Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
File:                     7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json)
Hash identifier:          w8QAlN+DCKacPL2wVW8FllxQDemtKT3sTKpczXL4r2A=
Subject key identifier:   E7:BC:28:06:9A:95:8B:8A:BA:91:73:A2:19:55:B5:30:2E:1D:C4:4E
Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
Certificate issuer:       /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Certificate serial:       0190527D447C091AE702EEA33322341E9058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
Manifest number:          11DF
Signing time:             Wed 26 Jun 2024 03:00:59 +0000
Manifest this update:     Wed 26 Jun 2024 03:00:59 +0000
Manifest next update:     Thu 27 Jun 2024 03:00:59 +0000
Files and hashes:         1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: GWIjbP1mTwU8CXu5lji6N6KRnQDY8XhTlbr/+dJRr6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:7d:44:7c:09:1a:e7:02:ee:a3:33:22:34:1e:90:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
        Validity
            Not Before: Jun 26 03:00:59 2024 GMT
            Not After : Jun 27 03:00:59 2024 GMT
        Subject: CN=e7bc28069a958b8aba9173a21955b5302e1dc44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:35:6c:e9:6a:32:99:3e:98:29:84:33:50:
                    f2:18:8b:d7:26:68:64:28:cd:13:a1:4a:6c:3f:09:
                    96:62:c9:80:ea:58:e7:c9:16:7e:9c:fc:9d:8b:fb:
                    54:fa:82:7d:cf:e9:ab:f7:77:1c:64:54:31:09:55:
                    a9:e3:44:99:fa:ac:70:87:6e:d8:80:eb:a9:fd:d4:
                    97:56:2d:80:a4:43:00:33:ca:4e:90:5e:27:ad:69:
                    46:b0:29:6b:3d:54:fe:ba:c9:44:2c:d1:ef:34:65:
                    d5:2c:4c:4d:66:f9:44:d9:c6:12:ac:13:4c:b4:2f:
                    b6:aa:36:25:1c:01:9d:22:2a:79:aa:bb:64:56:e9:
                    3a:eb:47:b6:1e:a2:d0:2e:1f:60:d7:dc:e7:8f:b3:
                    0a:a3:1e:80:24:da:4c:59:60:f0:00:fc:cc:7b:03:
                    b1:20:ce:5c:d9:f4:a4:fb:3b:c0:c3:26:b6:c4:9f:
                    45:81:3c:52:98:35:4b:1b:61:1a:d1:44:82:4c:c3:
                    df:48:0b:bf:0b:53:9a:cf:f5:df:f2:fc:e1:da:5a:
                    5b:a1:cc:53:8a:2c:b5:d7:a4:a0:fd:1d:07:4a:4f:
                    84:10:a5:76:51:d3:bb:c8:55:cb:f5:2b:ee:ef:ad:
                    44:32:40:25:fa:88:b0:55:b3:b1:fc:0c:6f:65:47:
                    37:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BC:28:06:9A:95:8B:8A:BA:91:73:A2:19:55:B5:30:2E:1D:C4:4E
            X509v3 Authority Key Identifier:
                keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:52:2b:57:c3:6f:dd:57:25:9f:2d:ff:a4:8f:5d:50:9b:ee:
         10:3b:3f:81:ea:35:54:fa:b1:82:42:ec:3e:8e:c9:a9:57:37:
         8b:26:31:dd:7f:72:75:eb:1f:5e:ff:d4:54:58:cf:49:d9:87:
         f7:cb:c2:0f:ad:d9:bd:1f:30:6b:6a:82:50:6a:98:08:ca:43:
         27:6c:12:c3:a7:55:cc:13:24:c3:36:74:14:ea:dc:bf:a0:b3:
         0f:38:76:3e:49:c7:17:98:16:f8:b8:7a:d8:bc:d5:b3:32:1e:
         54:76:e2:0a:57:ed:a0:80:8d:94:a4:18:33:22:d9:4d:88:5a:
         44:84:96:76:e3:97:f4:25:95:26:2d:c8:6d:f6:6b:54:2d:65:
         da:76:51:b4:d5:60:8e:4c:8a:8f:58:0d:01:66:f0:bf:3b:4f:
         38:b6:64:83:68:7d:af:b5:2c:c9:72:b7:b7:19:db:22:54:2f:
         fc:52:0f:1a:99:eb:e9:36:33:2d:09:ee:84:38:af:f4:0c:02:
         fc:2b:86:d8:e8:a7:cc:75:95:e3:02:7d:63:ee:df:cf:ca:c3:
         13:34:8b:e6:d5:9c:14:47:bb:76:00:26:47:b3:19:66:00:ec:
         5a:d4:86:bf:16:ed:09:33:81:a4:5e:4b:ed:09:24:38:e7:9b:
         4b:85:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:46:53 2024 by rpki-client on console-fra.rpki-client.org