Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
File:                     v7VI2FclEEUn875Hl2tnRzmuLxM.mft (raw, json)
Hash identifier:          7rD8oVJg4kfLZ2tL1GNm9xPtIHqFOXsLJY5MWO/fFsk=
Subject key identifier:   BC:FF:63:2F:B0:7E:B1:5B:42:5C:A2:12:5A:D7:65:4F:09:26:3F:52
Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
Certificate issuer:       /CN=bfb548d85725104527f3be47976b674739ae2f13
Certificate serial:       01901BFE11EFCFC35186D8A7AB8B4BD9A515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:02:33 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:33 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:33 +0000
Files and hashes:         1: ZSJIeCxiIA7ldoioEWRm452Qcms.roa (hash: bB1RTn6z/IStncKub4K9SUnV2tKMUrmrbcTqDBD+vIs=)
                          2: v7VI2FclEEUn875Hl2tnRzmuLxM.crl (hash: FxfTM/W4MxmZiqod7bmqsml6eIBfJOnEuheSAd7wilY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:11:ef:cf:c3:51:86:d8:a7:ab:8b:4b:d9:a5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13
        Validity
            Not Before: Jun 15 13:02:33 2024 GMT
            Not After : Jun 16 13:02:33 2024 GMT
        Subject: CN=bcff632fb07eb15b425ca2125ad7654f09263f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:0f:b0:61:e0:03:4b:9b:11:b1:df:9b:50:
                    5c:80:1a:3d:07:cd:3a:49:cf:c9:b9:ef:70:3f:2a:
                    78:82:6b:c4:bf:1a:06:8b:9e:6d:a7:bf:bd:31:f9:
                    38:1c:70:69:71:e6:24:36:2d:c8:7f:9f:6c:f4:ad:
                    bf:31:12:67:ef:cf:53:6a:6f:28:c5:7a:72:a0:10:
                    68:81:12:61:24:0e:af:1c:ab:6b:91:70:64:f4:2b:
                    79:b4:9a:2f:f8:77:87:ac:fc:46:2e:af:f9:d8:a1:
                    d4:4c:4a:89:a3:c7:7c:0f:a4:45:d9:85:23:76:a6:
                    63:3c:40:d4:37:41:35:44:b9:fc:dd:c6:1c:2f:95:
                    99:da:04:e7:9c:d0:e8:c6:3b:99:ab:36:78:08:03:
                    30:87:9d:db:6c:d7:62:66:dd:a6:38:8c:9d:73:30:
                    5b:5e:97:6a:13:59:95:8d:c3:be:5f:a2:ea:ef:2d:
                    a9:c6:2e:8a:33:6e:01:48:2a:c0:f4:d0:bd:25:b7:
                    75:9e:07:11:da:d4:f3:42:39:db:b7:60:be:7b:1d:
                    7f:73:86:97:dd:53:c3:b7:ae:a1:6e:9e:67:e9:37:
                    0c:dc:72:6f:87:ed:8c:b8:94:28:37:8a:98:58:62:
                    87:6b:df:52:fc:86:ab:7b:46:1a:26:85:49:e4:8a:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FF:63:2F:B0:7E:B1:5B:42:5C:A2:12:5A:D7:65:4F:09:26:3F:52
            X509v3 Authority Key Identifier:
                keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:b5:3b:ba:b3:62:76:5e:90:a2:9e:af:07:99:c9:38:fd:
         8e:35:5e:c2:cf:99:88:8b:0b:ff:45:65:dc:c6:05:a1:34:29:
         40:bd:82:a5:bf:1f:d9:a9:3b:8b:48:d2:bd:f0:82:6b:f5:77:
         32:92:ce:46:86:2f:fd:31:4b:84:21:a5:01:f6:45:aa:a9:23:
         4c:9a:37:b8:93:dd:09:24:5a:2a:1f:26:63:9e:ad:fa:6e:a9:
         4f:c8:f0:87:ce:f7:02:55:3f:64:51:91:a5:b6:bb:6e:be:ba:
         8f:8b:00:09:72:0b:11:d2:2b:e6:dd:14:a3:65:f0:f0:d9:43:
         3d:0c:5b:0f:ac:a1:0e:74:53:9a:a6:77:2e:4a:1a:36:6d:50:
         23:64:ae:df:aa:0a:56:04:37:d3:76:f3:ed:62:71:3d:ef:29:
         05:c2:e8:4c:e8:41:62:51:6b:ab:21:fa:69:69:ab:de:4c:c7:
         a4:4b:81:ee:e1:df:3a:4f:31:12:eb:02:2e:b0:e8:28:57:1f:
         e8:3e:a3:c0:f0:b9:6f:60:6d:a2:1d:c4:4c:45:a0:fb:bd:2d:
         c7:42:3c:ea:2d:42:1e:be:bb:f0:b9:61:c4:67:4e:04:b3:f1:
         24:94:ad:96:c7:9d:28:d9:71:89:8c:a1:db:88:39:25:ca:d6:
         57:46:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:34:11 2024 by rpki-client on console-fra.rpki-client.org