Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File:                     7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier:          vnZDsnIjPdj//zighkKQqbGqXY8Ls4rQhHivYATfPo4=
Subject key identifier:   69:9E:D4:86:AF:B0:C0:89:10:4B:C5:42:E0:46:59:FA:BE:49:1D:95
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer:       /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial:       01901D0F8561B4877AB5EAC28F55FD1F18D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number:          1157
Signing time:             Sat 15 Jun 2024 18:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:14 +0000
Files and hashes:         1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: mtdDeWUNoR7/V+bjkwJT5sZM8Yv9j62fH2/ALFwY7po=)
                          2: CoIXKGDTZzoh2Q-9NqJ9O2xH9F8.roa (hash: GLcd6+ApbVLDcQEBdZZ5I0x8Qjzla0qsnoQs+aN6ms8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:85:61:b4:87:7a:b5:ea:c2:8f:55:fd:1f:18:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
        Validity
            Not Before: Jun 15 18:01:14 2024 GMT
            Not After : Jun 16 18:01:14 2024 GMT
        Subject: CN=699ed486afb0c089104bc542e04659fabe491d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:76:f9:02:5e:eb:fa:d7:fc:ba:84:0a:75:
                    19:57:87:a8:f0:b4:d0:dd:c4:e0:13:f0:76:87:b1:
                    a4:e3:73:32:a1:1b:2f:06:65:b5:7e:35:a0:33:fb:
                    b2:d8:6f:2b:de:86:d4:9f:83:9c:a9:6a:47:fa:f1:
                    c2:64:83:1d:dc:17:ac:19:4a:c2:fb:96:4e:a4:f4:
                    5a:18:f1:37:fa:1b:60:44:77:2c:c5:96:51:3c:1e:
                    2b:14:cc:e4:6b:a0:8b:47:3c:ef:2d:2b:fb:7f:85:
                    07:94:8e:f1:9a:d2:6b:3d:92:b0:c9:8c:3d:1f:d7:
                    f9:ed:77:fb:57:63:73:5a:e1:71:b4:eb:9b:9f:a9:
                    87:59:7c:75:b4:b8:39:41:ad:ed:3b:36:cc:81:29:
                    7a:75:93:84:40:d0:d1:0c:6e:aa:ec:1e:b3:ec:19:
                    13:87:39:0d:ea:23:89:58:b7:c6:65:67:39:51:d5:
                    b7:21:04:23:9f:9e:8d:9f:f2:da:f0:b5:b4:27:99:
                    96:fb:46:01:53:0e:53:c5:cb:2a:c8:34:39:14:2c:
                    6d:a7:92:76:ed:ad:75:c2:f5:1a:69:3e:aa:1a:dc:
                    19:ba:fd:1e:ce:c3:2e:12:d0:fa:52:fc:2d:9e:aa:
                    83:65:4e:aa:ad:1c:97:d5:c5:8c:3a:1e:9b:b9:24:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9E:D4:86:AF:B0:C0:89:10:4B:C5:42:E0:46:59:FA:BE:49:1D:95
            X509v3 Authority Key Identifier:
                keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ac:d3:e0:ed:5e:b5:0c:ea:63:f5:bb:2d:d7:b2:70:ab:99:
         f4:fe:c2:37:a2:ad:d8:98:2d:c9:17:46:89:0a:2f:d5:a9:9e:
         90:9f:82:a0:8d:54:06:c2:16:1e:b2:d7:b6:35:35:92:1e:15:
         c0:8e:be:00:06:08:9c:df:d3:03:55:63:b6:7b:3e:a4:98:11:
         ef:3e:da:87:43:50:6e:7c:48:9a:f4:17:b5:0e:ef:1b:35:24:
         7d:b4:a3:b0:d9:56:34:28:d7:cb:f6:63:bc:a7:0a:f1:69:68:
         f5:fa:9d:59:eb:88:30:e5:61:15:d5:bd:8b:cc:c9:f5:4a:4b:
         69:32:47:13:e1:d6:01:9a:13:cf:e0:fc:a0:37:25:ae:1d:19:
         55:bd:41:c9:bf:b8:fe:4a:50:fa:d9:d2:95:2a:62:f2:f4:66:
         a5:24:ce:1c:02:07:d8:7a:fc:9b:0f:95:6d:72:79:ea:61:9d:
         48:2a:6d:12:18:e5:44:a0:09:3e:a3:b5:2b:10:21:29:ba:9e:
         9b:a6:aa:7e:c0:f3:6a:78:30:93:65:c8:08:71:de:04:c5:43:
         d9:50:99:21:b2:90:2f:e7:c4:2d:14:61:21:fa:13:39:c0:98:
         fe:db:8d:16:15:55:c2:d0:f8:ea:fc:b8:0f:ba:6a:b4:dd:56:
         da:cd:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:12:52 2024 by rpki-client on console-ams.rpki-client.org