Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File:                     c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier:          WDJuoa+vOpPsZ5ACQ+a4LFG9U4sGVhqnQ0sQQwl1Tos=
Subject key identifier:   D7:EB:12:97:41:DE:53:67:F6:95:95:91:CD:5B:1E:EB:EE:21:6D:BB
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer:       /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial:       01901D45FE763D4AF8001EAD59CA90EFB77A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 19:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:44 +0000
Files and hashes:         1: 5_qwJVIKEoZBfmNd8yNldjKt-Bk.roa (hash: YUVbOQQYo+sRsBoWssz++DKM1ZS33QD4Je1OAjkA5xQ=)
                          2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: IWfJT6z8d11dTaQZ5BURjP7UNqMwO4Rn6RqNz1gjhZE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:fe:76:3d:4a:f8:00:1e:ad:59:ca:90:ef:b7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
        Validity
            Not Before: Jun 15 19:00:44 2024 GMT
            Not After : Jun 16 19:00:44 2024 GMT
        Subject: CN=d7eb129741de5367f6959591cd5b1eebee216dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2c:70:b5:b4:b0:ef:b3:fb:30:fc:c5:4c:71:
                    48:fb:89:d5:30:c7:0a:6c:c0:ca:b4:db:ce:f0:30:
                    37:a4:e7:87:32:46:25:14:3d:8b:83:7e:29:cf:b3:
                    93:7c:fb:5e:34:73:87:4b:f4:2c:5f:8f:54:97:79:
                    cd:40:c2:b2:15:cd:ad:87:d9:0e:3b:12:c3:18:bf:
                    ef:29:88:3b:61:7b:8e:e4:aa:cf:bd:a0:e2:1a:0a:
                    4c:cb:96:02:ec:bf:07:26:65:c9:45:25:4a:cf:37:
                    f1:0f:70:3c:0e:e7:d7:8a:98:6b:92:80:b1:29:26:
                    bd:c3:4f:93:e4:03:3d:5e:83:37:58:1b:b8:d1:49:
                    17:0c:8c:18:f8:7c:2b:f6:ae:2b:64:b6:d8:4f:09:
                    aa:d3:12:ca:a0:cf:8c:ba:06:17:2e:e9:d2:8e:bf:
                    c2:22:57:38:d5:66:d1:6e:a9:0d:a6:73:cb:23:27:
                    e4:c2:a4:fd:42:53:62:1f:45:80:b1:c1:a7:33:d8:
                    79:38:35:6e:31:1c:d5:ed:58:c7:f0:78:6e:ff:11:
                    42:da:75:38:c8:c3:d0:f7:50:bf:46:f1:52:0f:26:
                    fe:03:23:7b:c5:56:23:d7:59:21:ca:a2:4b:b4:1a:
                    9a:3c:57:8d:e9:6a:fc:4d:34:fa:87:d2:56:80:18:
                    16:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EB:12:97:41:DE:53:67:F6:95:95:91:CD:5B:1E:EB:EE:21:6D:BB
            X509v3 Authority Key Identifier:
                keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8e:63:42:43:1d:c5:9e:1e:ce:13:8b:8a:f9:54:0e:1f:c2:
         0a:5a:d4:4e:28:a1:ec:6b:ee:3c:b0:0d:b8:d9:8b:d3:b9:99:
         16:6b:bd:52:79:57:1d:50:22:18:8e:a7:b2:06:c4:10:b8:4a:
         63:b5:3c:c3:95:69:a5:ba:49:ea:d7:0f:b4:c0:2e:58:f0:99:
         44:cc:b0:7e:61:02:b0:10:81:3a:e1:96:a5:09:00:62:77:d5:
         d6:78:40:9e:37:5e:7a:e9:04:26:38:ee:6e:24:65:6a:a5:c7:
         be:42:55:30:83:ab:eb:71:c6:de:de:3b:34:8d:f4:e2:1d:01:
         df:c4:d1:fb:21:1c:2d:e5:0e:6c:ac:af:2f:bf:d7:34:5a:1a:
         6c:af:b3:ea:99:47:82:fc:5e:7f:db:3e:5a:ed:f1:d8:36:ff:
         11:d0:86:c5:ce:fe:d6:c8:1d:29:64:8a:24:07:e6:9a:bf:29:
         b3:b2:c5:03:c4:3e:47:ed:80:ba:e3:cc:5a:05:f0:be:1b:3b:
         6a:34:6c:a0:a1:18:05:53:bd:cc:44:45:5d:6a:b8:36:2e:78:
         24:50:84:ef:fd:72:83:b0:13:f3:4b:71:0c:05:49:18:98:20:
         41:00:e2:fa:24:e6:0b:25:a2:cf:52:0e:0f:88:37:bb:ba:34:
         ad:ec:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:15:05 2024 by rpki-client on console-ams.rpki-client.org