Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
File:                     MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json)
Hash identifier:          eNQRMMYcmxObeRxGUIy6GXos1d0n+lljfXIKftmdKrY=
Subject key identifier:   20:45:39:76:CD:F3:E0:F6:86:85:7F:23:14:2C:C6:8C:45:F2:C1:C0
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Certificate issuer:       /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial:       01901DEB4081A3FF38B84B6EDC3D21D69AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:01:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:15 +0000
Files and hashes:         1: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: Si69F2/FjRLDazZVVgFmQUgTdZkoooewY1LAJb31eGQ=)
                          2: RZQhEibgKOswKZZrI1dUCr2do4o.roa (hash: TmWH4bkw32FTwltEzyVBvAClBorNffGbBJmJxi9JDwg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:40:81:a3:ff:38:b8:4b:6e:dc:3d:21:d6:9a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
        Validity
            Not Before: Jun 15 22:01:15 2024 GMT
            Not After : Jun 16 22:01:15 2024 GMT
        Subject: CN=20453976cdf3e0f686857f23142cc68c45f2c1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:3d:57:d8:04:57:d7:3e:21:2f:74:b2:6c:
                    16:29:18:8f:0c:a9:be:0b:cf:e6:b1:2e:5a:53:93:
                    83:e6:44:cb:5e:ce:3b:4e:25:52:0a:53:16:8b:eb:
                    bb:6e:b5:09:ab:2f:e6:43:db:08:2c:d1:3b:94:fe:
                    b8:73:b2:4c:13:74:26:32:6e:8c:ee:36:a2:d5:f7:
                    a4:5d:a4:92:ed:ec:8e:88:fa:72:0f:49:34:e7:e2:
                    8c:f3:5f:a7:5e:8a:78:45:78:8f:97:e1:b4:40:27:
                    a5:74:1d:80:45:d8:7c:9b:26:b1:fe:4e:5e:32:a2:
                    65:c7:a9:a8:9b:f2:2d:d3:f6:ed:1f:6d:7f:5b:1d:
                    39:1d:e0:db:e2:88:54:a2:52:e9:95:09:f5:65:cb:
                    c8:e3:2d:5f:ea:ea:26:f9:f8:d4:87:df:ba:63:c6:
                    22:de:1d:50:bc:5b:98:8d:2b:0b:30:3c:dd:55:44:
                    3c:ae:46:94:8b:44:14:ec:e3:6e:7e:03:e2:81:42:
                    51:b7:7d:bc:10:4f:2b:1d:1f:8f:b1:18:41:2a:aa:
                    12:90:c0:5f:5a:e0:4c:e8:68:e6:b9:5c:49:a0:3b:
                    1b:4b:2b:fa:0d:cf:db:f6:e3:cb:14:ed:d0:c5:8b:
                    1b:03:90:63:20:a0:ae:8b:67:12:35:8a:41:37:3e:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:45:39:76:CD:F3:E0:F6:86:85:7F:23:14:2C:C6:8C:45:F2:C1:C0
            X509v3 Authority Key Identifier:
                keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:fb:a5:55:cb:56:1e:59:ea:6a:54:9b:9b:f3:37:50:8f:
         76:9b:d0:43:86:75:d7:3d:95:97:95:d1:89:49:e9:cf:9c:b1:
         b6:ae:ca:73:80:23:7e:95:3f:50:a4:03:4d:bf:73:eb:74:dd:
         e8:9d:bc:50:66:c3:f0:7c:c2:b3:c2:29:a7:e2:73:64:e5:52:
         3a:fd:ed:65:60:91:2d:8f:56:68:e1:eb:14:37:8c:69:4e:ff:
         45:c5:ea:6e:2d:30:d3:a0:b3:ca:0f:0a:22:71:0b:6c:62:8f:
         73:3f:98:4b:cc:aa:43:1b:5b:4a:3b:9d:f9:16:35:11:d8:d1:
         7d:48:dd:13:ad:ad:f6:62:cb:8c:78:b3:8f:4a:1a:e7:09:eb:
         12:1e:2f:ab:64:3a:6d:e5:0b:30:83:1a:e9:6e:d2:1e:56:43:
         a2:ba:00:37:50:2a:8f:d6:66:8f:c1:23:d7:eb:85:8a:0d:b0:
         28:29:42:34:ac:5c:af:3b:99:c3:78:4b:75:8e:c6:11:49:54:
         a8:66:85:e4:57:7c:b8:86:37:8b:26:aa:cc:5b:c6:5e:b4:14:
         d4:53:30:b9:44:11:8d:d5:92:06:fe:df:ed:e6:f0:65:d5:19:
         5d:3b:76:dc:51:74:14:a6:02:ad:0a:6c:87:2c:7d:a9:49:4a:
         77:74:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:17:55 2024 by rpki-client on console-fra.rpki-client.org