A4CC4582F8C15761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
Manifest number:          07C7
Signing time:             Sun 23 Jun 2024 13:00:43 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:43 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:43 +0000
Files and hashes:         1: 1-7v_CO99LlsGkRLKstc3AURDWiA.roa (hash: Skdl82qmh+SruBFLM4rMyGXAWRhVQMxkSNyLbiQln+E=)
                          2: L42NDO68zXW2BrpJaPXHlG6NR8A.crl (hash: n1VA5jr8A5AaAKDEkQJLlbybQqs9quKUsS/31YeCCWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:43:6b:c4:47:47:a2:a4:cc:45:82:f8:c1:57:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
        Validity
            Not Before: Jun 23 13:00:43 2024 GMT
            Not After : Jun 24 13:00:43 2024 GMT
        Subject: CN=b4c7a096fea6831fc831f31a108aba04a00de605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6a:d0:56:ee:95:e4:ea:a3:d2:ee:f7:2f:fb:
                    4f:26:e2:87:a2:d6:00:bd:6f:55:2a:74:d0:f9:53:
                    78:f0:02:58:08:6b:95:69:41:52:05:de:84:de:92:
                    49:22:7f:d8:26:92:2d:55:a4:58:0a:7d:3e:41:79:
                    c9:17:d9:7d:de:12:11:d6:5d:76:2e:65:95:f6:3f:
                    66:0a:18:79:a7:4d:37:e5:51:46:04:f6:17:ed:5f:
                    75:f3:c9:ef:37:4d:24:eb:24:3a:41:1c:37:5d:02:
                    7a:08:11:e9:63:41:ab:8b:2f:b3:c8:46:83:29:d3:
                    fb:a7:72:7e:eb:6c:ec:95:b0:f2:bf:d2:d2:cb:f9:
                    52:de:e9:80:94:85:17:7b:b5:5a:d3:f8:fb:34:f8:
                    06:e6:40:b4:8d:d9:c6:19:31:9f:02:50:8a:cd:63:
                    40:12:47:5f:97:10:d4:9d:a3:4c:0d:65:53:11:b5:
                    ad:4f:67:2c:0a:28:0a:ec:1e:c5:d0:c8:03:53:38:
                    21:b6:f5:a0:b8:8b:8e:8d:20:7a:2b:9a:6e:48:6d:
                    ed:e8:9e:1a:ae:19:68:be:dd:7c:e2:41:59:83:8e:
                    04:1b:da:7c:94:91:fe:2c:b3:57:9a:ec:4d:88:f4:
                    cd:18:ea:df:6c:06:1b:b3:d2:3e:fe:24:0a:16:28:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C7:A0:96:FE:A6:83:1F:C8:31:F3:1A:10:8A:BA:04:A0:0D:E6:05
            X509v3 Authority Key Identifier:
                keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:95:27:1c:0a:8c:ab:de:43:20:00:6d:5f:4b:7a:49:62:3a:
         c5:46:0a:10:b5:99:06:ee:15:20:7d:8b:48:39:45:d5:5d:31:
         ee:a0:0c:a5:06:1a:9f:2c:45:f0:62:5d:a1:7c:eb:d4:fe:4f:
         1a:40:40:fc:68:3e:2e:be:07:86:5f:12:4f:4c:48:68:9a:06:
         7b:f3:ed:8c:13:bf:9f:94:2e:28:d9:74:95:bb:ce:9e:08:11:
         db:97:87:02:84:8d:18:8c:a5:85:4a:ef:40:22:e1:4e:60:5f:
         43:7b:c6:cf:17:5a:0a:c6:4b:e0:a4:6b:8d:a3:b9:ad:a4:08:
         8f:f4:40:5d:50:ef:74:49:55:dd:c3:0d:c9:35:06:13:1a:85:
         40:13:63:b7:d3:57:69:af:58:8b:c6:32:57:81:87:64:5c:0f:
         d0:cf:0f:90:9d:37:0f:f6:a4:a8:62:d5:d9:24:33:02:0c:80:
         cc:7d:29:19:d2:4b:f4:ff:c3:2e:45:49:24:4a:66:a7:f9:e5:
         95:e5:57:25:4a:6d:b6:29:80:b2:1f:ca:4d:fa:e3:ba:2e:4b:
         bf:9c:bc:d0:ff:97:0b:9e:91:d4:18:06:78:51:27:75:5a:d0:
         f1:11:0c:9b:89:4d:c9:ce:af:03:0d:68:bc:84:2f:df:37:b6:
         51:f0:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:01 2024 by rpki-client on console-ams.rpki-client.org