Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.mft
File:                     POLD7bU5f4Mu6P5qnuw8XkNicHc.mft (raw, json)
Hash identifier:          dW3M9vvsdwXQ1tia0NTdxAJxT3bm5TOpmHE01ecwLqQ=
Subject key identifier:   E2:FD:14:8C:F6:EA:DF:79:35:DB:E9:2B:01:1A:E8:7E:27:D0:19:05
Authority key identifier: 3C:E2:C3:ED:B5:39:7F:83:2E:E8:FE:6A:9E:EC:3C:5E:43:62:70:77
Certificate issuer:       /CN=3ce2c3edb5397f832ee8fe6a9eec3c5e43627077
Certificate serial:       01901D0F5010A9FC5C27A490DE2E8435AF06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POLD7bU5f4Mu6P5qnuw8XkNicHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 18:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:01 +0000
Files and hashes:         1: 1-do1qLz8HTjQT7OXfmacOYKjq-I.roa (hash: Fvz4+/8l8qQFUa0T0LCiTofizynOLz3quOhSwT/POaI=)
                          2: POLD7bU5f4Mu6P5qnuw8XkNicHc.crl (hash: 4XsmsOrmtzogFq72ynID20uPdM/jlHiIJssC70J5Zwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/POLD7bU5f4Mu6P5qnuw8XkNicHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:50:10:a9:fc:5c:27:a4:90:de:2e:84:35:af:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ce2c3edb5397f832ee8fe6a9eec3c5e43627077
        Validity
            Not Before: Jun 15 18:01:01 2024 GMT
            Not After : Jun 16 18:01:01 2024 GMT
        Subject: CN=e2fd148cf6eadf7935dbe92b011ae87e27d01905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:e4:91:2e:c3:3b:74:11:c3:a0:01:75:14:
                    7a:61:6b:4d:cb:c8:fa:2d:4c:57:ae:75:d1:1a:c7:
                    39:59:02:56:d0:07:2b:03:f3:0f:15:b0:f6:c4:0f:
                    25:f5:f6:4f:6d:77:96:e6:e7:55:84:80:57:07:3e:
                    4b:92:05:b1:a1:56:5a:4b:7d:4e:29:16:9a:89:90:
                    ef:de:8c:55:a5:cc:1d:b6:dc:12:21:11:67:6c:58:
                    5c:a7:02:b2:13:0a:87:d5:4a:1f:18:25:63:9c:ca:
                    52:64:82:6c:63:8a:79:05:41:1b:0f:fb:c1:fc:10:
                    f2:5c:37:12:92:3c:ca:9d:dd:3e:c3:b5:86:d7:2a:
                    58:ac:4d:66:d8:38:b3:ec:56:e1:fd:83:47:f9:ca:
                    b2:b7:45:53:08:12:35:51:42:72:a6:df:7d:0e:5a:
                    87:57:86:ea:17:e6:30:bf:de:95:58:30:97:2c:22:
                    23:29:74:17:8c:14:f0:cb:71:a3:84:ae:c2:8c:5b:
                    db:93:99:07:a5:a1:2e:ab:5a:e7:0d:f2:49:81:55:
                    c6:f9:8a:64:81:42:b8:98:d7:00:30:ba:00:1c:e5:
                    a8:48:3c:2e:e2:a1:4d:f7:be:16:3a:f0:4f:47:92:
                    2c:d5:fb:95:db:f2:c8:8d:e6:ce:40:7c:7e:9d:af:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FD:14:8C:F6:EA:DF:79:35:DB:E9:2B:01:1A:E8:7E:27:D0:19:05
            X509v3 Authority Key Identifier:
                keyid:3C:E2:C3:ED:B5:39:7F:83:2E:E8:FE:6A:9E:EC:3C:5E:43:62:70:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POLD7bU5f4Mu6P5qnuw8XkNicHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:93:4b:25:05:30:20:d2:84:36:90:97:9c:84:4d:59:5a:88:
         10:a9:f9:c1:05:74:e7:6f:aa:db:a3:4e:94:56:ab:e2:da:3d:
         c3:e5:51:d6:d1:d4:4e:0e:c6:49:42:3b:c0:08:82:2b:e1:a8:
         75:a1:e5:fd:62:1f:6a:16:55:bf:5b:8c:4c:ae:b3:69:ac:c0:
         b7:13:93:c3:db:2f:2e:77:50:a5:c6:d1:a8:e7:5e:be:7d:75:
         56:af:97:ef:e1:64:4a:7d:16:37:49:7b:8a:3a:4c:99:ef:4e:
         3b:ba:48:e9:3c:08:f9:26:13:20:2c:67:6f:c5:5f:bb:1e:e5:
         35:1f:49:84:4d:56:31:37:7f:6d:a2:78:b6:05:3a:24:37:0e:
         93:a6:ee:9c:0a:be:38:e0:f5:93:38:58:40:11:4b:73:44:8b:
         30:ca:5b:36:51:39:29:92:7c:1d:fb:26:e3:4d:a4:b4:c2:a6:
         ad:b4:80:47:03:63:47:86:bd:07:03:d8:42:64:94:11:b0:21:
         96:b5:58:8a:e2:63:e3:af:07:a9:3f:5a:00:28:f9:84:06:49:
         99:31:21:0a:4a:5d:e4:9c:0b:00:e5:41:e0:51:33:b1:1d:20:
         cc:ee:7b:3f:01:75:06:d9:26:0f:6a:de:85:d3:99:c0:39:2e:
         4a:71:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:29:03 2024 by rpki-client on console-ams.rpki-client.org