Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File:                     7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier:          x98V7XLLurI3PYiqQKThVLwI65+hT+1OhQj0MsqCn7I=
Subject key identifier:   22:FC:56:07:A4:5F:10:6C:9F:8A:81:00:DC:63:99:4D:BB:97:DF:FE
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer:       /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial:       01903EC1EE51839B364CA603B39D12A4C4F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number:          0BFD
Signing time:             Sat 22 Jun 2024 07:03:34 +0000
Manifest this update:     Sat 22 Jun 2024 07:03:34 +0000
Manifest next update:     Sun 23 Jun 2024 07:03:34 +0000
Files and hashes:         1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: OpUs4e9w+LDwFdzQSAbOijFiNUYYU4GUiRMlj5ulrxg=)
                          2: Pz6HHWKbg2a-wZAZvOGHIaMZutw.roa (hash: sENOMg1urRUAQZXH8zHjSkiE1YP5j2Yf/PvcPcyx1bI=)
                          3: aA8U2cTpW7cOIbOkrvNKe_ulyjM.roa (hash: ysZ4cTSC1I7Z52C/XwFKnViVjeMXHOmrG6u2JxYh09k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:c1:ee:51:83:9b:36:4c:a6:03:b3:9d:12:a4:c4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
        Validity
            Not Before: Jun 22 07:03:34 2024 GMT
            Not After : Jun 23 07:03:34 2024 GMT
        Subject: CN=22fc5607a45f106c9f8a8100dc63994dbb97dffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:e6:1a:b3:a4:21:eb:2a:e8:c8:03:da:90:
                    47:80:80:54:72:7f:45:c8:0d:03:25:6e:1c:3c:df:
                    86:88:c0:06:e6:d4:e9:47:dd:ac:eb:74:f5:ac:06:
                    e4:cf:c8:4f:a7:e5:97:1b:2f:4b:08:df:cc:6f:a5:
                    cc:30:9c:91:e5:49:81:2a:07:3f:b8:e1:d3:8c:37:
                    00:4c:db:9b:c7:68:bb:a4:cb:36:1c:5d:55:ed:ce:
                    c0:b9:01:fc:f5:4e:52:26:2b:6b:de:cf:73:12:c3:
                    af:f0:85:11:8d:c7:c7:fb:b5:ef:eb:95:ba:2f:0a:
                    8b:d3:59:27:66:be:45:d1:0c:c0:5b:71:f3:a3:b8:
                    5a:36:40:66:40:f7:aa:39:e8:14:91:60:ac:b6:7b:
                    4e:dc:63:dc:7c:0f:39:24:3f:0c:a3:e9:03:24:ac:
                    2b:94:69:8e:50:a5:12:b3:10:48:b6:a8:1a:48:8e:
                    1b:4d:52:d5:46:90:8e:ae:89:25:d1:f1:ac:54:7c:
                    83:f1:b5:a7:6f:9a:67:e2:74:14:d7:a1:af:b7:42:
                    96:a0:d3:1f:8e:2c:ac:60:40:b1:fd:9d:f9:90:c0:
                    7f:0d:85:23:e2:1c:5e:66:55:91:aa:73:ad:26:9a:
                    a1:00:75:e0:2f:df:45:87:cb:c2:d6:db:78:12:51:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FC:56:07:A4:5F:10:6C:9F:8A:81:00:DC:63:99:4D:BB:97:DF:FE
            X509v3 Authority Key Identifier:
                keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6f:e9:94:51:8c:c1:02:22:11:39:25:81:7e:58:6c:53:76:
         b8:4e:c3:14:0f:60:32:c8:ca:44:22:ff:f9:bd:b1:63:78:4a:
         7f:1c:b5:86:82:14:20:7d:66:a8:a8:ec:a3:a1:ef:92:f9:b3:
         7d:dc:59:f7:57:18:2a:5e:94:d6:0b:6e:2f:62:22:7c:9c:58:
         14:65:75:02:f9:ad:9f:85:17:55:73:45:50:90:aa:35:55:aa:
         f5:4f:05:70:67:82:05:81:fd:89:4b:0f:eb:52:b9:86:f2:6a:
         a2:55:86:89:32:34:a1:75:9e:30:17:84:39:ff:ff:f0:e7:05:
         81:dd:8f:bc:2c:aa:45:46:67:79:05:b0:83:e8:0e:27:1c:29:
         0b:ca:23:fb:43:fd:9f:24:b6:5a:55:98:90:51:c6:01:3c:49:
         cb:f6:dc:9e:09:b0:56:49:ed:95:ff:0d:76:7b:a0:26:d3:d3:
         98:34:41:3a:e0:8a:19:ea:b0:9a:46:0b:c9:90:88:89:26:3f:
         c3:ac:11:ff:2e:0b:31:bb:a9:55:a0:39:6e:f4:f5:77:ef:fe:
         fd:81:48:c9:6f:76:c7:63:a6:8a:30:f6:0f:50:aa:f4:f3:9b:
         7e:a6:f8:13:48:12:bf:f0:11:b8:74:11:0a:6f:d7:4c:60:f6:
         05:4b:9e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:47:57 2024 by rpki-client on console-ams.rpki-client.org