Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File:                     ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier:          LTuLfzKGfqYJ7fc8xvhArCL0kOrX7eeQy3WWwaZCYA8=
Subject key identifier:   48:81:4F:D9:08:B1:E9:D1:D0:21:4D:E6:FC:E6:5C:13:71:AA:3D:13
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer:       /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial:       01901DEC24D76CF981EDD528B5E1155CD3B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number:          0249
Signing time:             Sat 15 Jun 2024 22:02:13 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:13 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:13 +0000
Files and hashes:         1: 1ZhvohqJa0haJF59cBkamXwUyuU.roa (hash: rUega7rZ2RAsTeGHrogjaNxjs4yKk/fYdC7luGAJYFE=)
                          2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: 5p6sYqqq5I5YLm16HbtpcLaq50ONW7L10O+gL95DO28=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:24:d7:6c:f9:81:ed:d5:28:b5:e1:15:5c:d3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
        Validity
            Not Before: Jun 15 22:02:13 2024 GMT
            Not After : Jun 16 22:02:13 2024 GMT
        Subject: CN=48814fd908b1e9d1d0214de6fce65c1371aa3d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:93:84:52:11:76:6d:d2:78:ce:c9:cc:96:e0:
                    22:27:fe:68:8e:fa:59:1a:af:eb:ba:f6:75:d8:91:
                    9e:fa:1c:40:4f:cf:71:55:1c:5a:55:29:7a:b7:9d:
                    4f:7c:1f:83:a5:48:87:79:ae:0c:81:18:3f:49:4d:
                    a0:25:6e:9d:3d:7f:c7:11:00:17:91:9f:71:f2:7a:
                    c6:bf:6e:1f:9d:4b:70:61:e1:44:d0:d5:cc:6f:40:
                    71:fe:b7:ef:50:d1:02:fc:5d:b5:6b:40:2b:e6:94:
                    aa:d8:f2:e9:ef:3d:ca:c2:61:31:e1:b8:9f:f6:96:
                    7f:da:38:43:8d:3a:80:52:4b:2d:db:5e:1d:57:a8:
                    42:1d:b0:41:58:97:da:6a:c1:a6:63:21:c5:b1:00:
                    4f:75:9d:44:c4:bc:ac:64:80:41:ce:20:ba:b7:7c:
                    4d:12:93:9b:e4:1f:d0:7b:3a:d9:93:21:ab:35:3f:
                    e2:80:92:02:13:5f:c1:6b:c0:03:eb:88:5a:05:4d:
                    6e:6c:a9:80:58:5f:98:4d:21:52:41:5e:52:fa:8d:
                    95:46:93:de:27:61:f5:44:ad:e0:7c:6b:ee:59:e5:
                    1a:1b:55:2a:83:e6:4c:51:68:7b:7c:43:09:42:2d:
                    3f:17:c2:fb:c3:69:4b:5e:a1:3e:a5:4a:2b:08:c8:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:81:4F:D9:08:B1:E9:D1:D0:21:4D:E6:FC:E6:5C:13:71:AA:3D:13
            X509v3 Authority Key Identifier:
                keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:89:1d:cc:d8:dc:4c:97:08:ac:b1:c4:f0:d3:5d:70:ab:72:
         bc:d1:d5:90:c3:76:16:41:fc:e8:17:35:44:5a:9e:86:7c:c8:
         0d:46:88:8b:b2:0d:19:5c:b0:9c:f1:39:05:99:7c:ee:b6:c2:
         56:9e:ac:d8:26:e6:59:63:b0:2b:89:f4:a9:5c:62:ff:af:b4:
         aa:8d:24:a1:ae:e5:62:3e:14:8a:8f:cd:17:f0:ba:c7:df:12:
         44:2b:bf:b4:18:eb:d6:6b:5e:10:c2:ee:ce:0c:04:3b:fe:c6:
         bd:44:72:ac:5e:4b:31:12:05:24:f7:7d:4a:ab:7e:9b:c2:ad:
         f1:4a:95:28:09:e9:43:78:c4:f7:3a:13:ab:52:d9:f9:e7:6e:
         cd:3a:e7:de:c1:37:be:4e:b9:46:85:e3:e3:9c:68:83:fc:41:
         56:82:1a:d3:55:08:52:4d:df:6e:4c:48:2e:bc:75:00:6e:5f:
         7f:56:a7:38:a6:48:01:1b:ec:40:3c:57:c0:52:f8:9e:e2:dc:
         89:b8:b6:4b:fb:b9:a9:9a:1e:3f:df:f1:9f:c0:55:23:ba:9a:
         24:8e:b9:09:8e:51:81:0a:93:fa:79:17:97:88:1b:6a:f0:6e:
         e9:92:8e:b8:27:9e:be:01:18:ab:20:d8:aa:45:94:d4:86:da:
         d4:62:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:15 2024 by rpki-client on console-fra.rpki-client.org