Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
File:                     I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json)
Hash identifier:          2EYcmod3gkSmVwhN7TwuuCOnSzKA0DRM8V/Z3rb3ia8=
Subject key identifier:   4F:B7:49:81:6F:ED:7F:56:AD:5C:5B:77:D9:66:C6:62:89:99:40:33
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Certificate issuer:       /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial:       019024FFBBB8B957312826A6BB1B40CCDC28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
Manifest number:          11CF
Signing time:             Mon 17 Jun 2024 07:00:57 +0000
Manifest this update:     Mon 17 Jun 2024 07:00:57 +0000
Manifest next update:     Tue 18 Jun 2024 07:00:57 +0000
Files and hashes:         1: 0lfeOytDlBLPdCOobGzHKTJWK-w.roa (hash: wXCQ2ZFvv949BzyWQw4qCeIBpstVGx+VlW7fVCevU/4=)
                          2: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: BPj7zAAESFlH+Y2mdzjyW91dAagyzpG4Sf/RzWVUc+8=)
                          3: MDsqo6RiqaXth6CqXc613Nr7v14.roa (hash: ZdG9msmYxx4cI5rdVJG3I0VLJq85q3QF1tvnB4DJ5V8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:24:ff:bb:b8:b9:57:31:28:26:a6:bb:1b:40:cc:dc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
        Validity
            Not Before: Jun 17 07:00:57 2024 GMT
            Not After : Jun 18 07:00:57 2024 GMT
        Subject: CN=4fb749816fed7f56ad5c5b77d966c66289994033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:41:1f:4b:72:5e:9e:49:11:3b:54:2e:08:
                    6e:fa:43:cd:00:38:34:ea:e8:42:6b:89:8e:fa:6c:
                    0e:5d:80:4b:42:22:25:58:8e:c6:26:60:65:90:13:
                    2f:bc:96:96:ce:8e:e1:d6:07:6a:94:8b:42:ed:21:
                    36:17:51:0b:96:b8:84:a5:9f:0f:b3:e6:ba:9d:1d:
                    6e:22:38:eb:91:1c:fc:1f:f7:16:a0:e5:4f:89:7f:
                    49:bd:d7:2a:4b:31:a8:6a:4a:ea:3d:11:8d:e5:a1:
                    44:9f:68:5a:32:2e:ed:28:4b:07:f0:92:8a:18:78:
                    19:6c:a6:2e:ed:ed:19:6d:ee:64:de:64:10:09:e7:
                    ba:0a:cd:4f:c8:a5:3c:e4:e2:b5:5f:79:fd:65:63:
                    21:67:0e:3e:0e:d3:a0:33:c7:b6:fa:1a:42:37:02:
                    c3:01:29:5a:ea:51:c1:be:06:6a:c8:46:75:1c:3c:
                    3a:d3:de:5c:37:4f:10:b4:65:bc:16:d0:42:b3:c8:
                    e2:81:ea:14:3c:72:77:a0:b1:7d:9d:62:a4:09:bf:
                    69:22:6a:62:6c:14:4c:b6:26:70:9a:1b:f1:2a:d7:
                    39:8a:f0:54:15:cf:fb:a4:10:c6:46:ff:6f:87:fd:
                    8e:22:9e:7f:dc:d1:90:0a:0a:ab:f6:35:f6:68:eb:
                    76:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B7:49:81:6F:ED:7F:56:AD:5C:5B:77:D9:66:C6:62:89:99:40:33
            X509v3 Authority Key Identifier:
                keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f6:07:ff:ef:14:b9:e4:9a:0b:19:83:8c:f1:c2:87:80:48:
         a6:70:38:83:53:43:75:01:83:1b:9c:96:2b:39:4d:d6:e6:95:
         38:86:0e:c3:f0:b5:9b:65:d4:53:88:d3:70:ac:23:24:c1:4c:
         5a:8a:76:fe:68:1e:fd:8d:a5:34:c0:f5:8b:3f:f8:a1:1d:a0:
         1b:b9:de:d5:ec:bb:16:f5:29:5e:76:5d:d4:6b:41:ff:ec:e5:
         d9:c5:8b:6f:25:79:e1:f5:f8:4d:97:ad:d8:e7:f4:9c:ee:d5:
         9e:20:ce:26:54:f4:1c:77:8c:0a:63:40:4c:99:d4:e7:ee:59:
         6b:c5:f4:4e:b9:33:59:07:45:55:f1:01:03:a9:1c:15:c6:c4:
         4f:2f:4d:47:0e:08:04:57:e0:66:be:77:41:58:d5:dd:53:4d:
         c0:5b:c5:45:5d:9d:2a:e1:80:47:15:37:ac:3e:56:10:47:3f:
         6c:87:85:b0:42:58:b1:fa:06:5e:e4:6f:59:f3:24:f8:26:cc:
         14:e3:a4:d1:55:b4:c7:78:30:51:bb:6b:d6:8d:66:f1:d3:3c:
         9f:90:5e:00:9a:5e:fe:b3:f6:db:4f:cb:45:bc:83:fb:a3:80:
         fe:a5:a6:cd:5b:65:ce:c5:4d:43:03:06:c0:33:a8:a8:fa:cb:
         f8:44:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:56:54 2024 by rpki-client on console-fra.rpki-client.org