Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
File:                     lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json)
Hash identifier:          k2saVSkw7g80+IxgKnWEYefoABr0T36HM31bNVxsgDU=
Subject key identifier:   AA:51:1E:9A:8E:94:96:B9:BB:54:41:68:25:76:81:6A:49:6D:08:0A
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Certificate issuer:       /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial:       01901B20C3268ECEF5B9285B7F511B0373E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
Manifest number:          06B8
Signing time:             Sat 15 Jun 2024 09:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 09:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 09:00:49 +0000
Files and hashes:         1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: jPrMc0e7FM5zuMbRFgSzybZ6GGhOkB373hOpQFzHrPo=)
                          2: w5L3U8w9DvYrm3gKtN5L67YpgVk.roa (hash: 8gzrK7a9VY/OBNpk0fQ30Tn+mhFDwqK6C2GbbWrIGOQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:20:c3:26:8e:ce:f5:b9:28:5b:7f:51:1b:03:73:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
        Validity
            Not Before: Jun 15 09:00:49 2024 GMT
            Not After : Jun 16 09:00:49 2024 GMT
        Subject: CN=aa511e9a8e9496b9bb5441682576816a496d080a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:a5:e4:68:f7:43:c6:f8:7d:e0:d1:26:be:
                    ce:1d:53:f2:b2:36:4a:53:16:de:5f:b4:fc:12:98:
                    8e:9d:93:76:e7:33:1d:c1:52:e1:dd:91:22:31:79:
                    02:15:7f:82:74:b5:9a:af:7d:0f:4f:cb:51:f4:9f:
                    5c:d2:65:1f:cf:38:5e:c7:81:79:25:eb:07:8b:01:
                    ce:3d:51:7a:95:e3:63:f6:8c:a0:c0:93:24:61:66:
                    55:c3:b3:cb:dd:0a:f4:85:79:c3:cc:bd:d1:58:e9:
                    76:7f:a1:8e:9e:b6:e2:c1:7f:ad:05:70:77:bb:a1:
                    7a:93:08:e1:bd:93:85:5a:99:1f:99:f0:ff:1a:85:
                    30:71:71:52:87:2b:5a:30:4f:e0:a5:7a:83:d8:ae:
                    8f:eb:a6:56:1a:4a:46:29:35:06:65:f9:8a:38:9d:
                    19:a2:41:9b:c7:0f:36:03:6f:f8:70:01:1e:7f:72:
                    9a:56:3d:07:71:9d:e7:a7:e9:b5:dd:2f:7c:80:24:
                    68:02:4f:b9:d4:5e:2c:2f:e4:e0:1a:c4:91:48:03:
                    93:fc:dd:91:d9:36:63:76:be:c4:5b:69:23:db:59:
                    63:44:e1:64:13:14:4f:2b:11:09:53:87:02:42:e8:
                    7a:f8:2b:87:ed:4b:3b:db:85:d5:e5:6c:e9:b4:bc:
                    8c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:51:1E:9A:8E:94:96:B9:BB:54:41:68:25:76:81:6A:49:6D:08:0A
            X509v3 Authority Key Identifier:
                keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:f7:9f:de:03:b4:e6:e9:a8:58:02:cb:e5:ad:86:a4:da:
         d7:c4:02:2a:bc:ff:77:9c:16:27:6a:e9:1b:e1:36:30:45:a7:
         8e:30:cb:19:7e:bb:53:06:78:9c:51:cb:80:8e:19:d0:e2:05:
         86:13:02:06:c2:17:2a:ae:de:26:2e:02:47:d4:37:46:b4:4f:
         91:bd:7f:25:a1:89:18:28:d6:d4:57:bc:c6:59:a3:32:8e:ef:
         19:13:0b:1d:53:67:fb:46:0c:bc:3e:aa:74:fb:ab:2a:8f:00:
         d7:83:0f:e5:2c:78:ef:6d:80:90:4e:69:1c:9c:78:8d:79:a9:
         57:e7:1d:40:c6:4e:b3:42:5b:74:ee:70:bc:87:5e:a6:00:5d:
         ba:50:bb:07:89:56:ef:19:40:41:ba:8c:d8:27:f4:47:ca:c2:
         11:c0:4b:76:95:cf:3d:b3:a8:0b:e8:19:f9:b3:a1:62:ec:01:
         a4:a4:72:d2:14:39:61:85:47:1a:bc:d1:e0:15:e8:29:c4:3f:
         4d:75:69:cc:f7:02:9b:7c:af:b5:46:47:2d:b8:89:e6:46:d5:
         05:a8:12:41:47:8d:fa:00:5d:56:cb:1f:72:bf:fe:d1:83:ee:
         32:dd:7d:b7:00:73:d7:cc:9b:51:62:01:66:ed:bf:15:f4:ac:
         32:27:16:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:17:14 2024 by rpki-client on console-ams.rpki-client.org