Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File:                     7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier:          L4ttDsz6vn5UIeOT3uIwChcmHJfgRJrm6kd13pNIH1M=
Subject key identifier:   3E:88:AD:DE:C8:B0:33:27:BA:08:25:98:01:3E:2E:04:00:BB:AA:BB
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer:       /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial:       01901DEB40822C0AD7ACE70252FBCBDE808B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:14 +0000
Files and hashes:         1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: pLT/tRGpFnuEcm2YaTT3re1kjnYgPqFy4VMhu1XnrLs=)
                          2: nJ8nX92KD7tMIT9vc1xg_Q4L7Ak.roa (hash: PDcnfd6ylBEVTr20UAehex+Bjeh/URx3LCaxfLFBs70=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:40:82:2c:0a:d7:ac:e7:02:52:fb:cb:de:80:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
        Validity
            Not Before: Jun 15 22:01:14 2024 GMT
            Not After : Jun 16 22:01:14 2024 GMT
        Subject: CN=3e88addec8b03327ba082598013e2e0400bbaabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:63:d6:b4:7d:e7:65:c2:7f:3e:a7:9b:83:
                    79:7d:d6:4f:ab:25:5b:4e:08:7c:96:d2:0f:01:e0:
                    5f:98:16:3b:8d:c3:e0:45:c7:7d:fd:4a:08:3c:21:
                    08:64:30:d4:e7:b6:8a:90:1f:3e:46:80:34:80:b2:
                    bc:ae:13:f9:64:93:56:59:48:40:96:2b:f5:2e:4a:
                    4c:39:fa:80:c1:05:82:78:99:a2:4d:b6:df:fb:16:
                    c3:c4:86:37:b1:bb:13:2a:e8:aa:8b:d5:5e:e2:8c:
                    65:d8:7d:b1:b2:eb:e2:ae:46:a3:28:bb:a5:8f:54:
                    30:e4:c4:f4:4a:34:2f:00:d3:a1:e2:8b:b5:2c:d1:
                    69:79:b6:5d:72:2a:37:4e:04:d8:1a:66:9a:cb:6f:
                    09:eb:6e:5a:b8:5c:59:57:1e:8c:a2:91:7f:00:7b:
                    de:eb:28:d9:04:eb:e6:d5:06:b3:3c:fb:1f:f6:dc:
                    5f:d2:2b:3a:a2:47:08:2e:b5:1b:ea:d9:a6:39:4f:
                    92:89:e2:1f:8c:33:1a:6a:32:8f:e8:27:0f:a1:1b:
                    aa:dc:fa:4d:39:86:a2:65:dc:81:26:7a:eb:52:0b:
                    82:57:ef:b2:86:35:78:f8:4d:93:57:3e:5f:da:bd:
                    32:ef:50:d2:a4:45:c9:56:a3:d2:4b:1a:01:c8:95:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:88:AD:DE:C8:B0:33:27:BA:08:25:98:01:3E:2E:04:00:BB:AA:BB
            X509v3 Authority Key Identifier:
                keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5e:4a:60:a5:a1:07:67:f0:0e:c6:74:b1:ac:66:b3:63:8b:
         ef:69:86:68:c0:8f:f9:1f:3f:50:4b:63:67:95:dd:57:41:90:
         1a:90:8d:35:5d:b9:6f:66:87:35:cb:b9:eb:b1:ca:8e:5c:a4:
         87:69:f3:0d:1b:04:35:fc:9d:9b:48:35:d9:02:d5:22:aa:1f:
         78:1a:7c:a9:b0:78:ae:0c:e9:39:6e:8a:62:b0:81:17:91:9a:
         92:9e:ac:fa:a8:25:26:39:ae:99:9e:12:67:ee:4c:df:d1:f6:
         3f:2c:3b:aa:aa:2b:e1:8d:b8:36:08:c5:65:7b:ca:84:a3:1b:
         72:df:85:23:9e:42:b0:74:a3:44:5e:46:3b:0f:9d:e3:1a:f3:
         42:c7:d7:55:33:06:9b:92:9d:a7:95:e3:dd:f0:09:1f:5a:de:
         6f:48:f7:21:71:0e:31:dd:a5:8e:b4:f6:41:98:ff:a9:8f:9d:
         41:6b:c8:5f:8c:18:49:b2:41:71:31:f8:af:40:a7:b9:26:b3:
         23:9d:f8:ad:bf:9b:85:d5:a9:c9:25:b3:b9:62:58:e3:f8:c1:
         8f:64:8f:e6:de:7b:c8:07:98:2e:26:3b:11:59:90:d8:ad:38:
         a3:0a:c4:f5:45:60:f4:f3:ef:e5:84:ce:c7:94:c2:a6:a1:11:
         64:81:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:36 2024 by rpki-client on console-fra.rpki-client.org