Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File:                     3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier:          5KDP3waGDLNVgodEe8UKbaN66gjg4E51i/C40zMEohA=
Subject key identifier:   A7:1E:8A:D6:E7:83:97:6E:35:8F:58:65:70:2E:A6:C3:55:30:5D:8C
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer:       /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial:       01906E2B25BF7D62B254AA840D2D2E51B4F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number:          11F1
Signing time:             Mon 01 Jul 2024 12:00:39 +0000
Manifest this update:     Mon 01 Jul 2024 12:00:39 +0000
Manifest next update:     Tue 02 Jul 2024 12:00:39 +0000
Files and hashes:         1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: LgFaY0e/r1iEq7eD0OlsFQXCeb/9blI5vdZKnw3A2ks=)
                          2: x8TzX6LqqX9zL7MFdq_g__iLtws.roa (hash: eMdumGDEicNvqqjxsqLYnbsXifkwcWbeSJ7g1rnWjqY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6e:2b:25:bf:7d:62:b2:54:aa:84:0d:2d:2e:51:b4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
        Validity
            Not Before: Jul  1 12:00:39 2024 GMT
            Not After : Jul  2 12:00:39 2024 GMT
        Subject: CN=a71e8ad6e783976e358f5865702ea6c355305d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:1b:cc:82:f8:64:91:46:89:7c:a2:61:32:
                    a8:dd:cc:f3:49:6d:5b:27:66:72:a4:33:52:47:dd:
                    eb:60:81:c2:38:d5:bd:18:ff:59:f9:03:e8:4f:5a:
                    90:ab:bb:2e:ca:61:43:f0:17:fb:2a:fa:bb:b2:8b:
                    dc:ef:af:9d:05:30:2e:28:31:8e:4d:1f:a2:4d:f3:
                    e6:4d:27:a7:72:2d:23:d5:3b:84:79:2e:8d:23:2f:
                    7a:56:28:f8:3a:81:b5:c4:d3:fe:8a:71:43:3d:e4:
                    d8:a9:3a:99:1b:a9:8a:3e:64:82:f6:83:f8:79:10:
                    20:e1:7f:bd:30:8a:aa:2f:59:3b:d1:56:b2:a8:26:
                    f0:92:8f:cd:94:6e:73:2b:bf:52:ed:09:81:11:b5:
                    8b:e3:a5:45:dc:8d:ac:38:07:db:a0:24:72:a6:49:
                    86:9d:da:0d:eb:6d:47:ac:7a:5b:25:90:8a:b8:a7:
                    93:3a:e5:67:eb:06:ef:15:e4:b1:b9:a4:ad:19:12:
                    8b:4a:cc:3b:e9:82:c5:cf:d7:43:e7:52:25:7e:df:
                    88:ba:75:ea:6f:cd:8a:39:9c:6c:1d:f2:a3:f8:75:
                    bb:7a:73:1b:cd:95:e8:a7:79:18:84:dd:0b:87:a2:
                    3c:23:e0:50:21:d8:3d:43:b5:64:45:99:a8:f5:6e:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1E:8A:D6:E7:83:97:6E:35:8F:58:65:70:2E:A6:C3:55:30:5D:8C
            X509v3 Authority Key Identifier:
                keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:42:59:6f:57:18:9a:d1:8b:d7:f0:0c:66:bf:92:68:c5:27:
         9a:5b:08:55:8d:94:65:64:e6:8c:1e:21:02:14:22:40:45:c3:
         ed:b6:4c:e2:01:be:81:b6:38:17:51:09:18:e9:cc:86:86:a3:
         a8:c6:bd:70:73:b8:c2:9f:c4:8f:a6:70:3a:04:0c:9b:3b:13:
         0c:1a:8a:dc:4b:07:ef:76:90:3b:da:4c:0b:c1:bb:e5:ee:31:
         68:b3:76:2f:29:17:52:d2:f3:92:0e:e4:bd:ba:e5:23:10:6a:
         c5:3a:1e:7c:c8:6c:e2:2f:a9:e4:ba:36:6d:e6:42:72:d2:f4:
         70:04:d7:c9:45:4e:31:2a:41:ca:5c:31:24:37:6b:2d:7d:83:
         1c:c1:a4:8e:9b:72:41:ab:92:e7:bf:aa:86:d1:c7:85:0e:7f:
         2a:8f:74:23:1e:5b:43:f7:f8:59:5e:20:ed:dc:e3:58:e2:c9:
         ec:ec:d7:97:d7:8e:33:29:42:b8:b2:f6:64:55:ec:a8:a4:f0:
         89:bd:df:08:f4:50:05:b0:da:45:92:2f:8a:47:6d:19:6e:cd:
         d1:94:e3:78:75:18:1d:83:da:61:a0:57:4d:3a:fc:ec:48:db:
         b5:4f:23:4c:89:38:9a:50:14:43:a2:da:04:76:51:c5:f7:86:
         81:7a:f7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 18:35:45 2024 by rpki-client on console-fra.rpki-client.org