Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File:                     iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier:          1cDR1tGn7aW3O5mZcQFSKpxpCWF0OiHsz9/u6Y1GluM=
Subject key identifier:   41:E0:3E:DD:99:67:8D:CF:D1:7B:53:A8:4E:EF:19:94:97:27:DB:C1
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer:       /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial:       01901E592573611F1C3262F11C0C6F0B69FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 00:01:17 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:17 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:17 +0000
Files and hashes:         1: hApdaMK1vbsnIfDlL7P0Z5So3xM.roa (hash: MpxYH2itfVj+tT6LQe4Y8T05heBa3H/eLwtlxngJrVo=)
                          2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: T63y3ZV+JJnvyrcnffm6jxopcatUfJecjw6GStIkRZA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:25:73:61:1f:1c:32:62:f1:1c:0c:6f:0b:69:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
        Validity
            Not Before: Jun 16 00:01:17 2024 GMT
            Not After : Jun 17 00:01:17 2024 GMT
        Subject: CN=41e03edd99678dcfd17b53a84eef19949727dbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:32:f1:c6:76:fc:1e:a3:0f:3f:96:59:6b:
                    43:cb:c9:08:e5:4d:8c:e5:69:b0:80:e7:60:a7:7d:
                    fc:7e:7b:16:e8:66:8e:e0:e1:9b:54:a9:7e:3c:f4:
                    fd:0d:26:24:24:c2:5c:17:26:0d:81:bd:cc:27:8a:
                    f2:3b:67:f4:d1:89:e9:dc:58:1a:c5:a6:75:ab:46:
                    49:d9:c5:63:5a:4a:58:41:ed:07:3f:3a:51:91:12:
                    6f:87:8a:f4:8e:51:19:17:12:99:b2:7a:4d:8f:e3:
                    73:fa:68:97:7d:52:92:25:cf:c2:c4:53:69:3c:cb:
                    77:18:95:8d:f1:45:45:40:fd:ce:6f:2b:73:94:9c:
                    b1:c0:4f:04:03:2f:f0:7a:22:00:55:bd:a9:be:b3:
                    75:d7:ce:5a:f7:0a:3c:5b:fe:69:af:35:ad:75:dc:
                    46:e8:48:01:de:2b:f4:c4:c7:af:e6:ae:c5:ad:c4:
                    eb:f7:1e:29:11:24:6e:07:d8:b4:ed:9a:b4:a2:de:
                    32:87:88:f4:27:13:0e:24:4d:52:97:86:bf:ef:6b:
                    c2:01:55:dc:2b:f1:49:a3:d3:70:68:51:66:51:af:
                    46:66:24:15:f3:a7:a3:f2:02:81:14:fe:54:e2:3b:
                    2d:e3:8f:ff:0d:d3:9f:f4:b3:7a:7e:d8:f5:22:63:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E0:3E:DD:99:67:8D:CF:D1:7B:53:A8:4E:EF:19:94:97:27:DB:C1
            X509v3 Authority Key Identifier:
                keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4a:c4:71:7b:bc:88:4b:3e:08:c1:d7:95:f9:70:50:52:fb:
         2f:c8:33:a8:49:03:b9:0c:2f:26:12:29:80:77:4b:60:2c:d0:
         c5:67:6d:64:59:f5:4c:5c:ea:77:69:d8:1e:58:8c:43:bb:52:
         d4:b2:b1:74:ab:5e:e0:8f:87:0e:ae:cd:fd:68:b5:08:a3:12:
         1a:26:a0:64:13:bc:1b:d3:82:fb:83:36:e1:bb:f0:63:d9:57:
         14:a4:84:4b:f6:36:0b:21:f4:3b:b1:c9:b9:22:fd:72:a8:8d:
         37:c2:65:12:26:5a:7f:23:e3:61:fa:a9:5c:d6:0c:6c:cb:e5:
         24:b2:10:13:92:63:f8:34:c6:38:2c:66:4a:6b:ed:51:59:f4:
         cd:98:f6:8c:f2:09:c1:52:d4:c5:ab:1d:a4:db:21:b4:43:e6:
         dc:55:8e:cf:84:a8:24:95:61:6a:ea:4b:3f:4a:7c:05:40:3d:
         c0:4e:cd:59:64:76:a0:42:f3:7a:d5:d7:36:41:1e:d7:58:6a:
         73:6c:39:57:05:b7:7b:90:f4:50:aa:7c:3d:f8:e8:2d:1e:ca:
         f1:6d:80:63:b5:c8:08:88:92:53:2a:f3:c6:3a:da:6e:0f:19:
         a5:f7:7f:64:d4:a8:e6:1f:2c:39:3c:f6:46:d2:ec:cc:72:0c:
         6d:ce:5f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:43 2024 by rpki-client on console-fra.rpki-client.org