Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File:                     7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier:          lzSRImzGf7St5TctjE//62t2gkosflrC7U/Zy1Jcnsw=
Subject key identifier:   31:50:7A:B4:A7:2F:04:E0:DF:4C:84:26:77:5F:4D:46:8B:04:66:19
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer:       /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial:       019052EB45E56EED7BECFA4B15F2B8B948B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number:          0A23
Signing time:             Wed 26 Jun 2024 05:01:08 +0000
Manifest this update:     Wed 26 Jun 2024 05:01:08 +0000
Manifest next update:     Thu 27 Jun 2024 05:01:08 +0000
Files and hashes:         1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: 5z5H05sXRGk0he0osKJI7UKlMuJNYlVIEmGogOK8BaA=)
                          2: qfOKQ4-tLUNo50-NjbCNjdWbk4U.roa (hash: VQAQzzyxI+rVrTRwBiq6fBDMw0vJ+7n2yX22lG6F47E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:eb:45:e5:6e:ed:7b:ec:fa:4b:15:f2:b8:b9:48:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
        Validity
            Not Before: Jun 26 05:01:08 2024 GMT
            Not After : Jun 27 05:01:08 2024 GMT
        Subject: CN=31507ab4a72f04e0df4c8426775f4d468b046619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:03:4f:ea:03:fe:25:49:53:39:b1:ce:48:
                    4d:4e:08:6d:86:f9:11:57:15:77:ef:64:32:4f:b8:
                    46:48:02:77:2a:0c:89:39:5a:b9:4d:be:48:61:18:
                    6a:f8:eb:ed:73:99:77:b3:19:e2:40:84:0e:78:23:
                    77:45:e8:a8:d4:a6:3d:81:a7:d6:50:4d:e6:8a:c6:
                    5c:1f:75:4b:89:4d:5d:31:32:80:1b:e3:47:17:68:
                    60:b6:d3:90:89:a3:89:f4:d8:ee:70:90:62:6b:c3:
                    76:ea:f9:ff:51:a7:0e:25:7d:17:e9:84:81:54:43:
                    e5:97:81:cf:a4:89:af:74:27:6e:ea:ee:5c:e7:0f:
                    fc:4e:ea:39:25:3a:25:a0:1a:06:57:1d:4f:85:98:
                    84:51:b0:d4:6c:b3:82:33:d8:26:ef:e2:a4:09:a4:
                    2f:26:c9:6f:23:26:33:bd:1d:22:d9:8c:bf:ff:e7:
                    7f:c5:ac:1c:a6:84:46:a7:b2:f2:0c:0a:4b:5c:1f:
                    2b:fc:ae:4f:f1:fd:0e:f2:8b:cf:78:52:87:f2:26:
                    78:a1:8d:f3:bb:e7:66:ce:29:0b:b2:5c:05:c9:34:
                    55:ec:87:ed:a7:11:cf:01:24:d5:31:a0:af:d9:f2:
                    82:62:80:c3:30:c2:9c:21:be:a7:b9:14:6c:23:63:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:50:7A:B4:A7:2F:04:E0:DF:4C:84:26:77:5F:4D:46:8B:04:66:19
            X509v3 Authority Key Identifier:
                keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:23:ca:12:d3:38:3f:80:84:41:d9:5f:53:5e:09:0d:98:
         c5:23:17:d1:74:d1:41:e7:da:6d:e8:17:75:24:ae:49:85:a7:
         4e:e6:fa:4f:df:f0:08:9f:fe:5c:f5:24:e9:45:28:db:70:87:
         37:e5:89:1c:69:eb:d8:9f:d2:04:55:22:39:b8:fe:e0:9e:01:
         9e:a7:68:38:5c:79:03:d2:f3:1a:ed:b1:1e:00:b3:97:e5:1c:
         f2:e0:14:44:ee:d1:31:37:4c:8f:a6:51:96:0b:04:57:f9:95:
         da:aa:d9:cb:c7:81:e9:fe:07:35:45:0b:f1:01:0f:f2:72:1b:
         f0:bd:23:ac:bc:40:08:9b:29:fd:93:37:b8:77:dd:f6:32:dc:
         a6:bd:d2:cc:52:a4:50:0d:05:b1:67:1c:d1:7a:cb:58:59:e4:
         86:39:6f:96:f7:26:67:52:90:f0:07:d8:36:bb:e6:20:76:b3:
         aa:08:5b:57:c0:b1:bd:87:03:26:99:b5:eb:4b:4e:70:dd:c7:
         d0:4c:5c:87:26:b1:43:d7:69:48:5b:a2:60:5f:3c:91:d6:04:
         68:b1:22:77:ab:1f:73:dd:de:8d:c9:1d:06:b1:a7:11:af:b1:
         62:65:3e:60:f4:c2:bc:00:ca:82:b8:ef:7b:35:08:f4:3d:db:
         eb:09:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:40:29 2024 by rpki-client on console-ams.rpki-client.org