Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.mft
File:                     E-t7ffg1sROrs_Ym9iA_7pexmSw.mft (raw, json)
Hash identifier:          mnUmiP1d038q9sFTRrkHRbMkpS2AKuhZpIsQG0VNL8w=
Subject key identifier:   20:96:DB:94:5D:C1:EC:7D:0E:73:2B:3C:20:33:D0:D2:1B:5E:1B:CC
Authority key identifier: 13:EB:7B:7D:F8:35:B1:13:AB:B3:F6:26:F6:20:3F:EE:97:B1:99:2C
Certificate issuer:       /CN=13eb7b7df835b113abb3f626f6203fee97b1992c
Certificate serial:       01907508AB822DC0C80FC71C183AA6EA35EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-t7ffg1sROrs_Ym9iA_7pexmSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.mft
Manifest number:          0B4A
Signing time:             Tue 02 Jul 2024 20:00:20 +0000
Manifest this update:     Tue 02 Jul 2024 20:00:20 +0000
Manifest next update:     Wed 03 Jul 2024 20:00:20 +0000
Files and hashes:         1: E-t7ffg1sROrs_Ym9iA_7pexmSw.crl (hash: 5ZvYMEm7JR242PODzY74FRRHGmb5PppKaxCmX3mkI54=)
                          2: azVz-wfweHTpXb17aEzq16c9r4k.roa (hash: +Bfy09uaRXECMQSLOoD1RaQmzEj2feO6Mxy0GPcxTds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-t7ffg1sROrs_Ym9iA_7pexmSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:75:08:ab:82:2d:c0:c8:0f:c7:1c:18:3a:a6:ea:35:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13eb7b7df835b113abb3f626f6203fee97b1992c
        Validity
            Not Before: Jul  2 20:00:20 2024 GMT
            Not After : Jul  3 20:00:20 2024 GMT
        Subject: CN=2096db945dc1ec7d0e732b3c2033d0d21b5e1bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:06:d5:f2:be:bf:b0:26:f5:3e:71:ce:f1:2a:
                    3b:14:ce:2e:4b:53:01:f6:2a:b6:29:53:df:51:67:
                    9e:9a:57:56:ad:ea:39:76:09:9a:76:c8:bb:d9:15:
                    db:7a:e1:27:b5:a2:56:50:f9:d5:77:be:44:64:62:
                    39:2b:e2:fb:7d:14:70:03:21:ff:ae:ec:2b:c4:0b:
                    9c:e2:b4:62:7b:74:19:91:8d:32:64:31:f8:a0:95:
                    fc:e3:3f:c4:1f:46:bb:d0:01:ad:43:79:92:4f:de:
                    74:4d:8b:35:d9:96:ae:31:84:f3:03:d2:26:43:bb:
                    a0:fb:4f:9c:38:b8:f1:c8:87:72:52:38:ec:b0:5c:
                    58:88:53:25:97:b2:4a:07:55:39:e0:63:78:44:73:
                    3a:72:58:6d:10:1c:2c:0c:75:c4:51:6a:ed:d8:a9:
                    59:10:07:63:f1:8f:b1:b4:84:f7:70:0a:a7:fd:7e:
                    9d:d3:39:9b:f0:24:b4:6f:27:6b:fe:72:b3:56:87:
                    dc:30:ed:b3:95:db:67:93:56:c8:58:a2:b3:d2:97:
                    dd:aa:73:5c:6a:50:97:a4:f8:ef:3f:2b:fe:7e:30:
                    d8:69:c5:91:71:7f:34:fe:50:2c:19:a2:86:41:36:
                    67:c3:90:1b:b2:3d:c7:36:15:75:5a:3b:94:4d:69:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:96:DB:94:5D:C1:EC:7D:0E:73:2B:3C:20:33:D0:D2:1B:5E:1B:CC
            X509v3 Authority Key Identifier:
                keyid:13:EB:7B:7D:F8:35:B1:13:AB:B3:F6:26:F6:20:3F:EE:97:B1:99:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-t7ffg1sROrs_Ym9iA_7pexmSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:00:3b:6c:f7:4d:ef:22:a1:29:48:b1:cd:83:25:56:4b:13:
         50:40:1f:d8:3e:c4:72:c9:35:4a:bc:9e:7a:d3:2a:e0:8a:9a:
         93:c3:09:83:f8:c0:6e:8b:c2:c2:c9:4f:4a:ba:01:31:d3:63:
         74:f7:83:10:40:93:20:b5:9d:27:21:16:3c:e3:48:d3:eb:53:
         87:00:ea:ea:03:d0:08:a9:ab:f1:13:75:58:ef:d0:35:db:88:
         8e:c0:5a:dc:16:bb:56:50:c5:11:62:98:cb:1c:f5:cb:33:74:
         c6:ca:a7:25:d8:0e:a5:5b:91:71:ab:33:81:5d:a3:22:7a:ff:
         2b:a7:91:d6:ee:83:74:54:16:c2:2d:a5:cc:47:98:d4:df:eb:
         e6:62:60:14:f9:d2:20:f5:67:3a:41:c6:bd:d9:50:2c:06:bc:
         0d:34:c9:16:4e:fd:6a:5c:98:52:a0:9c:d8:e5:9e:3f:09:13:
         e8:47:80:db:65:09:76:14:94:37:97:5b:ad:3b:25:28:c7:6f:
         15:d3:af:03:95:ba:7a:4a:f6:31:b8:73:b2:9d:fe:f8:66:f4:
         e0:10:46:3b:47:fd:3a:6a:91:90:9d:30:63:98:44:fc:ba:bb:
         57:bd:48:fd:aa:81:ec:55:5f:ca:0d:40:49:56:97:9c:63:53:
         21:68:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:18:53 2024 by rpki-client on console-fra.rpki-client.org