Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File:                     ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier:          hHN6CzEOx0m9dYm7FWS1f9eRCzfIVub541zv7u82UR8=
Subject key identifier:   FA:DC:DD:4B:0C:A3:33:93:92:ED:6E:1A:7F:EB:E4:BA:D1:B2:20:2C
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer:       /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial:       019044F8396FD1D38A9B1F8BD91937F62C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number:          11DB
Signing time:             Sun 23 Jun 2024 12:00:36 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:36 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:36 +0000
Files and hashes:         1: 1-Ug7WL13pQvdwmlLYWotLajKMhE.roa (hash: gHCKgfRWYgrol0hIvSX7jRq8n0TG6FgDcQX+N4ME5WI=)
                          2: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: ZvloEdB2/ni451nhX36PA5F5VcFeUlm1EWK/NauJPiI=)
                          3: TGWbnELd8GF3ir1u6GIVSi06TSk.roa (hash: JFFKC7OreIdl7ZsfoFAPPwgha/2WU0Hrpvx/GTEY15s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:39:6f:d1:d3:8a:9b:1f:8b:d9:19:37:f6:2c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
        Validity
            Not Before: Jun 23 12:00:36 2024 GMT
            Not After : Jun 24 12:00:36 2024 GMT
        Subject: CN=fadcdd4b0ca3339392ed6e1a7febe4bad1b2202c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:2a:d8:5d:5a:47:c0:87:0b:35:74:b4:e4:
                    6f:a8:31:8b:2b:f0:66:f0:f7:45:56:1e:53:7a:0c:
                    4f:e4:43:c1:93:ca:4e:a7:39:9d:81:5f:dd:1d:bd:
                    71:b2:52:f0:f2:a1:5a:9d:5b:39:66:ba:c2:30:25:
                    11:07:dd:84:e6:d0:8d:44:17:6e:f9:13:b4:c3:1b:
                    2a:ef:6e:d3:7d:af:de:3a:8f:1e:fd:26:2e:1a:ee:
                    87:19:a8:c5:de:b2:da:12:b0:25:bb:dc:9d:14:31:
                    e7:86:ce:f8:a0:f0:bf:bc:09:67:ff:66:e4:9c:b0:
                    33:5b:4f:9a:a9:8a:19:43:24:c7:f9:6b:68:da:68:
                    97:99:3f:9a:6d:f5:29:4b:26:93:ae:34:01:8c:ba:
                    6b:f9:c9:0c:0e:f8:4b:97:6a:cd:a6:cb:54:f8:74:
                    f8:57:88:2f:71:dd:e1:8e:4f:30:2f:53:96:07:56:
                    5b:ac:09:ce:ad:03:ce:21:85:ea:bb:5f:68:d0:90:
                    9d:81:c1:aa:c8:2a:1f:b2:49:7c:37:6f:bd:b8:f4:
                    ce:27:87:2a:4f:a3:d5:b0:ec:7f:c7:bd:0f:b3:1b:
                    5b:15:9c:1c:c1:21:d8:40:42:ac:45:55:4a:0c:41:
                    3c:e9:fb:ab:0e:4e:38:9b:8b:49:78:42:00:be:54:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DC:DD:4B:0C:A3:33:93:92:ED:6E:1A:7F:EB:E4:BA:D1:B2:20:2C
            X509v3 Authority Key Identifier:
                keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9b:3f:56:5b:67:ff:02:d0:b3:44:67:cb:41:4a:fa:19:c5:
         5b:78:09:78:b9:66:97:af:d9:26:bf:1e:bd:42:b9:b6:17:22:
         15:e8:7b:8b:a5:89:df:b6:11:3c:29:93:1a:d5:9c:9b:d4:ff:
         7c:8e:4c:93:e8:1a:80:21:77:10:66:a2:dc:08:3c:a2:ce:33:
         90:06:f0:4d:98:a7:26:20:31:9a:8c:b7:b3:a9:bb:24:29:97:
         bb:92:6d:8e:1b:41:8b:3c:f2:4b:10:c7:92:af:e7:0b:79:23:
         97:cf:f0:d6:63:05:12:ff:fe:22:00:dc:73:57:7a:e0:28:4e:
         1e:0e:1c:61:0d:37:0c:53:ea:d8:94:e6:4a:f8:af:99:38:99:
         0c:07:a2:b3:97:d8:c3:11:d3:99:6f:03:9e:23:cd:c6:f5:19:
         18:e1:d7:2c:08:5a:60:2d:38:47:fc:d3:96:4f:01:6d:87:88:
         42:35:da:7c:02:6a:23:dc:a0:6e:37:00:ca:f8:70:39:37:79:
         55:5d:02:2d:ff:53:e7:1b:fe:32:f5:ce:4f:c7:70:0a:73:52:
         16:f4:2b:fe:95:54:54:4d:f3:39:af:95:ed:c5:3d:cc:85:92:
         ba:84:6f:97:95:41:6f:21:a8:0d:37:e5:6c:95:b4:de:56:8c:
         7a:bc:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:54:40 2024 by rpki-client on console-fra.rpki-client.org