Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft
File:                     7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft (raw, json)
Hash identifier:          12PFWgpnYx+2j9uoZvJW5TZiyQiS707rozy037PwKoI=
Subject key identifier:   C9:E5:BD:62:60:2A:4F:13:A7:EF:8C:4E:58:C9:30:A5:5A:11:5B:C9
Authority key identifier: EE:52:7C:9A:03:56:29:02:32:83:74:E1:50:99:C3:65:84:6A:6B:E8
Certificate issuer:       /CN=ee527c9a03562902328374e15099c365846a6be8
Certificate serial:       01901E8FC1E3A37D82253087CB1A3320123B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 01:00:56 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:56 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:56 +0000
Files and hashes:         1: 7lJ8mgNWKQIyg3ThUJnDZYRqa-g.crl (hash: JOcvSTN6dI0pIRcPmr/3/geZQVHWOUKXIvaQwcIl4hQ=)
                          2: ih-u8mSFv40UxhXyOm_u4-X6-tw.roa (hash: klWrPvGSxFkLCtYkV52VKMOc0yabch8S9qe5lFh5SVw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:c1:e3:a3:7d:82:25:30:87:cb:1a:33:20:12:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee527c9a03562902328374e15099c365846a6be8
        Validity
            Not Before: Jun 16 01:00:56 2024 GMT
            Not After : Jun 17 01:00:56 2024 GMT
        Subject: CN=c9e5bd62602a4f13a7ef8c4e58c930a55a115bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:e1:89:59:d9:88:2c:e7:9a:c8:38:2c:dd:
                    47:0a:31:85:ed:39:16:e4:68:20:3c:a5:78:4c:66:
                    e8:39:98:ec:11:d0:17:1a:48:9d:d6:6b:65:b9:bc:
                    4f:bb:5a:4e:e1:7d:05:07:bc:29:c4:24:75:1b:6b:
                    23:db:2a:75:dd:3d:4e:be:8c:fe:cf:fe:f8:0e:02:
                    47:eb:8a:15:c6:25:bf:e5:05:38:70:4d:37:9b:e2:
                    3d:12:1f:ce:cc:ca:14:84:6f:b3:a2:c3:a1:56:22:
                    c9:73:33:11:5d:ed:f1:01:b1:35:00:21:43:df:36:
                    76:3a:74:b0:76:09:76:74:80:c7:71:1a:4b:e6:14:
                    46:11:f9:2b:3e:9e:a6:a0:65:fd:ad:85:33:34:6f:
                    90:77:20:cd:c8:f5:09:bf:d0:d6:f1:81:6a:5f:a9:
                    37:58:9d:08:89:ce:2b:23:e8:2a:0d:16:24:2d:6c:
                    38:27:95:90:4b:74:ff:54:10:f9:5b:8a:f8:bc:81:
                    b2:ea:5a:7b:00:2f:1b:16:a4:d9:65:28:14:9e:8a:
                    72:23:ff:eb:cd:63:0e:97:0a:fa:03:f2:32:4e:02:
                    37:e8:28:d8:0a:77:b7:bf:53:d2:4d:32:3a:72:c9:
                    e5:47:60:cf:65:a5:67:07:e0:32:46:70:38:7a:10:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E5:BD:62:60:2A:4F:13:A7:EF:8C:4E:58:C9:30:A5:5A:11:5B:C9
            X509v3 Authority Key Identifier:
                keyid:EE:52:7C:9A:03:56:29:02:32:83:74:E1:50:99:C3:65:84:6A:6B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/220e62-a137-4657-a94a-df84cbb19a30/1/7lJ8mgNWKQIyg3ThUJnDZYRqa-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:41:a6:5a:d8:9f:bf:03:b8:36:ae:a2:03:c0:4f:cb:a8:ba:
         80:22:6b:71:65:c3:80:00:4f:56:ed:63:74:28:d6:b3:41:40:
         5c:d4:96:bf:84:9c:d6:7a:be:c8:3f:45:e8:a4:2a:1e:bd:01:
         4a:6c:f0:3c:b6:7b:0c:92:0b:f3:a5:57:7c:6d:7a:42:7e:f5:
         14:0b:f8:7b:2e:03:6d:23:88:c9:8f:9b:bd:3e:ce:3a:cb:f9:
         65:43:79:b1:c6:39:66:24:e1:4d:2b:1d:d3:7d:86:71:04:4f:
         a3:e9:16:b3:81:97:a2:fd:9d:aa:33:29:58:30:b5:46:e9:9e:
         78:1a:4c:0d:31:6f:4c:fb:0b:1a:d7:da:e4:19:25:df:a8:36:
         dc:97:7f:e9:b4:ef:a6:4d:18:6e:dd:50:b1:2e:e6:9e:e2:63:
         cb:a0:52:c5:21:c1:b0:cc:0e:8d:ae:ae:73:74:ed:e9:74:5a:
         26:d3:b7:cc:d0:b8:65:03:bc:1d:f2:fe:f5:86:f3:14:56:68:
         64:c1:e4:19:f9:fa:1c:71:53:37:45:9e:8a:c0:ed:74:38:b8:
         fa:db:24:34:5d:f8:de:75:3c:71:4c:e0:e0:f8:d9:9f:11:bf:
         18:61:b5:39:01:7a:64:6b:12:92:bf:91:23:8b:2d:4a:fa:d1:
         81:39:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:17:11 2024 by rpki-client on console-fra.rpki-client.org