Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
File:                     V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft (raw, json)
Hash identifier:          4HquK2eUKZugbJ20Drms5l52GOIP5R2WmCPc72A+5pc=
Subject key identifier:   F7:D2:58:D5:B3:EC:8C:E5:15:88:47:F7:5A:4D:AC:A7:63:AE:D3:50
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Certificate issuer:       /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial:       019049B113E54E26A7A025080D5CAFE6B407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
Manifest number:          11E3
Signing time:             Mon 24 Jun 2024 10:01:00 +0000
Manifest this update:     Mon 24 Jun 2024 10:01:00 +0000
Manifest next update:     Tue 25 Jun 2024 10:01:00 +0000
Files and hashes:         1: 7Rnh-xmbSlAGOkM1Lqaq4s7glik.roa (hash: 3fPpR8bmUWPOz0bzJPetMpM3hqHnfehge2BXqtjvTvY=)
                          2: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl (hash: 0PmKpkhIkegiiH2N0VF2KNrBtSIt9QC48oARXrlcJKk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:b1:13:e5:4e:26:a7:a0:25:08:0d:5c:af:e6:b4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
        Validity
            Not Before: Jun 24 10:01:00 2024 GMT
            Not After : Jun 25 10:01:00 2024 GMT
        Subject: CN=f7d258d5b3ec8ce5158847f75a4daca763aed350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:77:58:db:76:29:16:55:87:58:08:41:0a:
                    f1:16:b4:82:ae:72:77:5c:c7:d4:ed:47:c3:2e:99:
                    c3:b4:5b:eb:df:34:d4:27:97:c8:33:46:4e:65:dd:
                    98:14:fa:57:63:d8:ed:c2:80:56:0a:ee:8c:0a:f5:
                    2e:07:6e:06:7a:e5:69:c6:13:5e:e7:1f:f2:7c:be:
                    03:df:3c:e0:7c:29:19:ca:e8:3f:9f:41:a3:28:6f:
                    75:b6:f8:05:bc:7b:80:ba:20:1d:c7:eb:d2:50:df:
                    68:30:9b:db:74:95:c7:af:4e:c5:87:85:e7:0d:cf:
                    09:c3:71:09:86:91:fe:6c:34:48:5b:d3:a0:d0:0c:
                    3b:4e:24:1a:ec:3e:4f:ea:2e:80:e9:55:e7:98:1c:
                    45:0f:fe:88:d9:d4:55:e6:95:b6:9d:f0:eb:87:a4:
                    2d:75:9b:06:cb:52:b6:06:62:eb:32:4e:a5:36:4f:
                    92:46:d5:16:e4:51:33:85:c9:d4:d7:13:79:fd:d8:
                    b8:40:04:8b:2c:51:5c:80:85:5e:fd:de:b7:70:1e:
                    83:b0:9c:28:bc:03:2e:fd:f6:8f:ce:34:35:fa:db:
                    db:ff:38:3a:95:f2:6c:f3:b4:c8:ad:2b:75:e5:8e:
                    1d:aa:45:2e:35:b0:15:ce:47:f0:57:c7:79:99:5d:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D2:58:D5:B3:EC:8C:E5:15:88:47:F7:5A:4D:AC:A7:63:AE:D3:50
            X509v3 Authority Key Identifier:
                keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ff:4b:8e:70:3a:7c:cf:23:dc:2b:a3:1c:8e:88:24:ea:11:
         e5:9c:d7:8a:4f:9c:be:6b:be:8e:5a:df:8a:33:b9:cd:c1:04:
         d9:06:d4:f7:e3:db:02:9f:bd:26:14:77:87:96:48:42:5d:7f:
         23:82:9c:7a:df:93:23:06:d8:e5:6b:21:81:ef:d0:80:25:1b:
         39:47:88:40:8e:13:05:8b:45:5f:ef:00:37:e1:59:3f:c3:e8:
         a9:59:e7:88:cc:34:4a:d8:f0:ae:70:42:6a:ad:ad:92:32:e0:
         e9:88:b3:68:f1:2c:e0:49:1d:6d:13:6a:25:76:dd:96:8a:a3:
         6e:00:79:d7:37:1c:af:17:e4:1c:0f:f3:ee:06:f8:4d:de:84:
         2e:c2:8c:ac:33:af:88:fa:7c:1c:be:b7:ce:22:fd:b2:52:92:
         9f:47:98:cf:55:f8:df:e2:86:6f:cc:03:b0:92:2f:70:92:33:
         1f:44:36:1c:e7:8d:98:e8:83:67:7d:b1:fc:af:4f:ca:76:42:
         7d:e3:ab:4f:f5:97:1c:72:a1:29:dd:da:e8:33:00:71:97:ce:
         fc:d8:42:3d:98:5e:7e:e6:4e:e4:cc:c1:d3:70:20:4c:fc:97:
         ad:46:33:84:a5:d6:32:e5:8f:bc:87:d3:00:ab:90:47:3c:f8:
         08:a5:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:20:55 2024 by rpki-client on console-ams.rpki-client.org