Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File:                     7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier:          a/sDUQjDAn0e+bP7uPv3UgwRJtofWbEbphlixnp9B1Q=
Subject key identifier:   D1:57:84:23:72:19:8D:9B:20:37:86:A6:88:69:CC:BF:9E:B2:5B:66
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer:       /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial:       01902491D4079B3CEA1A2A17912BDC3CAF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number:          0A0B
Signing time:             Mon 17 Jun 2024 05:00:54 +0000
Manifest this update:     Mon 17 Jun 2024 05:00:54 +0000
Manifest next update:     Tue 18 Jun 2024 05:00:54 +0000
Files and hashes:         1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: B96Fqy+rKQRKnmqx2rzYDLg0JED1lyE5ETpGe575PNQ=)
                          2: qfOKQ4-tLUNo50-NjbCNjdWbk4U.roa (hash: VQAQzzyxI+rVrTRwBiq6fBDMw0vJ+7n2yX22lG6F47E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:24:91:d4:07:9b:3c:ea:1a:2a:17:91:2b:dc:3c:af:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
        Validity
            Not Before: Jun 17 05:00:54 2024 GMT
            Not After : Jun 18 05:00:54 2024 GMT
        Subject: CN=d157842372198d9b203786a68869ccbf9eb25b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:6f:07:36:32:bf:2e:3f:cb:ff:29:e8:76:
                    fa:5c:ad:be:c0:21:ae:04:ee:ef:be:c7:74:66:76:
                    ac:b9:b8:17:09:8b:76:9c:93:28:d9:99:d7:cb:84:
                    51:d4:dd:8d:ac:7b:54:17:f2:86:16:04:1c:81:32:
                    60:d4:bb:71:5a:d5:39:b4:6b:06:03:65:94:91:0d:
                    5d:4a:9b:2b:db:5c:db:66:78:6e:e4:e1:dd:63:4f:
                    17:ce:5a:0f:61:9f:11:d7:db:54:85:ec:91:ac:d0:
                    e0:83:ce:cb:a7:1f:71:65:81:29:4c:4b:0b:0c:59:
                    b0:38:dd:85:ff:2f:32:28:4b:6d:f3:4a:31:1e:1a:
                    a1:4e:c4:55:e6:86:93:1c:cb:10:3b:d2:4d:ca:6a:
                    80:fd:4c:fe:c4:d7:c2:ff:2a:ab:e7:12:da:4a:f3:
                    23:33:57:09:c9:bc:21:b0:0a:6e:58:3e:8f:53:e5:
                    a6:e9:65:8b:97:0f:a0:be:54:7d:3d:b3:4b:df:e3:
                    db:c6:c9:42:82:f9:6f:2b:bd:3c:bf:cb:5c:aa:3e:
                    2b:88:3f:a1:94:bf:54:26:5d:14:a5:9d:19:52:e8:
                    bb:6c:41:69:ad:a6:5b:7e:ab:1c:e6:5d:b1:3e:b4:
                    dc:c9:8b:2b:aa:a8:88:24:5e:06:3f:d0:f5:f9:bf:
                    91:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:57:84:23:72:19:8D:9B:20:37:86:A6:88:69:CC:BF:9E:B2:5B:66
            X509v3 Authority Key Identifier:
                keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9b:9a:60:4c:b8:d5:5b:3d:d4:33:51:4c:4d:90:84:3e:6d:
         e3:b1:56:3c:69:7f:85:ac:51:d9:c0:ec:a4:40:87:df:6d:b7:
         9e:f7:14:e1:0a:14:4f:1e:16:c7:a6:d9:60:48:ea:75:ed:0e:
         d6:14:35:20:e6:9a:03:be:a6:5b:88:f5:c6:e6:6d:fa:9c:e2:
         6f:38:b8:65:0a:db:d1:44:c8:11:6c:28:9f:83:48:ba:71:7c:
         de:bc:96:0c:f7:d3:cd:79:b4:d8:fc:5c:45:45:8c:ec:34:67:
         19:9e:42:99:37:6d:8e:47:68:8f:29:dc:32:8b:b9:35:0e:ad:
         00:bf:d9:ac:d0:4b:c7:58:19:1a:4b:0a:f6:5e:23:dc:56:0b:
         66:df:f4:61:d1:91:55:f3:b4:74:e0:97:c9:7d:48:45:94:24:
         61:d6:a1:86:0d:a6:fb:fb:cb:32:ed:48:43:ad:82:bc:26:ab:
         4c:83:9f:b9:a3:a7:f3:8f:97:18:a8:d2:9b:2f:f9:0a:92:d9:
         81:86:b4:92:3f:af:51:8d:a0:d6:bd:82:6d:5c:8d:6b:a3:81:
         60:d6:3b:e3:b7:8d:13:9c:55:33:83:a4:c0:56:f3:76:42:6e:
         5f:52:85:51:f0:02:75:6b:e9:e9:48:57:6b:95:ae:ca:36:b3:
         4e:54:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:58:08 2024 by rpki-client on console-fra.rpki-client.org