Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File:                     1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier:          m7tS+auc6wmvjMsV4mG0aR/OXhcA1Zy7OEPpiV0I9eE=
Subject key identifier:   7E:7E:96:A6:8C:64:8C:87:D1:29:33:B4:40:E9:1D:67:71:3E:80:C5
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer:       /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial:       01901DECE67AB3B49BA10255EFA001640BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number:          0125
Signing time:             Sat 15 Jun 2024 22:03:02 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:02 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:02 +0000
Files and hashes:         1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: 8hS93xB5rfjyF9mCuvuWxpTCdDVVOHMH3dtkP9K5t1A=)
                          2: i3gMiouWeCKnMIB_TrfbyffRZUo.roa (hash: 0fNRpshhfFqiUThpf0y69dHSrR+cbKVCsqnbYb25WG4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:e6:7a:b3:b4:9b:a1:02:55:ef:a0:01:64:0b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
        Validity
            Not Before: Jun 15 22:03:02 2024 GMT
            Not After : Jun 16 22:03:02 2024 GMT
        Subject: CN=7e7e96a68c648c87d12933b440e91d67713e80c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:16:05:91:84:d6:1e:49:b3:8e:e9:9b:43:
                    76:11:92:0a:dc:7e:75:0a:46:20:5c:ed:63:bb:36:
                    64:79:d7:bd:46:24:63:35:25:50:28:03:d6:86:6e:
                    e4:c7:02:9d:3d:81:7f:d4:a3:2f:9c:b0:a8:a7:91:
                    ad:5b:35:b8:07:ec:ba:77:c8:10:d6:bc:c5:a8:a0:
                    ea:72:23:be:af:43:15:d1:a7:46:5a:0d:ca:7a:67:
                    56:26:a4:14:55:8f:4d:9b:78:4e:54:32:81:32:9f:
                    53:a7:3c:c5:5d:8c:f4:2e:f9:58:89:de:0b:aa:0d:
                    16:b3:1f:06:81:d0:29:36:87:07:b9:85:b3:a5:4a:
                    36:3c:7a:58:74:61:da:ca:d2:c8:2b:ad:86:e5:87:
                    b8:7d:d9:b0:de:76:2f:ed:ef:ca:66:95:7c:8f:a5:
                    fa:10:3d:28:58:0d:33:92:a8:fc:a8:60:06:6d:44:
                    87:5e:db:bb:84:91:dd:48:84:cd:4c:8f:fe:a0:ba:
                    ea:86:aa:68:91:68:44:dc:29:b0:94:70:c0:62:18:
                    18:eb:10:40:b2:b0:2c:0a:66:92:42:ce:dd:82:bb:
                    4c:1f:7b:e2:c7:1b:29:b0:e2:dd:e8:15:49:57:7d:
                    fb:32:58:16:8f:a8:86:e1:e6:b6:e3:7f:29:0e:ad:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7E:96:A6:8C:64:8C:87:D1:29:33:B4:40:E9:1D:67:71:3E:80:C5
            X509v3 Authority Key Identifier:
                keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:07:ac:3b:9f:76:05:bc:27:ed:b3:bb:e9:3e:ce:cb:96:1d:
         66:32:f7:e5:08:1f:1d:82:16:79:3c:f4:ba:38:71:d5:15:a0:
         47:ab:d3:83:d7:8f:2d:16:fe:05:91:07:1a:5b:11:e2:ae:6e:
         58:4f:28:0d:5c:e8:7c:e2:40:dc:5c:a6:ee:73:63:f6:c5:33:
         d6:f6:9c:f8:01:c9:90:65:67:3e:03:77:2b:06:0f:99:82:26:
         a2:8e:e1:08:1c:db:96:1f:bb:a3:7f:ae:25:37:a3:25:1a:db:
         9e:c5:9f:ca:9f:f2:1f:95:8a:e1:6f:e7:a8:82:17:00:69:21:
         87:7e:02:9b:cd:02:80:19:4a:1d:2e:89:0c:47:63:6b:1b:e3:
         ef:bf:6d:7e:29:85:56:4c:83:2a:aa:d6:5f:5e:7c:8f:40:40:
         92:3d:dd:0a:d3:e9:05:bc:b4:b9:19:93:8d:af:11:4a:0f:dc:
         a4:46:4d:cb:a4:a7:6b:12:6a:27:bf:2c:6d:85:35:9b:46:c2:
         ec:01:d3:cb:a0:b6:88:a4:f5:70:c5:b7:50:d6:d4:12:03:8d:
         a5:7e:60:a7:c3:06:6b:2e:4e:3f:9c:85:57:28:27:3b:4c:b4:
         a1:37:7c:fa:60:2e:24:12:7d:23:9f:72:f9:e6:7e:7d:75:49:
         78:16:62:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:45:02 2024 by rpki-client on console-ams.rpki-client.org