Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
File:                     7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft (raw, json)
Hash identifier:          OWEMg9m+vzV3n5Ul6YLyIyToCk5I2u5CtUkuq5ZwcQQ=
Subject key identifier:   E8:5E:96:FC:89:E6:94:C0:A8:72:C7:03:75:46:AF:15:C5:A0:B4:D7
Authority key identifier: EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76
Certificate issuer:       /CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
Certificate serial:       01901BFE17703D02A35530880C0835BB651F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
Manifest number:          0341
Signing time:             Sat 15 Jun 2024 13:02:35 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:35 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:35 +0000
Files and hashes:         1: 3Ok-Y1zah-D61fJLGHRwTudQUOY.roa (hash: 4ag+TqB8tP40r0HU2NsX+PZTCRX5FjIZUEkNF8ug+88=)
                          2: 7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl (hash: 1sfw+kFw2BA2S01UFCLRdzuN4C06ig2B0/m9GMy90go=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:17:70:3d:02:a3:55:30:88:0c:08:35:bb:65:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
        Validity
            Not Before: Jun 15 13:02:35 2024 GMT
            Not After : Jun 16 13:02:35 2024 GMT
        Subject: CN=e85e96fc89e694c0a872c7037546af15c5a0b4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:b3:52:44:8d:8e:97:8a:47:38:9f:e8:cd:
                    7b:fa:e8:be:81:69:30:dd:10:54:6e:de:ff:91:e9:
                    92:07:b5:57:51:04:1e:0d:f0:f1:99:77:86:8d:53:
                    dd:a8:8d:cf:4d:16:c0:d0:1b:29:aa:6f:a1:05:69:
                    2f:59:e6:18:4e:74:11:62:a4:9a:fa:fb:f6:f1:98:
                    aa:74:50:c4:89:86:87:f6:c2:68:b4:15:1b:31:8f:
                    77:fd:64:75:4d:e8:3f:df:7f:7d:0a:14:1f:7d:ec:
                    55:08:01:41:f1:e1:26:d1:a3:21:ed:c2:9a:9f:20:
                    e6:a5:83:ab:bf:08:1e:6b:43:bf:87:fc:b4:dc:8f:
                    20:d3:6c:c0:2f:e4:59:bf:4e:fb:1f:2c:e5:7f:a3:
                    45:6e:e7:7d:e9:58:51:50:ef:60:89:ca:e1:17:68:
                    b9:67:56:ed:a2:b4:fb:8b:55:4c:96:c0:fc:4a:90:
                    30:39:01:34:1e:35:d7:f3:f0:a3:72:09:da:31:c2:
                    20:14:2e:d7:79:2b:66:b2:2f:ca:8a:23:cb:0e:40:
                    cd:17:e5:d6:1b:e4:d1:b2:03:c5:63:2d:d6:1f:ed:
                    df:5c:f0:40:9b:60:40:e1:dd:96:7a:4c:b9:9c:48:
                    08:08:8d:4f:94:6c:62:53:26:00:3f:de:b6:4e:cf:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:96:FC:89:E6:94:C0:A8:72:C7:03:75:46:AF:15:C5:A0:B4:D7
            X509v3 Authority Key Identifier:
                keyid:EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:64:1c:b7:be:6c:4a:40:11:17:73:e3:54:fa:85:fa:bc:82:
         ec:1d:f6:82:b7:de:86:ec:a0:ab:6a:82:e6:78:a9:58:e0:08:
         f4:c8:f6:90:78:ce:e1:11:62:e5:68:08:4a:e0:2c:60:7c:d0:
         ba:91:9e:b9:e0:ed:45:da:4b:f2:b9:66:7e:45:01:eb:37:bc:
         4b:81:71:38:8d:91:17:ce:15:df:9e:0f:08:e7:ac:0e:26:8f:
         7e:7d:06:4b:be:03:35:76:62:9f:f3:13:e5:0d:b7:d4:f4:83:
         02:8d:d0:6d:3b:95:bf:5e:04:c9:ca:db:1f:67:08:28:8f:8a:
         a1:c5:a3:d1:54:3a:14:d6:76:7a:e3:93:cb:d7:37:5a:2d:ae:
         f5:1f:b7:57:d1:5a:b4:78:5f:ae:76:c5:62:97:61:c0:51:6a:
         43:96:95:12:e7:07:81:a2:db:86:4e:06:ca:fb:17:b6:5a:70:
         d6:35:e6:98:30:16:f7:71:70:ca:34:f4:f2:88:d8:f1:65:33:
         e2:c0:c4:96:5f:f8:a2:4e:ab:15:e4:dc:fa:f4:3f:55:31:bc:
         5b:3c:e8:79:d1:d1:a0:9c:73:80:2d:53:bb:99:e5:9a:5e:00:
         7f:17:ba:68:2c:65:78:2c:1e:48:22:0c:4e:96:cc:0d:3f:da:
         82:5f:53:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:04:33 2024 by rpki-client on console-fra.rpki-client.org