Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          pTKvkEKlHvcpoBFvFTN+zmCwos7aJ6z6fpwmjy/lI7Y=
Subject key identifier:   DE:8D:5A:FB:77:F8:7C:41:2C:61:33:2A:DF:46:23:2D:63:49:EB:E0
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       01901D469CD0D4B9BDF43E8572750D506A11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 19:01:25 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:25 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:25 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: YVrRYyvAne3CYnqK7yocSZL6PSrl1QO005SkicooMDo=)
                          2: 1eAGu-ABlEPU4KJiTuXsMZAbFvU.roa (hash: i21aTnx+e9HS61Jw+liOBppQXdu89MRUq8Vn/TP1eAA=)
                          3: 8Qu62nIJ6nAm6s-a2LmqX1L2lZQ.roa (hash: j5kkv1pJCYTRAbSuy9COE6ZdMN7LSnwUi5WlLG8hhpo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:9c:d0:d4:b9:bd:f4:3e:85:72:75:0d:50:6a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Jun 15 19:01:25 2024 GMT
            Not After : Jun 16 19:01:25 2024 GMT
        Subject: CN=de8d5afb77f87c412c61332adf46232d6349ebe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:7a:77:8f:e4:13:7c:24:8f:1e:d2:07:a5:
                    73:00:60:0b:e9:c5:d8:72:84:f9:c8:1d:1a:0a:73:
                    77:a5:e6:6f:63:33:41:7d:0b:27:04:eb:a1:93:e9:
                    18:e1:23:ba:23:38:cf:9b:d4:75:19:5c:ae:60:eb:
                    b0:d2:cc:aa:35:0a:0a:b7:b8:fb:2d:02:ab:5d:9d:
                    03:98:f2:40:a2:92:d9:20:0d:3a:b2:dc:98:c1:1b:
                    af:e0:c1:88:bd:22:dd:a3:7f:84:df:d0:9b:80:40:
                    77:fd:59:98:26:db:d8:40:cb:27:e7:3f:20:35:c0:
                    a2:08:b1:f2:6f:28:08:c9:00:56:ec:08:a8:0e:f8:
                    4a:bd:51:6f:b1:29:af:04:d2:f2:66:22:ed:9d:df:
                    f6:0e:50:46:79:a8:d2:32:f9:4c:70:11:b0:90:fe:
                    1f:eb:cb:1a:74:00:6f:7a:0c:ae:10:9a:ee:bf:04:
                    77:0c:41:82:be:5d:7e:ca:90:98:25:79:60:8c:88:
                    ab:78:8f:73:d8:04:bb:13:b2:58:af:2b:ce:88:14:
                    37:1e:fe:bf:e5:f8:81:8b:79:23:27:51:b1:6d:29:
                    9d:49:00:16:e9:c8:b0:de:12:8a:b0:09:53:03:d2:
                    a6:6c:f0:8b:a0:da:6e:49:ea:87:a9:e5:93:cf:32:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8D:5A:FB:77:F8:7C:41:2C:61:33:2A:DF:46:23:2D:63:49:EB:E0
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4c:73:d8:b5:e3:9c:b2:a9:e9:41:2c:63:68:07:15:37:f2:
         2c:35:ed:ee:84:d3:e4:77:00:6b:49:67:ee:8e:cd:67:ad:c4:
         06:cf:4f:e4:ed:ab:67:d8:55:70:55:0e:9f:45:c5:d5:27:0a:
         18:00:43:06:c6:35:02:52:ee:43:b4:66:28:43:28:78:8b:be:
         42:14:0a:a6:1c:3a:dc:15:22:43:ae:eb:1b:35:63:5f:d2:11:
         5b:29:cd:93:a6:fd:57:c9:c4:93:c2:8f:1c:5b:32:d6:43:4b:
         2a:98:77:9e:18:b4:2f:51:6a:e5:69:50:92:a7:13:3b:e8:f4:
         1c:35:39:bf:be:3f:45:d8:fa:a4:c7:a5:2f:e6:d3:4d:8c:29:
         23:61:13:19:eb:ec:a3:4a:67:a6:7d:5f:02:45:ea:65:53:54:
         48:b1:38:61:f2:24:24:e9:19:c4:11:22:ae:51:84:b5:44:38:
         bf:32:a8:22:cb:0f:b6:64:d2:5b:0b:3c:7c:3e:10:a3:d9:cc:
         8b:6b:9f:cc:1a:26:bc:8e:26:c5:a4:d0:0e:1a:7d:87:9b:29:
         0e:32:85:e3:1a:c2:56:2d:2c:c2:a2:f4:fe:54:7b:a0:25:bc:
         d7:52:24:bc:63:82:98:6a:76:6f:6f:23:76:91:e1:25:96:b7:
         f3:65:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:22 2024 by rpki-client on console-fra.rpki-client.org