Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
File:                     quE1bmQEwLcC1bOBOpNENarsDJg.mft (raw, json)
Hash identifier:          rZTkoeFMT8koSQuYLUYau5b4dr7IcRuS9OmY2MssmrI=
Subject key identifier:   38:0A:B0:E5:28:41:ED:98:BC:A2:12:42:BD:44:B0:3D:03:6D:7C:03
Authority key identifier: AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
Certificate issuer:       /CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Certificate serial:       01903EC07F981501C1F956DC265DAFDFFA65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
Manifest number:          11D7
Signing time:             Sat 22 Jun 2024 07:02:01 +0000
Manifest this update:     Sat 22 Jun 2024 07:02:01 +0000
Manifest next update:     Sun 23 Jun 2024 07:02:01 +0000
Files and hashes:         1: TtwfYZYt7LYrEn_dxZG2475WthU.roa (hash: XPijg2BBH70WPMHdGyARpwoymri8xCEWa+sdXa+j+pI=)
                          2: quE1bmQEwLcC1bOBOpNENarsDJg.crl (hash: +K+gg5y+ssq1j6VD+JtsFdtUI76+RtOdBndRcId23AE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:c0:7f:98:15:01:c1:f9:56:dc:26:5d:af:df:fa:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae1356e6404c0b702d5b3813a934435aaec0c98
        Validity
            Not Before: Jun 22 07:02:01 2024 GMT
            Not After : Jun 23 07:02:01 2024 GMT
        Subject: CN=380ab0e52841ed98bca21242bd44b03d036d7c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:b5:9e:c8:20:2c:b5:ff:8d:fc:9f:04:6e:
                    97:41:65:05:56:67:a0:50:bf:12:0d:51:e3:c6:00:
                    10:f4:e9:19:e8:fd:1e:1f:60:53:9f:db:f4:13:08:
                    65:06:cf:05:69:08:9c:ea:d7:48:3e:7a:86:66:ba:
                    ed:c7:a0:76:fb:f4:95:40:bd:fe:3b:08:cd:84:26:
                    c3:22:8b:a0:3c:aa:5e:54:7e:cc:b7:33:89:73:0e:
                    8a:6c:9d:98:2b:84:ca:8d:9b:9c:97:8f:f6:fa:bc:
                    bf:e1:d2:e6:45:72:6c:be:3b:7b:4e:d0:bc:26:25:
                    25:58:27:a1:d9:06:f7:41:7b:8c:57:31:ce:ae:0d:
                    27:9e:3a:96:58:12:9c:c0:56:47:f2:7a:ee:8f:af:
                    f7:86:98:ec:ad:b1:7f:b4:e3:ef:22:d9:70:05:98:
                    ce:17:d2:56:3d:9a:5e:0b:ce:fb:33:d4:3a:17:41:
                    5b:39:7d:a2:a9:59:65:fa:02:82:c2:d0:f3:f8:0a:
                    74:73:9a:16:32:c9:dd:c6:f5:24:42:e6:db:45:2f:
                    89:dd:e2:f4:cd:9c:c0:77:03:00:1f:c0:9f:9b:2c:
                    f9:27:9a:12:c2:d7:93:a9:0b:ae:a9:7e:27:28:bb:
                    24:2e:d1:72:e5:61:cf:48:be:4e:6c:1f:e6:d8:f0:
                    e9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0A:B0:E5:28:41:ED:98:BC:A2:12:42:BD:44:B0:3D:03:6D:7C:03
            X509v3 Authority Key Identifier:
                keyid:AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:c8:6a:10:63:99:08:85:e2:75:61:66:3a:d6:a7:f5:a7:
         a7:26:ca:49:6c:b0:15:58:f8:f2:e7:37:f9:09:51:3a:80:08:
         55:de:78:87:af:c8:d8:45:8d:79:7e:20:fb:59:5e:00:1a:66:
         a5:c0:8b:e8:25:bd:56:0d:fc:ff:21:4d:04:8d:61:68:84:5c:
         b0:61:99:85:f0:63:85:c0:44:cd:bc:49:f4:2a:7f:26:b9:06:
         c3:dd:ce:fa:c0:9f:44:7b:d6:c3:2c:61:5f:12:2e:a3:13:23:
         b7:c6:70:df:3c:ab:98:87:19:48:b1:ca:a7:c2:12:e5:50:6b:
         26:43:00:0b:45:80:f3:ab:ae:cc:03:87:2e:5f:71:b8:22:d7:
         1e:43:59:7c:49:35:bc:0a:89:1e:89:c4:f8:cc:6e:61:5a:b2:
         74:25:af:2b:7f:7d:74:ea:08:92:54:9b:46:60:76:de:75:7c:
         0b:25:c8:b8:af:45:19:25:56:43:aa:6d:b9:1a:23:5f:ae:73:
         a5:2a:13:e9:86:8a:cc:51:66:c5:69:50:b2:10:7d:5f:c7:72:
         5d:82:9f:5b:b8:14:59:05:c3:16:f7:c4:2d:62:86:cf:fb:6f:
         77:25:85:9d:3e:b3:1f:5b:2a:2f:f0:81:87:af:1c:c0:bd:73:
         63:d7:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:59:36 2024 by rpki-client on console-ams.rpki-client.org