Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
File:                     0_wrb9dUv48iTSicz2XDjewnKz0.mft (raw, json)
Hash identifier:          vVgHTEpG9i2lOgYFNI7EqGGZifAfTSKnSGmnDyii48Y=
Subject key identifier:   EF:64:67:48:1C:EA:0C:76:94:E5:20:6C:68:52:80:9B:C5:F3:59:C3
Authority key identifier: D3:FC:2B:6F:D7:54:BF:8F:22:4D:28:9C:CF:65:C3:8D:EC:27:2B:3D
Certificate issuer:       /CN=d3fc2b6fd754bf8f224d289ccf65c38dec272b3d
Certificate serial:       01903AE341688F33DBAB4D07C6144CD05311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_wrb9dUv48iTSicz2XDjewnKz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
Manifest number:          017D
Signing time:             Fri 21 Jun 2024 13:01:30 +0000
Manifest this update:     Fri 21 Jun 2024 13:01:30 +0000
Manifest next update:     Sat 22 Jun 2024 13:01:30 +0000
Files and hashes:         1: 0_wrb9dUv48iTSicz2XDjewnKz0.crl (hash: e3Rethedxnt001mCoyyXirPkB0MQYIvGAegd+dExnfI=)
                          2: JXA1xtoeSmUMJXek7H5hk0VQusg.roa (hash: dYavNU4PJm6hfeeA84nQQWVgkaFfH5jkV6JuX0mfH0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_wrb9dUv48iTSicz2XDjewnKz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e3:41:68:8f:33:db:ab:4d:07:c6:14:4c:d0:53:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3fc2b6fd754bf8f224d289ccf65c38dec272b3d
        Validity
            Not Before: Jun 21 13:01:30 2024 GMT
            Not After : Jun 22 13:01:30 2024 GMT
        Subject: CN=ef6467481cea0c7694e5206c6852809bc5f359c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:18:dc:34:47:7b:10:4b:79:87:cf:1e:0f:
                    1a:e3:30:f3:18:14:1b:8f:ae:1d:ef:27:02:65:36:
                    93:43:3e:b0:72:da:f1:e4:5d:e5:21:1e:e1:5f:1e:
                    a0:78:95:86:c1:17:5d:06:c9:bb:ee:bf:f0:9a:eb:
                    17:72:9a:85:92:58:f7:1a:16:f7:f0:53:a9:16:74:
                    d1:b8:7d:63:ad:1f:0b:41:28:93:a5:5a:29:2c:1a:
                    08:40:30:69:90:c7:bf:d2:76:e1:48:97:18:bc:47:
                    d0:33:f3:04:48:32:fe:88:2b:20:7f:f9:08:3e:dc:
                    c1:e4:48:ce:7a:8a:04:55:68:86:62:4b:0a:ee:27:
                    6c:45:7c:99:55:78:99:40:03:81:f0:0f:13:63:1b:
                    05:c8:d6:b3:d6:b4:e6:48:e8:c3:aa:9a:8c:76:e7:
                    11:d4:ed:d0:c0:13:72:92:8e:a4:bd:ef:0b:db:85:
                    f0:a4:bf:aa:22:37:9e:48:75:55:d4:4b:26:ca:ee:
                    5d:95:cd:d9:62:a0:e5:df:ed:92:bc:b4:5e:c9:6c:
                    2e:bd:44:3d:20:5c:74:1a:9e:7e:25:35:0a:b7:7d:
                    1e:b5:95:3e:14:2d:27:4b:85:86:44:0d:89:b3:97:
                    fc:10:b1:31:31:0e:a0:c8:48:40:fb:0c:dd:5d:08:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:67:48:1C:EA:0C:76:94:E5:20:6C:68:52:80:9B:C5:F3:59:C3
            X509v3 Authority Key Identifier:
                keyid:D3:FC:2B:6F:D7:54:BF:8F:22:4D:28:9C:CF:65:C3:8D:EC:27:2B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_wrb9dUv48iTSicz2XDjewnKz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ce7de3-be30-418f-b965-c696a7b7fc57/1/0_wrb9dUv48iTSicz2XDjewnKz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f6:af:ba:4f:98:09:a1:16:eb:fe:bf:f8:c8:9d:c0:4f:34:
         1e:21:d4:f5:8b:2f:a5:43:6d:29:2f:d9:aa:48:97:8b:62:05:
         e2:1d:80:89:6f:f5:7b:21:9c:77:ab:17:e6:f0:ae:bb:4c:71:
         20:f0:ec:c1:d3:5b:60:b0:ac:47:8e:db:b0:49:c7:b4:97:23:
         c5:54:46:3c:c5:60:94:55:12:b0:da:7b:fd:2b:03:9f:85:5f:
         40:8d:50:89:c9:b7:2e:b0:48:60:5a:c6:05:9c:e3:fb:1b:21:
         fa:b0:9a:b8:55:65:3a:06:a1:56:c5:a6:11:49:92:e5:33:5f:
         34:c8:86:e2:7a:ef:b3:2f:a0:51:b8:69:5c:14:39:d6:f3:7d:
         7d:1b:1b:a7:bd:12:d5:76:b0:f2:c1:98:f9:ff:bc:05:96:40:
         4d:0c:30:9b:16:a9:b4:af:88:62:ce:8a:ee:7e:d7:21:a9:fc:
         95:fd:9d:96:8c:e2:3b:60:94:fb:06:27:b5:74:dd:45:0e:45:
         67:44:c7:4d:61:b0:29:da:80:94:be:d2:90:bd:7b:0f:12:1f:
         e8:7e:09:40:f5:5b:bc:fb:dc:3b:70:c3:55:0c:35:5e:78:db:
         19:8f:f4:0c:47:c8:d2:cd:8e:64:9f:46:15:23:f8:bb:59:bf:
         55:fa:27:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:47:32 2024 by rpki-client on console-fra.rpki-client.org