Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
File:                     q67fL4Eo9I64ETv69NZ9kBBJCTo.mft (raw, json)
Hash identifier:          rnwuEmSJUgNojPjYcvseyvB9z2/8VCoaUvADNnYULW8=
Subject key identifier:   64:66:FD:FE:22:37:92:AD:5C:D8:A9:60:FD:45:5D:09:68:05:F7:8E
Authority key identifier: AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
Certificate issuer:       /CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Certificate serial:       01901DED84C07F71EC5DD917876525B55E11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
Manifest number:          0311
Signing time:             Sat 15 Jun 2024 22:03:43 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:43 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:43 +0000
Files and hashes:         1: awRI-yZjhCrwkBxvflQ96py528I.roa (hash: NOcmotxNQ+7MKKVh76cnZHAYwH87rKrgslevl9MQndU=)
                          2: q67fL4Eo9I64ETv69NZ9kBBJCTo.crl (hash: m7YYHSEzBwSZdl8+AMijeVlK0UBwD6yVsx2zNpawgIM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:84:c0:7f:71:ec:5d:d9:17:87:65:25:b5:5e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
        Validity
            Not Before: Jun 15 22:03:43 2024 GMT
            Not After : Jun 16 22:03:43 2024 GMT
        Subject: CN=6466fdfe223792ad5cd8a960fd455d096805f78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:e0:1e:ff:ee:e1:9b:42:04:0c:6b:49:1a:
                    94:07:5d:cc:85:91:43:1e:55:b1:7e:5b:32:b0:af:
                    9e:7e:c1:1f:ba:ce:10:89:50:f4:af:75:b5:13:b0:
                    30:4e:4f:0c:fa:2f:ab:48:0f:46:24:d6:5e:b7:8b:
                    e4:c9:77:24:e0:45:6c:be:99:26:ae:c2:ac:9a:b9:
                    13:6d:16:e9:c8:42:1e:73:01:9c:eb:20:d8:ff:48:
                    d3:1e:c8:07:24:c8:f2:4d:6f:70:b1:30:93:d5:63:
                    9e:a3:eb:f7:ef:80:33:00:01:91:52:d5:95:31:66:
                    d5:de:56:67:82:ff:d6:4b:42:f2:e0:49:e5:cd:02:
                    a6:2a:1a:f4:0a:24:bf:3f:6f:0d:3e:4e:e4:f6:f4:
                    2e:3e:d2:3a:e7:1b:75:d3:01:fb:a4:08:28:20:0c:
                    e4:31:ca:fb:ce:04:2f:a7:d4:50:82:10:e1:80:c6:
                    39:19:d9:61:9e:68:1d:69:1f:36:5d:29:cb:31:ec:
                    9e:e3:9d:db:ef:1f:18:aa:da:6a:89:10:08:e4:4d:
                    f9:16:b3:9e:15:c5:52:d5:d3:0e:8c:4b:e0:c5:dc:
                    51:2b:d7:3f:81:cd:4c:1c:dc:5f:19:d3:6b:ca:f5:
                    4f:c3:06:43:0d:fe:b5:75:9c:77:6e:e6:7c:f0:ff:
                    4b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:66:FD:FE:22:37:92:AD:5C:D8:A9:60:FD:45:5D:09:68:05:F7:8E
            X509v3 Authority Key Identifier:
                keyid:AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:1d:b7:04:07:81:72:72:81:6a:b8:18:21:3e:d2:1d:9c:02:
         fd:b7:c3:a0:e9:ac:d1:a4:e9:fd:63:de:b9:81:eb:ca:0d:3a:
         4d:75:7d:02:05:08:02:58:33:9e:90:0e:b8:b0:f8:97:c6:3f:
         6e:4b:07:ac:f2:b8:c1:21:05:a7:b2:9b:8a:df:a6:dd:b1:f7:
         3b:19:06:ba:e7:38:83:a8:64:75:30:14:aa:c9:f2:80:c1:b1:
         14:ae:c8:7d:f6:8f:e7:eb:05:88:4b:81:25:c4:10:db:f2:fc:
         5b:12:ea:3e:99:39:53:54:9b:0f:a6:97:b3:0f:64:e9:9d:99:
         5a:3c:cd:10:f5:28:eb:86:cb:59:57:85:6e:a2:57:af:7c:08:
         e6:73:c8:d2:c5:c5:3f:58:a0:d4:3c:98:3e:fb:07:78:ed:b9:
         ea:9a:8f:7a:d5:db:bb:9f:9b:5a:45:ed:d4:77:aa:7d:9e:c3:
         20:4f:1e:23:09:b6:c7:a3:4a:af:a8:64:e3:69:ac:af:eb:71:
         8f:67:70:97:85:9d:d8:4b:82:03:60:39:27:e8:b3:48:02:98:
         03:ef:4a:f7:3f:b4:d2:26:ba:7b:66:4f:1e:ff:36:f7:7a:32:
         a5:df:5a:b9:11:d3:33:cb:86:cc:10:20:6c:f2:bc:4c:05:c6:
         cb:bf:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:52:59 2024 by rpki-client on console-ams.rpki-client.org