Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
File:                     p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft (raw, json)
Hash identifier:          Y4Bmj/QZgtAoduNE5HGTg0HTisBSAuFyymKDLyfUs9U=
Subject key identifier:   B0:53:F6:4C:22:F4:66:ED:1A:F5:93:FA:45:E9:13:6A:59:05:40:D4
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Certificate issuer:       /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial:       01901E9041AE1D4663A295D032826858BFF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
Manifest number:          073A
Signing time:             Sun 16 Jun 2024 01:01:28 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:28 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:28 +0000
Files and hashes:         1: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl (hash: 3uwt2yYrg4RKs8Epb7jWRssAe+ERv8XpLqgT4iTEaY8=)
                          2: v2T3DyvjoX3LxPiCcZVDcqwdrbI.roa (hash: D5JJTY9s1hnlzYxNASvz8vTxi/V+h4Tq4/kOXkOqAR8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:41:ae:1d:46:63:a2:95:d0:32:82:68:58:bf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
        Validity
            Not Before: Jun 16 01:01:28 2024 GMT
            Not After : Jun 17 01:01:28 2024 GMT
        Subject: CN=b053f64c22f466ed1af593fa45e9136a590540d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:d6:69:bd:db:9b:19:ec:32:cb:6c:f0:a7:
                    20:af:03:59:65:8b:e5:21:5f:75:55:36:1f:61:bb:
                    b5:ed:0a:d6:ae:0b:2e:a1:d4:7a:b6:85:9d:29:b0:
                    57:60:28:4e:ab:54:ff:03:c7:9d:12:86:ab:1a:f5:
                    5d:4d:f7:86:9d:ec:45:cb:f0:e5:bd:39:ed:a2:7f:
                    22:26:04:62:86:2f:ba:e9:de:f9:14:b5:9e:93:3c:
                    2c:c9:a8:92:1b:36:8d:8f:88:47:4f:bf:da:85:8b:
                    5f:a2:40:db:8b:95:a8:91:90:a2:7d:1f:22:6a:8b:
                    6a:0b:b0:fc:d0:69:15:a8:e4:8d:93:0e:0b:d3:c4:
                    5a:b1:87:52:0a:08:45:90:44:e3:c6:8b:8c:60:77:
                    84:ad:b2:91:3d:ba:f0:39:51:18:1f:9e:95:de:ee:
                    cf:60:fd:e6:e3:98:88:60:86:56:0f:6e:e3:89:71:
                    f3:65:48:77:8d:77:14:c7:fc:66:87:24:19:26:05:
                    3f:06:0a:66:27:28:69:e7:e5:11:c1:34:69:2e:49:
                    80:8e:d6:b0:72:d6:47:15:5a:9c:15:f8:40:47:40:
                    f9:0c:ef:85:73:5a:b7:a7:3f:bf:a9:f4:07:ee:e1:
                    d1:f0:e0:8f:68:d6:88:11:61:7b:36:ec:a5:10:3f:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:53:F6:4C:22:F4:66:ED:1A:F5:93:FA:45:E9:13:6A:59:05:40:D4
            X509v3 Authority Key Identifier:
                keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c9:9b:2d:e6:b1:57:16:95:32:ad:e3:79:bf:fc:77:34:99:
         44:58:b3:91:c6:d5:cd:14:f5:11:89:55:e2:3d:82:b7:28:73:
         5c:34:2d:af:f7:af:05:6f:39:96:59:b1:e7:e3:a1:59:8c:ba:
         b8:19:f7:8a:0b:fa:57:99:88:a7:04:29:cd:95:32:e5:90:84:
         2e:95:63:97:9c:39:16:34:f4:aa:78:e4:a9:2f:13:dc:9d:fa:
         ae:38:33:f6:3d:6d:b3:6b:57:7a:85:aa:04:02:c1:4b:46:b4:
         3e:39:b4:1e:e2:0b:4d:04:50:56:7b:0b:41:1d:8c:07:96:92:
         26:e8:b4:2b:7b:af:69:81:ca:a4:f7:2b:7c:84:3a:c2:2c:2c:
         f6:a5:25:9b:01:fe:b5:1f:2a:63:6c:99:86:0e:37:9d:7c:8b:
         f4:c5:24:4f:b1:0b:b3:f2:09:10:22:3c:17:ac:cf:8a:d6:c7:
         09:f3:0e:ce:08:2f:0c:51:60:22:35:a8:b1:1d:b1:bf:73:6c:
         f7:ff:ac:68:91:6b:a2:50:5d:a7:64:9f:a4:74:1c:f6:05:12:
         f9:bc:b9:f3:af:f1:5e:08:2a:3e:31:ce:91:8b:2f:fd:33:a2:
         d2:0f:2c:a6:79:2b:83:89:2c:21:7a:74:15:cd:ad:3c:5e:e0:
         8a:bd:e7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:23 2024 by rpki-client on console-fra.rpki-client.org