Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File:                     7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier:          j3GeUUacwLyNQczsZMGls2ww9zRYudMLNRBGGBJb1/k=
Subject key identifier:   10:35:6C:54:ED:36:85:13:8E:F3:ED:40:20:F7:1E:73:99:29:70:EC
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer:       /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial:       01901E901431A4EA12F7AB1589993A6BA116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 01:01:17 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:17 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:17 +0000
Files and hashes:         1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: EqHYaeyvJt7kXeUFElVTd14TUYS91z+0SlNT4jiqx6w=)
                          2: _uBzzwORVuYrYSJ2B-HfxV464S4.roa (hash: ZN/Ihj6eHDb6uyEl0aJrynaq5Jn7GtVHly0VjVZGtdc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:14:31:a4:ea:12:f7:ab:15:89:99:3a:6b:a1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
        Validity
            Not Before: Jun 16 01:01:17 2024 GMT
            Not After : Jun 17 01:01:17 2024 GMT
        Subject: CN=10356c54ed3685138ef3ed4020f71e73992970ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:da:50:4d:8a:b0:52:2a:55:fa:1b:fa:e6:
                    31:16:49:68:94:0a:78:78:ce:8c:17:dc:46:a9:33:
                    6a:da:57:74:3b:bd:34:52:b3:82:cf:3d:3d:13:e0:
                    d7:18:e6:23:d1:ac:6a:6c:e4:cc:bd:91:bf:2f:21:
                    41:68:50:e1:70:00:4d:95:92:97:73:b3:8c:b4:bb:
                    db:24:69:2e:18:78:ae:a5:fd:d2:27:3c:c5:59:15:
                    bf:8a:bf:fb:13:55:15:76:c8:c1:17:41:bd:bc:2c:
                    24:eb:82:d4:f9:6e:0f:17:7f:6c:b7:5a:51:2f:41:
                    bc:2e:97:b9:81:38:d2:9e:06:35:68:bb:77:4f:6b:
                    93:7e:2e:53:ed:74:12:61:73:54:36:d7:a5:fd:8d:
                    d9:63:29:a5:5f:36:67:97:ba:24:52:36:ef:51:26:
                    39:00:21:c1:4a:53:8b:81:24:40:13:3f:4f:19:e0:
                    f4:75:85:c2:71:b8:7c:e8:5e:d7:33:2e:77:ea:a4:
                    b8:04:a8:bd:12:6c:a2:2a:0b:87:11:ca:a4:5b:94:
                    2e:3a:46:8f:a9:09:77:2b:23:be:73:1b:a8:53:07:
                    ec:a5:10:41:91:86:35:be:13:eb:e4:b2:35:c8:d7:
                    10:30:86:2b:a6:8e:da:64:87:e1:e3:72:ac:dd:2d:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:35:6C:54:ED:36:85:13:8E:F3:ED:40:20:F7:1E:73:99:29:70:EC
            X509v3 Authority Key Identifier:
                keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f5:39:f1:7d:8c:24:5a:74:96:13:e7:5c:e6:35:ff:6c:c4:
         30:52:21:97:0a:d1:2c:02:98:51:6a:c0:fc:c8:bb:af:85:6a:
         e4:03:36:90:91:43:b7:41:cf:f8:cd:ad:92:1f:32:3d:90:9c:
         37:37:d2:70:2e:4a:1c:79:6a:db:14:03:cf:38:a1:69:22:53:
         ba:3f:5a:c9:f6:7a:a1:19:a1:25:4c:b5:e9:a3:3e:9b:6e:7c:
         dc:71:27:f6:8e:f2:dc:90:07:6d:59:54:c9:fb:65:c9:e8:6e:
         8d:14:5d:39:fb:3b:8e:25:f6:7e:64:40:0b:9a:41:a1:b6:c7:
         fc:a9:af:77:2b:ea:3a:c7:71:60:ab:41:a8:8a:70:f0:cd:c1:
         19:51:7e:a3:ad:1a:33:cd:4c:37:33:66:77:84:46:52:bb:73:
         15:0a:9e:ed:cf:26:e4:7d:69:c7:ac:48:ad:b8:da:9f:1c:4d:
         81:c8:65:30:00:9e:2c:17:07:92:a8:8d:88:6b:25:ce:c8:3f:
         a6:c2:17:d5:71:c1:c1:ed:8b:9e:09:4f:b3:a4:7e:97:f6:6e:
         8f:0b:ea:f0:70:58:32:2e:cb:13:db:64:09:14:8b:d2:9f:c6:
         19:ae:23:f0:f6:2b:d4:e1:c6:01:c2:fd:f1:64:d1:16:c3:1c:
         20:df:1c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:02 2024 by rpki-client on console-fra.rpki-client.org