Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
File:                     7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft (raw, json)
Hash identifier:          KrAFX+3rOBO3jm2mv3Sulu1ZWGrH4AwmFXQLWRXoRgA=
Subject key identifier:   E3:3E:C3:AD:4C:C3:AC:90:60:62:BD:B6:83:0D:38:22:F0:D2:26:21
Authority key identifier: EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76
Certificate issuer:       /CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
Certificate serial:       019038F655B72C6E5990DD2839492245AE59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
Manifest number:          0350
Signing time:             Fri 21 Jun 2024 04:03:06 +0000
Manifest this update:     Fri 21 Jun 2024 04:03:06 +0000
Manifest next update:     Sat 22 Jun 2024 04:03:06 +0000
Files and hashes:         1: 3Ok-Y1zah-D61fJLGHRwTudQUOY.roa (hash: 4ag+TqB8tP40r0HU2NsX+PZTCRX5FjIZUEkNF8ug+88=)
                          2: 7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl (hash: av5oVyI9b+fkTw32Th3RjrBHYCG+F+DafBSi4TgaYK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:f6:55:b7:2c:6e:59:90:dd:28:39:49:22:45:ae:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
        Validity
            Not Before: Jun 21 04:03:06 2024 GMT
            Not After : Jun 22 04:03:06 2024 GMT
        Subject: CN=e33ec3ad4cc3ac906062bdb6830d3822f0d22621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:d1:81:66:08:00:84:e6:6a:09:19:69:1a:
                    ef:61:bf:f4:bf:f8:c9:39:7c:5d:15:75:58:93:00:
                    f7:a3:e3:96:a9:c6:42:de:64:3d:0b:f9:b1:76:3d:
                    ba:a7:e0:68:e9:64:f2:21:8a:28:af:a9:90:05:a1:
                    57:7e:4a:a5:03:ce:05:62:68:22:3d:76:26:66:38:
                    8b:29:06:d9:7e:c6:77:09:58:7c:6c:ed:5e:36:d2:
                    6b:da:65:4b:9c:f6:a1:50:42:4c:da:87:cc:cd:74:
                    43:28:85:f2:6c:e8:0f:4e:e9:cb:2f:be:c4:69:2e:
                    c7:3a:85:37:d4:7a:ce:a2:6c:fd:e9:c8:b8:08:ac:
                    93:1f:0e:40:2e:43:2c:a2:78:84:5f:b6:88:45:2b:
                    2c:c5:9a:98:26:4e:d4:ca:e0:72:c3:95:d6:0f:3f:
                    cc:69:28:e7:61:d0:b1:72:57:94:0c:be:00:a5:68:
                    b4:a0:24:f4:91:e8:28:1a:f2:50:4a:87:16:52:f9:
                    18:39:cd:07:84:ac:1a:81:f0:16:7f:c0:d8:66:2f:
                    cc:d6:42:49:44:a0:07:90:6e:26:24:12:34:e8:c8:
                    ea:4d:9f:f7:c3:72:2e:8a:a0:0b:db:2a:e5:8f:fe:
                    66:cb:2a:14:a3:f6:55:b1:6b:b8:e6:df:c5:e6:e2:
                    11:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3E:C3:AD:4C:C3:AC:90:60:62:BD:B6:83:0D:38:22:F0:D2:26:21
            X509v3 Authority Key Identifier:
                keyid:EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:62:3d:1b:08:25:1c:56:3a:2b:41:55:bd:fb:54:47:04:d5:
         94:01:8c:c2:01:b0:44:18:97:45:e6:d9:ab:ae:6f:bd:0d:af:
         76:00:a0:fb:9f:e8:16:38:1c:c7:74:0c:19:97:7d:10:50:25:
         92:05:35:0f:b5:42:d3:09:13:68:28:99:4e:3e:35:6f:c9:59:
         27:7d:0b:62:c5:66:4c:38:47:6d:0e:a8:17:c8:01:f5:d9:68:
         0c:e7:1e:10:34:72:e3:26:4b:17:e3:6b:78:a8:f3:82:7f:96:
         f6:5b:96:ac:a2:cf:84:14:67:14:f8:3e:1d:6c:55:66:88:71:
         22:a6:ac:5b:72:56:ca:5a:14:2a:14:96:5b:e7:5b:14:47:a4:
         9b:9b:58:e2:61:62:6a:9e:24:ae:97:5b:e8:ca:65:4b:ef:f0:
         c0:0a:6b:69:58:dc:30:dc:3c:86:20:34:49:b9:f8:5b:9b:dc:
         65:ad:31:7a:d1:67:ad:72:17:39:50:99:67:7e:84:62:c2:aa:
         b1:b0:56:8e:bf:64:01:c4:05:27:22:23:71:c1:6b:d9:04:dd:
         38:22:6c:1c:5b:88:b2:85:b4:6c:43:38:6b:60:1c:e8:fb:cd:
         cf:0a:3a:33:f6:d8:a4:eb:6c:56:3c:15:4f:77:7d:96:b9:bb:
         67:c6:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:48:14 2024 by rpki-client on console-fra.rpki-client.org