Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File:                     2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier:          TevacM3PXinwVV3wIAKMAUQfvd6x/wfKi1S+hJ+FuEg=
Subject key identifier:   A7:ED:53:D0:25:C7:E5:DC:6E:9B:97:FE:95:8B:4D:EF:FD:B0:FA:1A
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer:       /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial:       018FF55DF05B2E193DCCF9AD7EA05A7A30B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number:          11B1
Signing time:             Sat 08 Jun 2024 01:02:05 +0000
Manifest this update:     Sat 08 Jun 2024 01:02:05 +0000
Manifest next update:     Sun 09 Jun 2024 01:02:05 +0000
Files and hashes:         1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: PNjgAn3Yc9+bcjn5oWhafHTLTjsn+rpPs1m1Y6DiVjg=)
                          2: zN7_RrZdRYlSPyOBLctAxWQqlO4.roa (hash: LZTXhHdIqM+KvPW3XYV2xi0YG26jh+2LAZY5dpXrZlo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f5:5d:f0:5b:2e:19:3d:cc:f9:ad:7e:a0:5a:7a:30:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
        Validity
            Not Before: Jun  8 01:02:05 2024 GMT
            Not After : Jun  9 01:02:05 2024 GMT
        Subject: CN=a7ed53d025c7e5dc6e9b97fe958b4deffdb0fa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:d0:42:e6:1e:b3:07:15:53:88:5a:ac:d9:
                    0e:eb:07:3f:20:58:48:56:e0:f5:92:6b:d7:a1:94:
                    f2:fa:2a:a0:d3:21:89:8b:23:7c:01:0e:e9:b7:d2:
                    df:00:a3:ed:e1:6f:32:b5:2b:41:85:2e:db:b4:e6:
                    05:6b:fd:16:93:84:81:ec:d2:b1:42:80:9d:ba:e3:
                    92:10:35:08:b3:a7:48:9f:02:cc:b1:43:e2:1e:1a:
                    b1:06:61:92:30:ba:a7:4d:4d:9c:9b:4e:fd:6b:86:
                    41:da:61:18:d5:e1:39:3b:e6:61:26:96:b1:e3:13:
                    91:6c:23:a7:34:25:d8:25:6e:68:2c:a5:01:26:dd:
                    11:d7:3e:7e:d1:57:d6:b7:9a:60:5f:4b:16:0a:ab:
                    78:ea:67:d2:e5:64:df:db:93:25:bb:64:7f:f0:04:
                    13:3d:8a:c4:dc:40:11:e6:e0:ae:67:e6:4c:ad:ac:
                    01:97:de:25:07:81:1c:0e:28:c0:d3:aa:c8:e5:dd:
                    65:f9:ab:18:c8:77:f6:79:11:56:3b:78:ca:3d:b2:
                    ce:70:39:1b:96:a8:ee:67:b5:b2:fb:3c:41:af:52:
                    8a:d0:98:e2:3a:d4:c7:2f:99:53:c8:40:d4:72:58:
                    d0:b1:54:d0:4c:54:08:04:5c:4f:c4:3e:72:83:37:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:ED:53:D0:25:C7:E5:DC:6E:9B:97:FE:95:8B:4D:EF:FD:B0:FA:1A
            X509v3 Authority Key Identifier:
                keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:cd:17:fd:21:14:4a:7f:bd:f8:d3:b3:7d:b0:4c:1b:10:91:
         41:3d:12:6b:f0:6d:c4:25:16:71:79:85:c9:f0:28:79:a9:9d:
         3b:b8:66:88:48:21:26:d0:ec:e0:96:39:f3:37:3d:76:5d:0f:
         99:0a:7e:b5:25:47:cc:cf:6f:8f:a7:48:66:47:e5:d5:37:86:
         4c:7f:8e:db:41:b1:ee:ec:6f:79:73:77:fe:62:72:27:15:d1:
         ac:03:57:84:9d:25:f7:ee:2c:5a:cf:d9:97:99:ac:41:fe:18:
         3e:11:54:79:c4:75:6f:29:9c:fd:ae:68:69:77:1f:b7:c7:76:
         54:31:ba:72:1d:a6:98:3b:ad:ad:9a:92:64:01:a3:c6:38:2f:
         1c:ce:01:97:21:a5:3c:05:e5:aa:8a:d0:19:3c:34:23:59:04:
         78:a3:7e:9d:d4:71:3a:92:83:84:13:9b:4b:3f:5e:36:f7:63:
         32:a6:83:6a:5d:cc:0b:62:ff:9c:31:65:28:81:1c:43:42:7a:
         10:f0:a3:b9:58:d2:bf:50:50:2e:32:37:e9:3b:a5:81:c7:83:
         0d:6a:f9:80:88:fd:0f:45:21:3b:d2:21:63:96:13:8f:b5:96:
         4b:51:68:85:6d:0f:d7:31:e9:b3:63:98:f9:00:70:2b:19:10:
         36:73:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:26:57 2024 by rpki-client on console-fra.rpki-client.org