Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File:                     iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier:          LrRbp9OKd43mnmZR5UN8r+X1w9ZjGZU6xIVM/33SSo8=
Subject key identifier:   E4:B6:1C:C1:0F:43:F3:27:02:CA:19:9F:51:F7:DA:E1:A6:CF:4F:AB
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer:       /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial:       019048D5277CA1C8402FCF705DC4926BA47E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number:          11DA
Signing time:             Mon 24 Jun 2024 06:00:47 +0000
Manifest this update:     Mon 24 Jun 2024 06:00:47 +0000
Manifest next update:     Tue 25 Jun 2024 06:00:47 +0000
Files and hashes:         1: hApdaMK1vbsnIfDlL7P0Z5So3xM.roa (hash: MpxYH2itfVj+tT6LQe4Y8T05heBa3H/eLwtlxngJrVo=)
                          2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: FSMQFqwHUkQV7TSA9EXzFt+tCeHXDoGvCgfY4a9YOmA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d5:27:7c:a1:c8:40:2f:cf:70:5d:c4:92:6b:a4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
        Validity
            Not Before: Jun 24 06:00:47 2024 GMT
            Not After : Jun 25 06:00:47 2024 GMT
        Subject: CN=e4b61cc10f43f32702ca199f51f7dae1a6cf4fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:10:ca:72:41:f5:1b:e8:06:3e:82:4b:6c:
                    39:d7:95:35:ed:b9:14:7c:69:45:df:77:35:ea:5f:
                    2a:86:84:f8:f4:6d:c6:28:5e:b3:de:14:b4:f4:17:
                    69:24:0c:1e:24:d3:0f:11:d0:90:5b:e0:6d:d2:a5:
                    4e:9f:1d:46:9f:54:8c:d9:df:c3:1b:e7:01:cd:a0:
                    7d:0e:8e:71:38:f6:80:fa:b5:23:df:6f:5f:d4:c8:
                    72:a3:4e:59:96:88:c2:73:9c:10:d1:00:0d:f3:25:
                    fb:ca:21:88:13:d4:e4:a3:08:9f:3e:99:46:4c:e1:
                    27:6d:dd:c4:53:2a:a8:cd:6f:15:d3:0f:f1:ce:88:
                    86:b3:d8:09:dd:9a:85:e4:ba:75:d2:4d:fa:0b:94:
                    1d:95:44:63:3f:30:52:67:7e:99:51:9c:5e:1a:39:
                    34:c6:8e:dd:17:44:2c:1a:48:61:0d:55:b8:bf:4a:
                    d8:da:87:ab:7f:92:b0:78:50:4c:1b:5d:b0:86:49:
                    1f:af:a9:a5:59:b6:07:77:92:22:ec:59:49:9b:b8:
                    23:3c:65:f7:6d:fa:de:8c:ec:55:39:c3:6b:c9:f9:
                    d4:4d:07:80:4f:19:44:1f:a5:f1:a4:99:50:05:aa:
                    46:90:83:80:2a:b7:26:05:8d:fd:21:24:01:53:20:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B6:1C:C1:0F:43:F3:27:02:CA:19:9F:51:F7:DA:E1:A6:CF:4F:AB
            X509v3 Authority Key Identifier:
                keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:ae:b0:ac:d1:ed:86:c3:86:52:cc:8f:35:73:c4:9f:9a:
         bf:24:50:4c:77:90:ec:77:a0:96:4c:c1:4f:80:04:85:58:13:
         05:08:33:3e:96:8f:db:33:2e:22:7b:08:03:ad:c0:bb:e0:13:
         8b:52:d4:c1:65:5a:db:89:5d:0d:0b:8f:cb:05:54:60:9c:3c:
         21:94:d3:8b:29:73:a5:c7:51:15:e6:31:bf:fd:80:5d:17:a0:
         30:7a:0f:09:e8:50:ae:2a:05:ed:56:32:4b:a3:bf:48:6a:15:
         23:01:b4:8b:5f:c4:99:cf:35:21:c6:2d:32:67:f0:8d:86:de:
         fe:ed:f8:f0:75:b2:be:3c:6c:de:54:d3:41:0f:a7:82:ae:42:
         eb:2e:1a:79:c7:6c:f3:8c:72:ab:35:7c:97:b3:a3:6a:9b:b2:
         54:e4:00:45:d0:39:e8:72:6b:45:c6:d9:3b:f0:5e:c3:6f:e8:
         3a:01:a0:46:f9:01:41:8f:d7:25:cc:4c:17:6b:46:78:3a:3f:
         fc:fe:63:bf:00:b5:7c:6c:31:4d:46:3d:e2:83:79:10:85:cb:
         fe:80:99:92:f9:52:4e:32:9e:7c:eb:3b:d2:68:11:00:27:ce:
         3d:33:51:e5:d6:ad:e2:58:57:48:e4:56:aa:92:93:ee:b7:e4:
         61:79:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:23:58 2024 by rpki-client on console-ams.rpki-client.org