Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
File:                     EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json)
Hash identifier:          6qcS1LAM2wBHJ312koIkmiYT3a4Wy+2DHRRyPIfkaEg=
Subject key identifier:   41:16:E8:76:EF:EE:D9:02:BB:1B:35:28:80:98:E6:9E:73:42:69:4A
Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
Certificate issuer:       /CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Certificate serial:       01903A3DB067D44EAECCCB94A7ED70F5041B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
Manifest number:          11D5
Signing time:             Fri 21 Jun 2024 10:00:39 +0000
Manifest this update:     Fri 21 Jun 2024 10:00:39 +0000
Manifest next update:     Sat 22 Jun 2024 10:00:39 +0000
Files and hashes:         1: 53i129jwzzw7Keb1WydfxJVpB7E.roa (hash: UtJyKPWICWQQ7/YoYuRgw9+BSNB/iVvLoBpBvCNZ6Kg=)
                          2: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: ZhUlF7gb/ilrLzTIo69MJUfSWh6HlTtn+opmyQTIOuc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:3d:b0:67:d4:4e:ae:cc:cb:94:a7:ed:70:f5:04:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f
        Validity
            Not Before: Jun 21 10:00:39 2024 GMT
            Not After : Jun 22 10:00:39 2024 GMT
        Subject: CN=4116e876efeed902bb1b35288098e69e7342694a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:df:96:6c:d0:92:27:b2:70:ef:41:1f:34:
                    f1:c3:be:18:a8:d5:2f:61:0e:63:49:7b:49:81:d1:
                    50:6c:36:b3:24:9d:3e:d2:ac:15:d8:86:69:18:b9:
                    14:2c:c3:7b:af:52:cb:61:a0:03:58:17:a0:48:42:
                    f0:1f:e2:6f:4d:f1:02:8c:cd:65:82:a3:14:ba:fb:
                    cc:f9:50:c2:6a:1c:20:ee:91:09:fb:d3:48:65:e1:
                    26:00:5e:57:44:43:48:22:7c:d5:0b:ed:f3:1e:5c:
                    68:93:f0:c3:3d:59:d5:c9:5e:14:03:35:4f:25:9e:
                    e2:28:c6:e4:cf:12:2b:93:5f:10:a9:62:ec:07:32:
                    a5:97:9f:e9:af:b7:df:69:53:76:f8:41:6a:4f:5a:
                    5c:06:e0:02:2a:af:8d:f4:9f:cf:6a:dd:db:27:78:
                    db:58:6b:75:fe:16:d9:4e:ea:48:de:ab:ca:f6:dd:
                    9b:26:8e:f8:82:74:c6:d7:c0:de:fc:9c:e2:be:0a:
                    16:d0:fe:66:61:b8:03:97:2e:79:36:b4:07:2a:bd:
                    81:c5:72:34:cc:ef:7b:c7:19:e6:ad:43:20:9d:38:
                    d5:25:fd:3a:3f:90:65:02:4e:8c:8f:01:cd:fb:89:
                    b6:e3:a8:cc:f2:29:34:70:67:8b:bc:7a:c7:78:91:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:16:E8:76:EF:EE:D9:02:BB:1B:35:28:80:98:E6:9E:73:42:69:4A
            X509v3 Authority Key Identifier:
                keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:08:ac:70:07:c3:9d:ac:c4:1d:20:c7:fb:74:fe:97:fb:19:
         f1:c0:fe:88:7f:50:bf:fa:21:21:36:aa:3a:56:0e:1b:0b:ce:
         fa:b1:ed:c9:73:c5:9a:96:6d:09:91:58:92:88:97:a6:cf:75:
         3b:ea:99:43:7b:af:98:14:44:14:77:de:86:97:f5:5c:30:be:
         a4:cc:fa:12:d7:1c:8b:0d:82:fb:b0:75:d6:46:1f:15:1e:ad:
         a6:9f:ea:39:d2:ef:d1:05:29:ab:a1:ba:6e:a9:08:40:bb:66:
         e6:95:3c:dc:cb:9a:2f:a7:b8:bd:68:5a:98:e9:79:29:08:e6:
         ca:c9:6c:8d:fa:93:ca:82:b4:a1:cc:e8:87:47:d0:a5:f2:ca:
         e7:07:00:b8:63:6a:5d:8a:4d:c8:1b:72:51:56:f4:2d:3f:9e:
         d6:28:9b:3f:86:00:e9:14:d0:a7:5e:30:d9:2f:8d:7e:e3:83:
         99:dc:8c:7e:0b:ea:5d:74:ad:b6:ce:ae:a8:74:68:70:97:fb:
         53:a4:2f:37:76:1e:d7:9a:8f:11:88:dd:b5:c5:2f:9e:87:81:
         4e:98:31:10:f7:46:1b:64:60:9d:3b:04:57:cc:35:a5:19:dc:
         24:78:ad:0f:76:5a:2a:e6:0e:16:4f:b3:96:23:f6:d0:2a:7f:
         8f:10:b8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:58:21 2024 by rpki-client on console-fra.rpki-client.org