Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File:                     Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier:          I4t63qeIZkW8sxsHYLaNXf13dlboHWMUOj+Tab7BUVE=
Subject key identifier:   75:E2:97:19:17:B7:7B:8B:E0:5F:9F:15:B5:9B:F3:12:DB:21:37:18
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer:       /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial:       0190298352FCF834B5D82DBB6DAAB69EBAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number:          11CE
Signing time:             Tue 18 Jun 2024 04:03:10 +0000
Manifest this update:     Tue 18 Jun 2024 04:03:10 +0000
Manifest next update:     Wed 19 Jun 2024 04:03:10 +0000
Files and hashes:         1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: gs41yiRuFjxxzCXz/HTIH82eUKfQWYATMbQzU1LI4J8=)
                          2: dkJcskYXiDK3AXMOyO3pn67U_u8.roa (hash: Tn6vB1DcFzFrfAt8eLpBOGjdXBjwfyAkgkaPFpEnrgI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 04:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:83:52:fc:f8:34:b5:d8:2d:bb:6d:aa:b6:9e:ba:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
        Validity
            Not Before: Jun 18 04:03:10 2024 GMT
            Not After : Jun 19 04:03:10 2024 GMT
        Subject: CN=75e2971917b77b8be05f9f15b59bf312db213718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5e:d6:ee:4f:24:dd:ea:88:ac:2b:8d:30:10:
                    da:3e:5c:b0:b4:2f:2b:79:f7:1a:3c:4f:88:94:ec:
                    08:98:a9:15:8d:7e:77:f8:ef:eb:a8:3f:84:b4:1c:
                    88:b3:5f:08:ea:46:44:68:c5:90:ce:09:ca:72:d8:
                    04:d1:b6:df:f8:aa:66:cc:7a:2d:53:4f:da:5f:c6:
                    cc:a6:09:d7:e8:0f:fa:c2:77:20:87:fe:c1:f5:eb:
                    23:f4:c8:1d:8e:24:dc:a4:37:3a:73:9a:6c:ae:90:
                    65:13:2f:87:b0:23:ee:f8:20:19:60:11:c2:47:bd:
                    22:d6:79:9e:fe:d1:88:af:36:ec:b1:3a:30:d5:53:
                    6d:53:47:42:f9:35:9b:90:f0:cd:a7:d7:61:13:33:
                    1d:59:6b:a1:3f:49:8e:49:18:23:f2:9b:36:0b:67:
                    ce:c7:c7:05:76:10:24:fd:4c:c2:5c:33:96:ee:ad:
                    94:df:b6:a8:8e:25:e8:fb:d1:8e:de:b4:b1:d0:a3:
                    a6:c0:27:fd:3e:9c:ad:97:30:4b:83:a5:60:b1:30:
                    f4:a8:2a:49:d0:1b:65:57:10:b0:5a:1f:4a:53:c4:
                    05:9c:fd:f3:26:e2:73:5f:83:bb:3d:c4:66:37:e1:
                    b9:3a:6a:17:ba:9a:5d:4d:ab:29:24:4f:a5:2b:a1:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E2:97:19:17:B7:7B:8B:E0:5F:9F:15:B5:9B:F3:12:DB:21:37:18
            X509v3 Authority Key Identifier:
                keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:cb:c7:8e:8b:22:68:68:a8:1f:5d:38:56:70:71:7f:04:
         23:3f:7b:b9:6a:e3:62:f8:aa:51:15:f3:b9:82:3f:0a:44:dd:
         0b:e8:9f:6b:e4:23:6c:87:1c:15:82:50:5c:dd:c5:d3:53:d1:
         7d:92:9a:f8:56:fd:30:e5:6f:1b:e5:99:a8:1d:2f:df:f5:c0:
         02:5e:5f:f1:4f:a4:0e:2b:95:38:63:32:7d:e7:c4:23:69:fb:
         5d:81:b1:e6:31:66:e8:61:24:ff:45:c6:73:10:3f:16:15:53:
         b7:8a:13:96:e4:e6:4b:d8:c6:0d:85:30:60:f1:ef:a8:60:5d:
         56:1b:42:23:96:35:08:7d:c9:60:c6:69:95:86:33:2d:cd:85:
         e0:fd:66:a7:0e:80:c4:a4:c6:ab:4d:b2:21:39:e7:a2:2f:3c:
         27:50:86:37:bc:b8:9d:d9:3d:48:ab:d9:15:cb:44:80:34:a5:
         87:11:c7:a1:10:9b:02:db:34:0e:fe:14:98:fe:ad:67:ab:ff:
         a9:a7:77:c3:18:46:28:e7:5d:a5:db:ce:ac:4a:57:00:92:91:
         c5:59:fa:04:dc:12:79:82:69:a2:b7:d0:45:bd:a1:d4:be:5a:
         17:37:a8:cd:4e:c5:16:1b:98:0f:7b:7f:3c:85:00:ea:bb:c4:
         23:9a:40:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:06:48 2024 by rpki-client on console-fra.rpki-client.org