Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft
File:                     bT7hpSpdZbkJHeWltGT7lwMtDps.mft (raw, json)
Hash identifier:          NrvP/WA09nD4RHUPGZj9wJtGs/ObEBGnJJmPKKegI1c=
Subject key identifier:   1B:9E:ED:D7:98:CC:86:86:E2:E9:AD:25:2C:F8:89:BD:5C:F3:77:8B
Authority key identifier: 6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
Certificate issuer:       /CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
Certificate serial:       019029EF4D9A1CC1A7594985F4B061FDA522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft
Manifest number:          11CD
Signing time:             Tue 18 Jun 2024 06:01:07 +0000
Manifest this update:     Tue 18 Jun 2024 06:01:07 +0000
Manifest next update:     Wed 19 Jun 2024 06:01:07 +0000
Files and hashes:         1: 1Kp4l7Fz-817ZWCEq36EPoXYZvs.roa (hash: dXB0bZbEKjKue9zI1BcR+QF5ndJWBzoMRUV5xzPq4Q0=)
                          2: _QEEguz0rsLjAlxLJrbXWOpbAqM.roa (hash: oAG9zjfg1Z9ShV7XKrL5zWlvMrG2NWInmeuK8dIOeKo=)
                          3: bT7hpSpdZbkJHeWltGT7lwMtDps.crl (hash: 23vWN96bm9JTNlTz/eSaaMwqGfNXkQifCmys1HRoLfI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:ef:4d:9a:1c:c1:a7:59:49:85:f4:b0:61:fd:a5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
        Validity
            Not Before: Jun 18 06:01:07 2024 GMT
            Not After : Jun 19 06:01:07 2024 GMT
        Subject: CN=1b9eedd798cc8686e2e9ad252cf889bd5cf3778b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:f9:cc:9e:51:1a:97:06:5e:03:c6:b1:72:
                    78:e0:34:de:7b:5f:64:ad:a9:0b:aa:dd:64:ac:16:
                    ac:63:2c:92:9a:42:c0:a2:a6:b9:b4:b2:eb:e6:65:
                    8d:81:9f:14:54:2d:af:a1:d6:06:f4:da:22:ad:75:
                    e8:41:44:4c:39:94:5f:a5:91:d1:60:3f:2d:d2:7c:
                    b8:08:09:e0:48:6c:9b:fd:6d:dd:8b:75:c2:26:83:
                    e7:e3:e1:ac:d7:95:9a:de:6c:d5:83:95:85:d3:75:
                    41:e8:bd:38:97:66:ad:f0:d6:73:17:ad:3e:68:3f:
                    88:ca:64:57:9f:8a:c4:32:9e:ae:d5:05:cd:0b:f2:
                    ae:7e:e6:d2:09:c5:bb:e2:d7:6c:77:32:d4:60:90:
                    0d:d2:95:15:a2:87:c2:d0:2e:ba:be:fb:88:41:77:
                    7b:d6:15:09:c6:74:66:b4:77:94:97:35:30:25:74:
                    cb:27:4c:79:0b:e0:f4:64:33:d1:59:ab:97:54:dc:
                    36:b7:6c:e6:d9:d8:cf:f2:38:90:e4:be:8f:9b:d0:
                    83:1c:53:84:41:c1:fc:5c:46:41:a7:27:53:2c:18:
                    c9:e7:f7:03:61:c2:cb:9b:b4:87:08:da:08:2f:0f:
                    38:f3:5c:68:b7:49:66:d1:4e:b0:9e:49:f7:d5:81:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9E:ED:D7:98:CC:86:86:E2:E9:AD:25:2C:F8:89:BD:5C:F3:77:8B
            X509v3 Authority Key Identifier:
                keyid:6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:df:1a:f9:0c:35:4e:bc:6f:92:4c:e0:24:df:ce:99:d7:a3:
         7e:7f:17:67:16:af:03:b7:b9:c3:f7:61:c3:3a:a8:ba:e5:b5:
         b5:c6:1a:f0:8f:9b:40:71:5a:df:d4:25:db:5d:76:1e:a5:7a:
         39:fd:3c:12:82:1c:11:d5:c1:d3:a1:e2:9b:89:79:80:40:af:
         47:3a:90:f1:ee:b5:62:29:fe:91:b0:09:68:e5:2f:87:39:82:
         16:6e:ba:38:58:5e:e5:09:bc:50:17:22:c0:21:b2:f4:a6:ae:
         8f:8c:4f:3f:41:fe:a6:82:d3:89:74:7b:d0:57:af:bd:c6:e6:
         f4:84:47:56:3a:ff:e1:7a:b4:17:94:bc:25:02:10:38:8c:7c:
         a3:42:62:23:49:22:30:9a:43:69:81:7f:a1:e1:86:11:f2:d3:
         1e:48:95:a3:60:6c:47:49:17:5b:52:d1:8e:90:38:ac:7a:dc:
         89:c7:dc:aa:ae:ae:c5:da:94:3e:8f:7a:14:5e:16:74:28:fb:
         48:f1:70:4f:2e:b3:67:9f:82:c6:06:e3:fd:58:6c:29:67:50:
         d3:0d:34:d0:5f:55:45:30:f9:98:dd:0b:81:2b:5f:1c:f0:68:
         3e:13:a2:cf:b6:0d:c2:d1:ea:64:52:27:04:bd:11:0f:a0:82:
         8a:ca:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:18:36 2024 by rpki-client on console-fra.rpki-client.org