Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File:                     RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier:          3b9ZXPUpPWInYP4N44O8oAq2CTpRHGj4vBd5P+aJqmc=
Subject key identifier:   4B:88:F6:12:CE:AE:C2:BB:F1:72:69:F0:33:3B:71:31:80:36:99:1C
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer:       /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial:       01901D45FB0177923DB491EB0423BB8D17A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 19:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:43 +0000
Files and hashes:         1: KXFcL43HYalSbX-PesxVKAgHl-0.roa (hash: 52MQye4EhqReIoAkom+SXe691vHyhnUo+ipW2W1C/vI=)
                          2: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: hp9e+iN2GGbIvdQB9VUQc8RhWAoVfbdYY8AJnwByPSs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:fb:01:77:92:3d:b4:91:eb:04:23:bb:8d:17:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
        Validity
            Not Before: Jun 15 19:00:43 2024 GMT
            Not After : Jun 16 19:00:43 2024 GMT
        Subject: CN=4b88f612ceaec2bbf17269f0333b71318036991c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:68:3c:a3:fd:20:1f:5e:43:38:80:33:d1:c0:
                    c8:27:4e:e1:60:6f:ff:3e:99:c8:ce:6d:57:fb:04:
                    be:63:44:08:28:3d:9d:da:6a:0a:37:7e:e1:03:36:
                    ea:f3:0b:4b:a2:ec:81:18:97:b5:ca:80:84:99:f3:
                    99:1e:29:58:13:ac:36:05:30:66:ed:dd:68:58:d8:
                    00:89:27:a6:f2:dc:21:ea:3a:62:ce:db:b0:9c:7d:
                    9f:e9:74:20:81:ba:3a:2d:4f:16:65:55:b1:d8:cb:
                    14:47:63:64:0f:a0:da:b2:d9:fc:fd:39:1e:2f:6c:
                    c3:2c:40:04:32:d8:f5:e3:e3:8f:52:b7:b3:93:c4:
                    8b:b2:fa:30:30:f1:a7:81:bb:ed:15:6b:f0:98:4a:
                    08:f6:c6:4e:b3:32:2a:eb:db:d0:fb:97:38:58:85:
                    a3:b6:91:49:55:a9:45:51:21:25:ff:95:9e:87:d1:
                    fc:3e:a0:2a:ff:62:d5:58:1c:22:a0:84:51:ee:28:
                    60:5b:a5:da:78:89:9d:c9:3c:6c:58:f7:59:f7:69:
                    2a:72:d1:2a:b9:d0:5d:a6:75:76:9b:ef:db:47:a9:
                    64:4e:38:61:54:24:98:14:39:7b:4c:4d:ae:28:a3:
                    52:2b:e4:e5:ea:97:1f:e0:03:65:5e:3c:94:f7:96:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:88:F6:12:CE:AE:C2:BB:F1:72:69:F0:33:3B:71:31:80:36:99:1C
            X509v3 Authority Key Identifier:
                keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:3f:f9:17:cd:fd:03:69:dd:8f:27:a7:a3:99:e4:5d:23:
         2a:42:35:9c:a3:b7:0a:86:29:47:ab:4b:ee:76:b1:43:7d:39:
         8d:4f:5a:55:c4:d0:46:fd:22:f8:32:31:c4:4f:31:df:87:ff:
         33:9d:9d:a4:a0:f2:3a:4a:07:69:0e:d9:d9:1f:60:c9:04:a1:
         76:56:c7:6c:1f:02:54:b3:f8:d7:ee:a8:af:eb:5c:19:a7:9a:
         71:e3:40:c3:f1:3d:8c:5f:92:a5:24:4f:77:5a:d0:5b:2f:f5:
         ec:a7:ed:24:99:fb:15:12:f5:65:79:c0:33:77:93:99:8d:ac:
         1e:67:87:ac:cf:f6:90:49:fd:a3:69:07:49:55:24:48:6a:da:
         0a:76:78:65:b7:a8:bb:f0:4f:17:2f:f6:56:0d:2f:81:13:a1:
         07:2f:3a:d0:a2:88:57:c7:15:09:b9:b8:4e:b7:b0:bf:4d:66:
         92:1e:2b:f0:ee:5e:18:2a:ba:d7:fa:90:12:84:db:07:d5:8f:
         bb:23:55:7d:82:41:6f:65:6f:9f:9a:7e:61:57:b4:0b:fb:08:
         f0:dc:1a:e2:ce:6f:1f:26:96:2f:f4:ec:2b:c1:c6:df:d5:39:
         28:32:57:e8:63:dd:60:bc:50:39:e5:77:86:ce:04:80:66:b1:
         be:96:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:34:32 2024 by rpki-client on console-fra.rpki-client.org