Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File:                     ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier:          QG10EIW3UeqDEGZpsnj3FTm+iZz8I4fQkNMp3MDbzTs=
Subject key identifier:   25:2B:B7:E9:BC:EB:12:81:EA:96:60:40:67:39:22:4A:81:34:98:07
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer:       /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial:       019040AED4F0ADDA2FE56F1E36893A2779AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number:          11D8
Signing time:             Sat 22 Jun 2024 16:01:57 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:57 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:57 +0000
Files and hashes:         1: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: 0XlrHTJ/9o68kj9aW/BnETQuDqVdLTM9FGOEM9yTYFA=)
                          2: rcZdY4ZOLZvFkWNmHGjDP5i3Zt0.roa (hash: yFY5uWsl1Oth6ywsZ0hzNsYdTzcn/saFlfJcgb7nAZc=)
                          3: sY4ycvj-54xq8txSNgqA7C8n0KU.roa (hash: bpR0PF4wOssKKTEVwub3A5orTtXl8Wy6E9kqfCokKOg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:d4:f0:ad:da:2f:e5:6f:1e:36:89:3a:27:79:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
        Validity
            Not Before: Jun 22 16:01:57 2024 GMT
            Not After : Jun 23 16:01:57 2024 GMT
        Subject: CN=252bb7e9bceb1281ea9660406739224a81349807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:33:79:03:1a:e5:a9:7d:81:e7:b4:10:5d:65:
                    09:e7:d7:af:a9:86:72:c2:a8:8a:71:fc:a4:75:58:
                    10:2c:79:31:f2:33:b3:8b:23:d8:23:ec:45:7a:ca:
                    32:e9:51:fe:8b:a1:2b:e8:0e:78:69:2c:2d:c0:79:
                    35:63:06:79:a4:17:e4:a2:d0:2f:bc:3f:9a:5e:81:
                    d6:d9:8a:66:51:90:b5:77:36:ef:28:6b:94:88:c8:
                    96:ed:d9:b4:b9:b7:07:28:8d:86:fb:b7:8e:01:e7:
                    72:79:f1:79:c5:9c:20:38:96:3f:e1:15:a9:5f:4f:
                    2a:10:1d:0c:44:58:c5:e3:d8:c3:8b:2e:f4:76:be:
                    ab:c8:22:89:1e:c7:e8:b7:3c:52:fe:df:ee:a6:8b:
                    34:72:61:5d:46:79:b7:07:40:e3:b4:e9:2a:ad:57:
                    49:f1:cc:20:ca:44:5f:93:ea:5a:fb:38:0f:27:ef:
                    df:91:68:d3:2f:e5:fb:17:68:47:dc:6a:c6:9d:3e:
                    7c:69:21:cf:6d:2d:82:a5:97:b5:e3:d0:f4:4f:d8:
                    85:43:bb:61:95:b6:4f:36:52:69:74:27:dc:75:4c:
                    73:69:99:d7:9d:bf:ca:05:3f:4d:23:6f:69:40:07:
                    2f:4c:90:f1:6c:3d:fc:8a:c6:6e:36:78:10:3e:01:
                    61:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2B:B7:E9:BC:EB:12:81:EA:96:60:40:67:39:22:4A:81:34:98:07
            X509v3 Authority Key Identifier:
                keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:43:c1:3b:cc:61:71:4e:15:ad:6b:7f:95:c0:2f:04:70:d9:
         ee:0d:cb:eb:4c:df:34:ab:84:cc:e1:3a:75:3c:0f:e5:cc:5d:
         d1:dd:82:b8:19:39:46:9e:da:35:25:fa:e2:6c:bf:a5:81:fc:
         aa:0b:3c:1c:d3:95:55:3a:aa:82:d6:dc:6d:2b:76:38:d5:b1:
         7a:7d:17:d2:22:61:81:cb:56:5e:91:27:78:fd:20:4f:2a:52:
         0f:e2:b6:82:1e:63:de:2b:49:a3:cc:dc:70:83:8d:43:99:ac:
         51:31:54:24:8c:68:9e:a5:44:1d:bd:09:43:cd:b6:79:21:58:
         6e:f6:2c:c3:64:a5:52:25:8d:79:ea:d8:6d:d8:a8:6e:da:28:
         59:e8:70:3e:dd:92:01:b4:7c:63:d7:39:ac:dc:2f:47:4e:80:
         5e:66:56:a2:67:e5:c7:ef:4a:d2:da:48:96:5e:35:bd:a2:d1:
         b3:d2:d4:be:92:db:fa:c3:04:07:84:b7:52:5b:82:4a:d1:69:
         b3:2a:5e:b0:32:80:cb:d4:86:28:50:a0:4a:f8:d7:a7:10:c8:
         3e:f0:b1:fa:2f:90:fd:be:7a:fd:e1:43:67:6a:09:43:87:bd:
         7a:51:ee:0e:51:7d:03:da:7c:5e:5e:2b:78:4d:e6:54:1c:8e:
         63:70:c0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:38:04 2024 by rpki-client on console-ams.rpki-client.org