Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File:                     4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier:          LlnDA298NIyHjeB4FC7bwI7lC+OJJUcviSSonzkloCI=
Subject key identifier:   C1:46:6C:D2:69:9F:DB:B5:73:F7:11:31:B4:FC:3E:EF:08:FB:0B:1E
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer:       /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial:       01906D1929F92FB335C72833FC4606F419D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number:          11EE
Signing time:             Mon 01 Jul 2024 07:01:23 +0000
Manifest this update:     Mon 01 Jul 2024 07:01:23 +0000
Manifest next update:     Tue 02 Jul 2024 07:01:23 +0000
Files and hashes:         1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: we36rxJnEIuzi/qu3uclxHtLugjwUDVbfY6ToUhqONM=)
                          2: wRmBVNq4SuoYg9dcKHhpfeRj7aY.roa (hash: sNRpqX/JzPTTZMrBK701JR5MnGSxwYGIwJ6vq9nAoKI=)
                          3: zOtV_DK1xosq3MHE9pYKpzb-774.roa (hash: +Vo8INTXMDNLEWtasKobgv8wqkDrL0yERi/1m3dU5mw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 07:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:19:29:f9:2f:b3:35:c7:28:33:fc:46:06:f4:19:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
        Validity
            Not Before: Jul  1 07:01:23 2024 GMT
            Not After : Jul  2 07:01:23 2024 GMT
        Subject: CN=c1466cd2699fdbb573f71131b4fc3eef08fb0b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:16:7a:02:9d:93:dd:be:bb:83:09:4e:8e:
                    10:df:26:de:4e:79:c8:b3:f4:03:a0:7d:ec:59:10:
                    75:d3:d8:a7:b1:e7:54:50:4d:98:6e:cb:93:82:48:
                    08:0f:2f:13:b5:83:d7:dd:ee:02:12:a9:5a:52:36:
                    ea:eb:ea:b8:26:10:25:70:e9:1d:74:e1:85:ad:69:
                    2a:f6:51:31:82:11:e3:9d:c4:44:a3:1f:37:c0:1c:
                    4d:75:30:6b:a4:5d:7a:d2:e4:98:0a:46:3f:38:6e:
                    a3:45:11:0d:cd:68:61:b5:f4:cd:72:7d:f6:68:15:
                    09:0e:04:ce:00:bf:70:9e:0a:07:2e:f9:10:83:a9:
                    7f:a4:92:5b:f1:6c:2c:27:4d:63:49:3a:10:f6:cd:
                    74:87:26:5b:fa:f1:2b:a7:1f:01:0e:42:f8:19:ef:
                    4b:a4:76:12:94:2e:6c:57:88:e2:11:b8:a7:3f:b4:
                    47:56:48:98:cc:c3:a2:69:55:88:8c:68:24:cc:59:
                    ff:23:47:13:6c:92:49:19:cc:74:69:03:79:d3:1b:
                    93:82:6f:1b:ad:c3:b9:5e:89:e0:a8:e8:c8:f0:58:
                    66:ac:8d:55:aa:d4:7a:14:0a:ad:b7:ac:9b:a4:5e:
                    89:71:8c:52:dd:7c:4c:66:26:d1:58:38:01:9e:dc:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:46:6C:D2:69:9F:DB:B5:73:F7:11:31:B4:FC:3E:EF:08:FB:0B:1E
            X509v3 Authority Key Identifier:
                keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b3:28:de:0b:66:c0:c8:5a:96:27:b0:98:1e:15:93:84:e7:
         b1:9b:07:52:f4:0f:28:11:e1:86:f7:f1:43:be:11:d9:d1:10:
         4e:11:14:8f:0f:06:dd:53:7b:cf:65:e7:50:3f:f7:a2:74:c5:
         ac:74:3a:e3:a1:cb:0e:51:fd:28:a9:75:33:e6:a4:bc:f1:9e:
         cc:a3:d6:58:b7:d7:79:7c:82:81:b0:ad:46:ab:5c:9d:12:e8:
         c7:21:65:ce:1c:fc:cd:5e:2f:a7:df:da:4e:8c:71:a2:ce:2f:
         ab:fd:29:b3:2b:64:1d:7a:27:3a:41:51:40:f8:c5:68:8a:f4:
         b1:dd:b8:4f:c7:de:89:97:0a:88:68:9f:83:90:38:84:3d:4e:
         7f:06:2f:af:f3:c4:0f:ed:7a:e5:f7:19:9c:8a:f0:71:63:2c:
         1d:e7:bd:a3:19:ad:a4:eb:a4:0b:1c:43:71:e0:24:17:77:f6:
         a3:ed:6d:2d:7b:36:33:c7:72:36:db:0a:f7:7e:33:24:3e:8c:
         b7:e1:9e:b3:a8:ee:d2:8a:9f:86:fd:e2:c7:eb:27:bd:01:18:
         e6:59:8c:5a:ac:c9:b6:41:ec:c6:be:99:e6:76:01:6f:19:50:
         80:83:39:65:ae:5e:f9:ac:a0:99:12:17:29:1e:fe:b1:3e:5b:
         33:64:e2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:01:11 2024 by rpki-client on console-fra.rpki-client.org