Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.mft
File:                     7nIN_mcZck4jAQLjQlxsLfJH2Hk.mft (raw, json)
Hash identifier:          beAFXejsz9rrDwz+Uf+zRSiqtYH6/PxKWpU32gwqBqc=
Subject key identifier:   12:99:7E:E0:EB:23:24:6D:0D:9F:54:CC:DD:52:22:9E:95:D5:51:57
Authority key identifier: EE:72:0D:FE:67:19:72:4E:23:01:02:E3:42:5C:6C:2D:F2:47:D8:79
Certificate issuer:       /CN=ee720dfe6719724e230102e3425c6c2df247d879
Certificate serial:       01901D46A100141097F4483ABA8C3923EF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 19:01:26 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:26 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:26 +0000
Files and hashes:         1: 7nIN_mcZck4jAQLjQlxsLfJH2Hk.crl (hash: Ao/79NS1/IxFohx4ym5luAgX88tbH1VYQAvz5nnuyqY=)
                          2: n20HjTPK0kimfJ6cB3l0DDKhPyg.roa (hash: d1vxh4aKLboYSBlVSUjHNMBemMHAIXDVySUVCVyG7oo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:a1:00:14:10:97:f4:48:3a:ba:8c:39:23:ef:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee720dfe6719724e230102e3425c6c2df247d879
        Validity
            Not Before: Jun 15 19:01:26 2024 GMT
            Not After : Jun 16 19:01:26 2024 GMT
        Subject: CN=12997ee0eb23246d0d9f54ccdd52229e95d55157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:fa:7a:b7:c5:69:ed:4b:a9:d6:95:c9:79:
                    e1:ca:b0:aa:78:c4:b7:d1:76:80:0b:e3:e4:23:06:
                    22:43:51:fd:bf:f8:85:23:98:6b:21:cb:e5:57:0d:
                    73:b6:b9:7e:12:44:a7:18:cf:f6:44:1c:c5:16:60:
                    f2:60:a8:ad:2e:2e:c4:9e:a9:d3:ff:28:ff:7d:a7:
                    0b:4a:36:71:17:79:37:21:d2:26:2f:06:28:7b:91:
                    1a:ae:9a:56:9d:79:1d:92:8f:0b:b5:64:f1:53:79:
                    60:06:69:3d:bd:be:e7:c5:2c:6d:cb:88:58:a8:19:
                    28:c5:d8:a5:bc:27:e6:1d:d0:68:74:18:f3:c9:78:
                    2a:a2:6b:fe:ec:84:96:9d:2a:14:3c:c2:0f:ad:07:
                    cc:cd:61:cd:d6:98:7d:a9:a7:68:69:71:39:81:ba:
                    51:f8:cd:21:a5:cd:92:b0:20:04:c4:25:68:00:88:
                    ff:f4:a3:79:2c:42:40:7b:39:c9:ff:de:74:03:5a:
                    71:09:37:4f:5a:8f:59:32:7d:7a:91:d1:da:5c:23:
                    b3:7c:00:0f:89:75:2e:57:8a:dc:37:02:56:a4:ac:
                    42:74:2f:ad:e8:bc:75:c8:02:f8:78:d7:3d:fc:ed:
                    39:e2:9d:99:3c:51:a0:0f:f5:11:84:a4:b9:d7:50:
                    56:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:99:7E:E0:EB:23:24:6D:0D:9F:54:CC:DD:52:22:9E:95:D5:51:57
            X509v3 Authority Key Identifier:
                keyid:EE:72:0D:FE:67:19:72:4E:23:01:02:E3:42:5C:6C:2D:F2:47:D8:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:6b:9f:9c:02:0d:25:f8:e1:1c:d7:82:e6:57:3c:0b:62:
         d5:ec:19:3b:43:85:eb:27:64:1a:45:c1:bc:44:2f:fb:6a:ef:
         db:dc:ff:35:d3:e1:30:16:d8:6b:3c:ef:ea:bf:40:05:91:94:
         4a:35:3c:c2:35:69:9b:72:e1:d5:f8:19:9b:94:27:36:14:ed:
         78:0c:1f:cd:89:f1:89:a5:5a:05:f3:49:d8:75:67:66:b2:b6:
         57:fc:7b:86:e4:f2:7c:35:b8:f3:b1:85:e7:09:4b:b2:2d:78:
         d6:91:57:fb:1b:9e:c3:40:2e:d8:85:86:26:c9:85:aa:0c:3b:
         c5:c3:80:80:3e:af:2a:9e:34:fa:8e:d1:81:36:1c:73:77:9f:
         0b:8b:77:00:6c:e5:50:64:33:0e:8c:c1:25:27:c7:21:45:78:
         db:52:ad:ce:7c:a2:ad:31:2b:bb:aa:54:b7:31:83:53:eb:86:
         37:c0:ff:c4:6c:7b:ce:c2:ff:af:d0:ad:0f:cf:7b:e6:fe:69:
         0b:b5:10:0d:f0:dd:f4:15:1d:a0:1f:0b:63:c1:ed:c2:66:2c:
         bf:08:5f:21:22:9e:f4:83:29:91:74:97:ad:e2:65:59:a6:75:
         aa:94:64:67:80:c0:73:8a:a9:f0:b6:9b:43:25:f7:b3:1a:ee:
         81:34:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:19 2024 by rpki-client on console-fra.rpki-client.org