Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File:                     47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier:          MUlYOLJuwtNFjTGEvq2JFBfZ8WXdeZL1eNNhGo67IZg=
Subject key identifier:   4D:AA:8C:7F:AA:56:2A:36:B2:3D:70:6C:00:98:7A:B3:43:26:45:D5
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer:       /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial:       01901CA1C97C94AE49A66048284A4A34808E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 16:01:23 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:23 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:23 +0000
Files and hashes:         1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: eMAiEOW5wtyRNHRY72kmRT9P0d2HGDfgAHedvcbpx5U=)
                          2: bhOZBycWb86UhLTISNKALRsPASk.roa (hash: qk2QiV8RRuDy2H1/H8sMhmIqNFJZXqQtQjU7qLMqJ/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:c9:7c:94:ae:49:a6:60:48:28:4a:4a:34:80:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
        Validity
            Not Before: Jun 15 16:01:23 2024 GMT
            Not After : Jun 16 16:01:23 2024 GMT
        Subject: CN=4daa8c7faa562a36b23d706c00987ab3432645d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:d9:9f:af:51:3f:c7:55:3d:1b:de:30:f3:
                    bb:3e:5b:fb:20:72:53:38:0b:86:8a:b1:7a:dc:ad:
                    49:ad:dc:e7:5c:5f:55:54:62:81:ed:48:2d:08:10:
                    ac:a3:dd:61:e6:a4:0a:c4:f6:61:47:b2:12:5a:06:
                    b7:82:c1:7f:fc:3b:f0:b6:31:3a:20:86:0e:ae:22:
                    e9:06:95:14:08:59:03:5d:d6:d5:b8:9c:ef:fa:11:
                    1a:ea:01:a2:72:65:e4:7e:9d:8b:cc:80:59:2e:8e:
                    26:ac:8b:b2:5f:49:93:4c:4b:53:c3:9f:aa:c6:64:
                    80:23:fe:e9:48:ee:e5:d2:a4:13:56:aa:98:3c:ac:
                    b4:fe:d8:61:5c:24:16:32:14:c4:53:4e:e2:ec:a6:
                    56:62:54:7f:cc:62:1a:6a:fb:a3:c5:ec:f7:11:0a:
                    85:f5:4d:16:c0:3c:f9:37:2f:9b:a0:af:48:23:6f:
                    c4:d0:19:b5:e3:73:d2:09:2a:bb:a2:c1:07:70:8d:
                    a5:16:a4:52:55:76:1a:53:cd:d2:04:07:86:2e:c3:
                    08:26:dd:cf:c0:a1:e5:9e:06:ac:12:22:2d:8c:fc:
                    98:3e:14:21:d2:89:24:0d:6a:44:77:b7:3d:a1:90:
                    a2:d3:cd:38:98:82:84:e5:f3:3a:f2:db:25:10:68:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AA:8C:7F:AA:56:2A:36:B2:3D:70:6C:00:98:7A:B3:43:26:45:D5
            X509v3 Authority Key Identifier:
                keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:9b:f9:b2:27:a7:b2:65:14:c1:ac:f2:af:f6:23:4d:80:
         ed:60:94:b8:ac:65:9e:e5:9d:e0:6c:bd:17:57:09:2c:b9:ff:
         a9:3d:86:73:f4:ea:80:27:12:a4:e2:96:8d:82:2f:3b:03:5c:
         19:8f:1a:f1:c5:5d:6b:e8:86:70:f5:f0:0d:83:58:65:c8:32:
         04:8a:b1:fd:1e:4a:d5:da:e8:0d:f3:50:96:6e:16:8e:c4:ad:
         f1:cf:a1:5e:e0:fc:e7:31:bd:66:de:c7:c1:a4:49:5d:5b:08:
         32:8f:03:0b:60:ea:48:52:7e:03:7a:30:cd:5f:48:65:88:c0:
         1f:d8:69:a0:05:27:43:d4:3e:ae:17:22:d6:8d:68:36:fd:94:
         ee:d2:b3:e1:99:7e:c8:03:fe:44:b7:3a:24:78:c5:51:bc:e7:
         d0:44:dd:5c:e9:23:56:e2:36:1b:a3:68:55:04:08:c6:47:5d:
         95:d8:7c:b5:e1:bf:e3:2d:4c:1a:cd:84:fa:1c:a3:f5:cd:e6:
         58:bf:69:eb:16:7d:ed:8f:c6:5e:da:64:20:e3:98:35:8d:3a:
         5b:46:ca:d4:6a:c5:e6:f4:51:a1:da:98:27:c6:f8:02:56:0d:
         17:2f:ba:3c:ec:b7:1d:45:ef:3a:58:ee:4b:1c:94:60:07:09:
         e4:a0:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:15:29 2024 by rpki-client on console-ams.rpki-client.org