Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
File:                     p2t7n3_WaUOSfGDc8SEt3AffBSM.mft (raw, json)
Hash identifier:          ffE6YFqeX3ZCqHGWYx4m3AAtRdGLEsg6nNF/4OiDycI=
Subject key identifier:   CB:66:BC:F7:91:B5:97:DE:C4:7C:EC:41:A2:CF:9A:D4:59:1D:57:37
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Certificate issuer:       /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial:       0190489E1A75CD6816E14224897BAEA025B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
Manifest number:          0A30
Signing time:             Mon 24 Jun 2024 05:00:39 +0000
Manifest this update:     Mon 24 Jun 2024 05:00:39 +0000
Manifest next update:     Tue 25 Jun 2024 05:00:39 +0000
Files and hashes:         1: p2t7n3_WaUOSfGDc8SEt3AffBSM.crl (hash: dGzfiJpcl145KU96nIeCmHg7ntKUR3eWlq9A5yDtjiw=)
                          2: uYOMtSA-0ZVyzDuIHfDemlembZk.roa (hash: otAbd0YTdBCJXFv9VgYbH9JvTpFtFh1xaxZ6ZR6kuKg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:9e:1a:75:cd:68:16:e1:42:24:89:7b:ae:a0:25:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
        Validity
            Not Before: Jun 24 05:00:39 2024 GMT
            Not After : Jun 25 05:00:39 2024 GMT
        Subject: CN=cb66bcf791b597dec47cec41a2cf9ad4591d5737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:70:62:61:4c:8c:11:22:cf:06:1a:66:20:12:
                    3d:81:30:12:3c:ba:af:99:43:91:d2:68:7a:51:f7:
                    59:a5:f5:b6:34:3b:b5:07:c6:b2:81:a2:5e:50:ea:
                    44:4c:44:1f:8a:ae:26:c6:a7:f3:9e:70:10:ae:dd:
                    d4:3b:ed:db:62:bb:3b:f4:97:07:f3:5b:49:68:65:
                    4d:3f:c6:82:8e:8e:9d:27:68:ba:b6:3f:e4:ea:80:
                    42:8c:15:66:ae:ac:7f:c6:e1:8d:dd:4a:b5:93:a1:
                    c4:98:4d:0f:d0:54:b9:a5:54:d4:a6:67:b2:37:92:
                    e1:aa:1d:19:88:1f:b8:3c:bc:74:6f:13:06:b4:01:
                    8e:96:b8:a1:35:0d:94:15:5b:9e:8e:3e:ce:9a:48:
                    e9:ba:68:de:a2:7e:5a:1e:2b:ff:03:a6:8f:25:d5:
                    3b:92:73:e4:ed:84:9a:93:55:9b:54:85:5f:bc:d0:
                    15:25:d0:13:de:b3:b6:39:9b:bc:b3:13:c4:fb:5c:
                    ba:c1:0c:22:95:99:f6:a0:07:53:2d:83:67:05:fa:
                    17:62:23:dc:5f:d4:81:d5:dd:c2:23:4c:d1:65:0a:
                    26:52:66:d4:4f:3e:d2:96:21:a6:25:c3:86:7f:ea:
                    66:60:f6:be:e0:35:d8:8d:6b:dc:d7:1f:85:a8:5c:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:66:BC:F7:91:B5:97:DE:C4:7C:EC:41:A2:CF:9A:D4:59:1D:57:37
            X509v3 Authority Key Identifier:
                keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1b:f7:f8:df:c7:73:b8:f3:2d:e5:c2:d9:00:77:f8:71:d5:
         14:3f:27:72:02:7d:63:1a:13:93:28:eb:a0:c8:aa:3b:56:8c:
         b9:50:ef:87:2c:31:0d:a7:50:a6:83:63:61:d9:80:74:e1:82:
         fe:b6:2a:91:ca:02:3b:36:2f:c2:83:ee:ed:f4:43:20:c8:b4:
         d0:2e:8a:72:ea:27:6f:a4:00:2c:bd:0d:b6:6d:5a:f8:8a:f1:
         61:bd:b4:22:e0:a1:59:9a:d4:37:63:a4:71:0d:70:02:d8:23:
         b8:e2:5a:01:20:54:21:e0:05:d4:85:e8:25:f1:4e:4b:5e:59:
         82:45:ed:59:92:9d:34:02:05:1c:b2:72:50:04:48:f0:eb:62:
         dc:62:ec:e2:30:0e:e4:99:44:0b:b5:6b:78:ff:45:6c:f2:e3:
         b6:ef:e0:1c:4c:2a:59:12:85:c9:e9:95:65:d4:09:d7:23:4a:
         f8:60:e4:3a:e0:23:b7:29:51:c6:b9:8d:af:25:85:84:49:80:
         43:ee:60:6e:32:e1:39:44:98:d2:b0:c8:e8:e3:a6:da:3a:8a:
         f0:f4:0d:a9:3b:dc:75:df:7e:dd:37:3b:ef:fe:3f:72:17:1a:
         ab:48:46:71:33:f3:db:7d:99:d9:dd:e7:cc:c3:37:19:ff:91:
         77:b9:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:11:37 2024 by rpki-client on console-fra.rpki-client.org