Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
File:                     F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json)
Hash identifier:          Z08LaYkHoVo7etuHaEfZECcFs5ARiIK2qBSn/yitmf0=
Subject key identifier:   23:72:B7:77:99:5F:C7:A5:03:F5:1F:29:73:6C:E9:D8:B3:D4:46:48
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Certificate issuer:       /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial:       019053FF6147126888460252022BEC968DED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
Manifest number:          11E2
Signing time:             Wed 26 Jun 2024 10:02:43 +0000
Manifest this update:     Wed 26 Jun 2024 10:02:43 +0000
Manifest next update:     Thu 27 Jun 2024 10:02:43 +0000
Files and hashes:         1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: q52n4hzhaaWU1JY+RGhmDtU8VtfCO7G6cDcxrb/wVHI=)
                          2: NlAquE-wusMvxudyA1NNhlbBl4I.roa (hash: 16tNWajnPVglB4KppnBNNbll+7CG/eOLqdusqicr2b8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:ff:61:47:12:68:88:46:02:52:02:2b:ec:96:8d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
        Validity
            Not Before: Jun 26 10:02:43 2024 GMT
            Not After : Jun 27 10:02:43 2024 GMT
        Subject: CN=2372b777995fc7a503f51f29736ce9d8b3d44648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:db:47:79:27:9c:b0:c4:e9:d4:d6:03:98:67:
                    6a:f6:c1:50:91:8b:90:74:fa:bd:5b:d3:00:a3:ee:
                    9e:71:7d:69:9c:10:b1:e6:01:d9:44:be:3a:fb:8d:
                    54:6d:6b:f4:2c:ae:08:68:0e:a0:ae:66:08:f8:e7:
                    0b:ce:04:d3:91:37:28:c2:3d:13:94:1f:69:ed:52:
                    b3:47:e2:0a:ff:34:8a:90:fc:7f:82:7d:a5:cc:c3:
                    b0:06:7d:80:a8:d6:bd:59:99:83:f3:88:30:2d:5c:
                    4e:6b:76:a4:e3:4e:20:e1:38:d4:2f:a4:d2:c4:7a:
                    0c:3b:06:49:32:20:16:44:11:91:0e:61:53:90:5a:
                    f2:2c:a1:07:7f:00:87:08:df:52:bb:d1:1e:c1:21:
                    cf:6c:c7:e8:81:37:8f:03:8c:c9:e8:de:7f:2a:41:
                    0b:06:d5:b6:46:35:35:5f:4f:16:b8:5e:b7:70:e0:
                    94:49:ba:ad:93:b8:78:cd:34:1e:21:cb:db:80:47:
                    55:ba:1e:f7:1b:6c:a0:c7:f6:4e:7b:e3:28:1d:b1:
                    48:98:fa:6b:0d:bf:c7:b4:88:89:31:2a:1c:20:56:
                    8c:eb:11:75:14:25:ab:3f:f4:7c:f1:18:ad:f2:43:
                    17:c2:ea:72:c5:c8:bf:37:71:a1:9e:a6:cd:fe:d1:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:72:B7:77:99:5F:C7:A5:03:F5:1F:29:73:6C:E9:D8:B3:D4:46:48
            X509v3 Authority Key Identifier:
                keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7c:9c:65:a1:48:34:aa:46:db:03:c1:73:f5:e1:9f:27:25:
         8b:03:68:28:5f:d1:27:bb:2f:16:7d:19:9a:bd:46:76:a6:3d:
         bf:4e:4a:17:24:eb:b9:e5:9d:0d:78:11:7d:b3:49:a9:21:c7:
         e9:2d:1c:8d:e9:53:9e:e6:3b:de:cb:94:18:6b:67:68:92:9c:
         0b:b1:48:27:62:74:d5:e5:e4:6b:a1:42:62:fd:05:20:83:9b:
         6f:b1:3c:a8:42:f9:01:07:dd:68:de:00:9d:13:d2:a8:0c:69:
         b5:b5:94:2a:83:d3:ed:ef:9f:0f:57:6d:c8:f1:72:b6:d0:8c:
         6a:be:55:37:18:39:98:f1:58:65:9d:5c:8f:13:82:84:d3:20:
         01:77:38:5b:8b:ba:fa:49:ff:f8:18:15:88:46:85:72:ca:c1:
         eb:46:98:e5:c3:7a:f0:a6:3f:19:7b:ed:19:25:bd:e1:27:49:
         65:c1:e9:fa:5f:6d:74:00:3f:39:fc:29:e0:ce:3c:21:16:1e:
         dd:67:15:1d:c9:36:75:94:24:c3:47:36:a4:97:ba:c2:3a:b8:
         80:4a:38:9e:df:c1:bc:80:ca:b2:f6:fa:24:43:d3:78:70:88:
         8a:85:e0:0b:04:c2:50:12:6c:14:2e:e5:12:2d:2f:94:11:4a:
         a5:d3:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 13:54:38 2024 by rpki-client on console-fra.rpki-client.org