Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File:                     RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier:          C4ziiK3I82rT6xhuV2CFO+CoN/F39Jv8ixSWPo27jCM=
Subject key identifier:   CC:B6:41:FF:B0:17:04:54:C7:E5:C7:32:C7:67:CC:53:FC:62:7B:FA
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer:       /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial:       01906B2B2E3CEA33964E71258B7E24B68EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number:          11EC
Signing time:             Sun 30 Jun 2024 22:01:50 +0000
Manifest this update:     Sun 30 Jun 2024 22:01:50 +0000
Manifest next update:     Mon 01 Jul 2024 22:01:50 +0000
Files and hashes:         1: ATmytBbMvl9Hkpok730RBQFOShI.roa (hash: p8S4iqHGLLVg9kk/UstSL7O99USLHzryu3wp4y/poQ8=)
                          2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: kshixrAKVqOKcwjwDO7nL6q9fCICzyM4oF+jbTcMDrw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 22:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:2b:2e:3c:ea:33:96:4e:71:25:8b:7e:24:b6:8e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
        Validity
            Not Before: Jun 30 22:01:50 2024 GMT
            Not After : Jul  1 22:01:50 2024 GMT
        Subject: CN=ccb641ffb0170454c7e5c732c767cc53fc627bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:98:19:ea:63:61:01:4a:84:30:c1:6a:13:
                    67:62:e3:13:aa:60:51:5c:57:cc:3a:f3:3a:d1:35:
                    78:05:2d:3d:d2:4b:02:24:92:8e:ca:2d:ef:30:93:
                    83:a6:ee:a9:17:1e:66:1c:9a:cf:65:96:c2:ec:5d:
                    1f:a8:5c:02:25:d2:e6:2c:93:e9:e9:19:06:d0:1f:
                    6f:fd:84:11:2f:81:a6:b0:eb:a9:d1:19:76:58:8d:
                    43:2e:0f:2e:6d:ef:db:c3:f2:06:14:9c:78:59:4b:
                    39:98:0e:1f:a7:a5:55:f6:2e:e2:45:97:20:bb:3e:
                    11:94:e3:d0:98:bd:d9:20:99:ac:ae:41:94:29:26:
                    2c:6a:31:78:7f:d9:d6:0c:b4:20:e7:e7:90:67:6d:
                    ba:f5:e4:6a:2e:88:ac:28:5d:47:02:c6:d0:41:f1:
                    9a:2c:84:86:9b:45:41:cd:16:19:b2:30:8a:3a:2f:
                    42:16:98:26:9b:d3:93:ff:e4:31:0c:8b:78:f2:a7:
                    62:cd:85:5d:9c:74:8c:45:f0:79:23:87:22:45:db:
                    e8:a0:fa:48:1a:ff:b4:ab:87:78:1c:25:b0:46:d2:
                    bf:39:0a:3a:b1:d4:16:a1:e8:37:41:91:09:a7:8c:
                    9c:31:91:30:d7:7a:1b:ea:f2:85:f4:4c:b3:a7:75:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B6:41:FF:B0:17:04:54:C7:E5:C7:32:C7:67:CC:53:FC:62:7B:FA
            X509v3 Authority Key Identifier:
                keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:42:96:40:06:6b:63:de:93:3d:5d:bd:b6:de:e3:0a:af:54:
         94:e2:bf:10:bd:34:5e:47:66:0b:9f:85:2c:20:7a:06:7d:d6:
         21:b6:e7:b5:87:92:1a:df:0e:69:9e:83:ea:12:37:84:57:92:
         77:8b:ef:4a:73:82:9e:d5:93:82:e0:41:99:d2:75:aa:f8:dd:
         1f:56:5c:f8:92:5c:3b:88:28:9c:6a:3b:0a:3b:c4:62:c4:0f:
         68:87:06:06:2d:04:29:49:5b:6d:9e:10:af:89:57:89:f7:46:
         15:71:a9:35:78:50:59:eb:0b:98:dd:d8:20:1b:19:bd:b5:6b:
         20:10:a3:82:03:47:8d:1c:04:73:fb:25:d9:08:99:7d:09:1f:
         8d:fe:78:84:a5:ff:32:49:ec:2f:d1:be:cf:e6:5c:23:63:5f:
         c5:98:f8:b2:91:ec:04:c9:26:bf:17:54:27:b3:72:9b:f1:ef:
         a1:c4:81:c1:04:64:34:31:48:0b:db:42:93:c0:1c:fb:17:5a:
         7f:44:5d:bb:5c:ec:9f:dc:7c:78:b6:86:66:b7:32:0b:3e:42:
         f1:40:1e:05:4d:98:2e:8b:b7:ba:4d:b5:2d:e0:67:03:2d:6f:
         fe:08:f9:59:1e:52:75:73:61:07:dd:54:22:ea:46:81:ef:e0:
         83:18:00:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:39:42 2024 by rpki-client on console-fra.rpki-client.org