Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
File:                     eL0cbGiKF1q8jVmPvNEH_KUlS94.mft (raw, json)
Hash identifier:          Ho4Hh9zBbud1ncVDW6T3hw2KLDgDH56DgbWxxHpH5OI=
Subject key identifier:   2B:90:1A:59:79:55:17:88:C9:35:54:5A:5D:62:DC:E4:57:4C:49:22
Authority key identifier: 78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE
Certificate issuer:       /CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
Certificate serial:       01902A264B6A405D10EAD587481E94670DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
Manifest number:          11CC
Signing time:             Tue 18 Jun 2024 07:01:10 +0000
Manifest this update:     Tue 18 Jun 2024 07:01:10 +0000
Manifest next update:     Wed 19 Jun 2024 07:01:10 +0000
Files and hashes:         1: KjH1_pGJzEWw5tI7eCrmw3mcnWQ.roa (hash: YCHZcqH5jthPhdYc2iMhEp+dhG2VS7J0RhoKLenoCng=)
                          2: eL0cbGiKF1q8jVmPvNEH_KUlS94.crl (hash: 4LHXE2xaWmefR/R+xqtp8lBZ69HCtl5RzScO/rmlDGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:26:4b:6a:40:5d:10:ea:d5:87:48:1e:94:67:0d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
        Validity
            Not Before: Jun 18 07:01:10 2024 GMT
            Not After : Jun 19 07:01:10 2024 GMT
        Subject: CN=2b901a5979551788c935545a5d62dce4574c4922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:07:ac:83:4a:6d:9f:c0:7c:f1:47:c4:31:
                    dd:6a:7e:17:0b:27:cc:33:c7:59:71:47:bf:f8:53:
                    8b:e2:e4:8f:7c:b1:84:6b:1e:38:c3:1d:8c:88:48:
                    c8:47:fa:8b:be:dd:47:22:52:8e:b7:3e:6b:89:dc:
                    12:61:c6:8f:1e:f5:12:f1:f6:ae:ee:15:38:a1:98:
                    d8:9c:d1:c9:8c:41:76:09:c9:bc:4e:ad:08:2c:7e:
                    f4:1f:b4:24:dd:55:75:55:81:cc:f3:14:a7:fd:0f:
                    3e:25:52:05:e2:80:2d:02:f3:9e:11:cb:49:ab:cf:
                    10:3c:7c:ea:10:2f:02:d6:44:75:b0:7f:b0:7c:c6:
                    94:93:c2:37:8e:9d:ee:c8:dd:4e:f1:30:d9:59:10:
                    22:56:95:01:97:1f:65:97:6d:79:55:73:5a:15:f1:
                    4b:a7:3a:68:f5:e7:a6:2e:df:1d:fd:98:73:65:55:
                    14:53:f5:c2:71:07:e3:22:84:76:08:6f:ea:dd:d5:
                    aa:5a:42:6d:38:d7:6c:f8:99:e1:17:a4:b7:1c:19:
                    d7:2e:50:6f:52:a5:67:c5:01:33:ba:32:05:3f:8a:
                    fa:09:50:3f:5f:83:96:77:9f:43:aa:96:f8:d9:62:
                    84:a7:cc:83:58:bd:30:9e:6e:12:8c:62:42:29:32:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:90:1A:59:79:55:17:88:C9:35:54:5A:5D:62:DC:E4:57:4C:49:22
            X509v3 Authority Key Identifier:
                keyid:78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:f5:b8:b1:9c:ce:fe:3e:ed:5c:99:e5:8d:5b:5c:00:03:
         27:14:85:ef:80:5a:7c:e5:bd:01:31:6f:2b:6d:5f:63:93:28:
         46:bc:7f:65:a0:92:1c:de:f2:90:2b:2c:53:8e:d8:a4:6a:a3:
         0e:ed:07:38:8f:4b:ce:6f:02:46:eb:55:06:19:4b:4e:5c:bf:
         05:28:d9:35:f8:8e:e5:8f:e4:e6:49:c8:90:64:a8:8d:c5:00:
         c3:07:70:ce:e4:eb:18:9b:93:7c:bc:9d:cf:14:66:80:36:bc:
         16:f0:92:0b:4c:d8:2f:3c:3b:f1:7c:47:30:80:57:4c:75:c9:
         ed:af:c0:e3:66:d1:23:a3:68:c1:1d:05:bb:4e:97:d2:64:70:
         4d:68:c0:32:2d:28:78:a2:13:41:e8:7b:f8:e8:26:6d:af:98:
         f2:03:4d:1f:62:1d:58:4b:34:67:4d:c1:cd:56:ba:ed:cb:25:
         8f:45:8a:bd:55:fe:f4:bb:a0:d9:e1:ae:40:e6:aa:6b:0c:ee:
         12:42:1f:6b:0b:7d:47:92:fb:7f:c4:9e:33:0d:8b:97:cc:cc:
         2a:79:55:e8:8d:ad:da:d3:98:fc:b7:8f:61:45:c5:7c:89:82:
         01:e5:d4:29:3b:9e:51:f7:b9:cf:ca:59:3b:e7:6a:6f:63:72:
         23:5e:cd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:27:39 2024 by rpki-client on console-ams.rpki-client.org