Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.mft
File:                     kZ7tbww3AjTJJisfe0E4pgcXv7E.mft (raw, json)
Hash identifier:          CgamYOTrgaHSNac7W8Rh1GrIwzQt7Hsj0V1Kux1seZU=
Subject key identifier:   59:6B:3C:AC:21:68:BC:A5:31:1E:65:80:3A:F6:76:FB:ED:8D:EA:22
Authority key identifier: 91:9E:ED:6F:0C:37:02:34:C9:26:2B:1F:7B:41:38:A6:07:17:BF:B1
Certificate issuer:       /CN=919eed6f0c370234c9262b1f7b4138a60717bfb1
Certificate serial:       01903708774D841C8687AC0055383F2EB7F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.mft
Manifest number:          11D2
Signing time:             Thu 20 Jun 2024 19:03:40 +0000
Manifest this update:     Thu 20 Jun 2024 19:03:40 +0000
Manifest next update:     Fri 21 Jun 2024 19:03:40 +0000
Files and hashes:         1: cARcPGxCtlnc27yEHUmCYA9_tQ0.roa (hash: eK/oOswjetvbSv9fzqVCqZZS9qTtr+9TAXwhha87rkQ=)
                          2: kZ7tbww3AjTJJisfe0E4pgcXv7E.crl (hash: 8lu+swkgvpW2fuYF6i5eBR5gsteOiJuY1Fy4fKGsu0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:08:77:4d:84:1c:86:87:ac:00:55:38:3f:2e:b7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919eed6f0c370234c9262b1f7b4138a60717bfb1
        Validity
            Not Before: Jun 20 19:03:40 2024 GMT
            Not After : Jun 21 19:03:40 2024 GMT
        Subject: CN=596b3cac2168bca5311e65803af676fbed8dea22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cc:bf:29:65:18:50:6f:35:70:8b:dd:bc:ad:
                    d3:30:2d:a6:77:e2:24:d4:0c:fd:fc:d0:29:66:69:
                    1a:a7:8e:9f:0e:68:54:e5:c5:69:35:cf:95:af:b2:
                    29:8f:6d:d1:aa:6a:98:d7:6b:71:5d:fb:b8:71:97:
                    49:bd:60:e1:d5:08:49:ea:71:0e:dd:4d:59:35:dd:
                    fc:9a:96:73:10:f4:2d:0f:81:e4:e0:94:be:c3:43:
                    99:76:10:e7:3a:74:a2:0f:ed:82:24:ff:9f:92:fe:
                    8a:4c:2e:e5:03:66:6d:3d:c9:b6:be:77:86:a1:bf:
                    6a:2f:ae:09:ca:55:c5:40:05:11:e2:76:82:10:e3:
                    93:80:cb:83:f9:c8:48:cc:ae:33:1a:0a:fe:08:3a:
                    f6:0b:a8:22:0b:62:e2:82:10:f8:27:84:b6:fc:2b:
                    d2:cc:ee:ca:5f:39:43:5f:9b:16:86:69:b5:fb:25:
                    bd:76:3a:e3:00:51:92:4f:81:cb:bf:1c:ba:47:d2:
                    e8:95:b3:b9:02:09:24:02:8e:22:f9:8a:25:09:23:
                    55:4a:cb:05:c1:b2:ff:cd:b9:c0:f6:b4:ce:22:cd:
                    e0:ab:69:4b:77:2b:fa:8e:75:a1:c0:08:f0:69:cf:
                    48:4e:a5:ca:65:8a:76:3a:a3:e2:f0:3f:01:e3:16:
                    38:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6B:3C:AC:21:68:BC:A5:31:1E:65:80:3A:F6:76:FB:ED:8D:EA:22
            X509v3 Authority Key Identifier:
                keyid:91:9E:ED:6F:0C:37:02:34:C9:26:2B:1F:7B:41:38:A6:07:17:BF:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:39:96:cb:a6:a6:09:7e:86:33:7c:d2:e7:f9:8f:97:90:4d:
         09:a8:4f:3f:c9:7d:cd:90:6a:8b:01:dc:01:09:a1:4f:be:d9:
         70:4e:c4:0a:de:ef:d0:44:4f:f8:86:88:07:89:e6:e4:8d:da:
         2d:3a:e3:37:01:77:2d:56:de:a6:2c:bb:ea:96:34:1e:79:b5:
         1d:46:22:46:31:2e:8d:ef:b1:87:c7:37:8f:35:d7:24:6c:0c:
         89:80:0e:31:4e:1e:b8:8f:2e:73:a4:54:44:07:20:47:f8:e0:
         ee:a9:b4:8b:48:45:81:55:89:d0:2e:5a:a4:1e:cd:64:21:86:
         a8:9d:b2:26:06:d8:d5:21:13:08:64:36:ae:58:38:e6:fd:49:
         e8:06:4a:c9:5f:7d:27:30:82:fa:49:00:ec:1a:5d:71:60:46:
         af:9f:58:db:6c:a6:6f:87:ba:f0:b7:13:16:7a:1b:6d:2e:1a:
         49:4e:11:84:54:69:12:fe:5d:10:29:c2:78:15:c0:3e:bd:dc:
         b0:87:8f:29:3f:77:7d:2d:f1:c0:7c:91:8d:99:06:1d:14:8a:
         d4:ec:d3:3b:e0:ba:f0:94:be:24:7a:20:10:ec:e2:0b:f6:ee:
         b0:3d:e3:f0:3b:eb:85:4d:99:84:28:9b:4e:40:ba:ba:d6:d3:
         9c:38:07:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:38:31 2024 by rpki-client on console-ams.rpki-client.org