Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File:                     7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier:          rLq2Q9Ni5EcdiaNkggpMSJXI6GSUomoFZS7GxFqk6CM=
Subject key identifier:   C9:48:1A:A3:5E:8C:0C:48:F4:E3:15:53:E6:A2:61:B5:5F:D2:69:C9
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer:       /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial:       01901DEC5E04AAF16256908A26F85BCB5F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:02:28 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:28 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:28 +0000
Files and hashes:         1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: UhT9SM4O4TqX0jO2mo/Pm10eozwIKuiNc5s8IaVAhOw=)
                          2: d7M52A9Zhrq_QbK08ZT0hs28kyU.roa (hash: sqOvPlwez0GSHLirzsDfIv78b5ZI/KlPdgI/rltI1so=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:5e:04:aa:f1:62:56:90:8a:26:f8:5b:cb:5f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
        Validity
            Not Before: Jun 15 22:02:28 2024 GMT
            Not After : Jun 16 22:02:28 2024 GMT
        Subject: CN=c9481aa35e8c0c48f4e31553e6a261b55fd269c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:17:f6:c7:e8:0d:69:bc:89:b3:b1:00:9b:
                    e6:b2:0f:7a:73:0a:f2:58:56:93:ea:72:fe:29:a6:
                    61:2f:35:46:aa:62:5e:ac:1b:3e:78:85:cf:76:58:
                    eb:da:bb:44:b8:62:0a:ca:ed:5c:89:e3:b5:3a:e5:
                    e0:85:03:2d:57:74:fd:37:20:91:ce:bb:ae:27:1c:
                    ef:73:77:bd:bc:19:09:e7:52:24:5c:b6:05:eb:a4:
                    3a:14:c5:2d:8b:73:fa:f7:f2:49:1f:b9:2f:e6:e5:
                    23:a9:b6:ee:34:c4:4a:5a:c6:7f:4c:5b:3c:11:59:
                    5a:ac:6b:84:68:eb:2b:b6:cb:5f:7c:77:94:8a:b8:
                    4e:20:a6:c6:f9:63:87:ca:4b:f8:83:21:64:4d:c2:
                    66:c9:45:1f:39:3d:91:36:d6:15:a6:05:c9:42:5a:
                    f4:2d:03:88:47:eb:78:75:28:06:30:56:11:54:fc:
                    a2:33:8a:e9:47:45:73:ac:40:07:55:1a:b7:dd:18:
                    40:dd:23:bb:eb:79:5f:42:b3:61:85:fb:ff:89:e8:
                    a2:88:5b:61:b6:eb:3a:c8:d4:c7:6c:de:d1:25:d1:
                    26:d2:8e:36:41:bd:3c:fd:07:d2:4b:fc:4c:fe:40:
                    bb:e0:8d:6d:7d:08:e5:c5:5a:61:27:b9:65:df:5d:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:48:1A:A3:5E:8C:0C:48:F4:E3:15:53:E6:A2:61:B5:5F:D2:69:C9
            X509v3 Authority Key Identifier:
                keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b5:04:59:54:09:76:00:0f:79:70:8f:d7:e2:07:0f:5e:04:
         36:8e:13:67:d1:cf:41:f7:2f:97:33:48:85:3f:53:a2:ed:e8:
         b8:00:01:2a:cd:64:ac:a8:99:56:cb:02:ae:55:9e:d9:f8:b7:
         74:5b:9d:d8:b5:58:c8:23:ec:32:a6:2e:4b:91:0c:37:7a:c2:
         1e:d6:a3:9c:89:89:2d:03:9b:5b:f2:d1:0d:92:05:6c:9f:06:
         9d:50:be:c4:ea:a1:9d:51:99:13:56:d1:24:10:08:7c:98:4b:
         9c:da:aa:5b:53:36:6a:76:ec:b2:3d:81:45:e8:04:bd:1c:28:
         56:6c:76:57:ab:f1:00:96:f6:bb:68:2b:e8:e5:b0:af:86:a1:
         56:f0:99:d5:6f:79:22:89:06:c4:b0:1f:98:a1:5c:23:0e:68:
         29:0c:4a:4c:8e:c9:48:29:b1:eb:55:26:13:20:38:33:28:71:
         0f:8f:e1:1c:97:09:53:f5:0d:c5:9b:f2:d5:30:c1:06:ba:ec:
         1d:3f:ba:fa:10:a0:36:fa:7a:7f:6a:21:de:06:a3:d3:15:3a:
         7b:4a:a3:60:22:57:37:a8:fc:ec:ec:6a:59:4f:d0:bf:33:d5:
         40:d2:71:d9:25:ab:ca:fe:16:50:cb:1e:fb:00:b8:5b:0f:ba:
         8e:a9:06:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:42:35 2024 by rpki-client on console-ams.rpki-client.org