Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File:                     rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier:          UGk1+PbPJWnl3j9FLtA2rUnrY1baEKLe8PvtbXRdxsw=
Subject key identifier:   7E:67:85:4A:FA:5B:EF:29:6F:C1:E2:06:F8:37:3A:20:F7:86:44:C3
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer:       /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial:       01902ACB3A6BA32EF408F748DDB446A9F2D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number:          09C7
Signing time:             Tue 18 Jun 2024 10:01:20 +0000
Manifest this update:     Tue 18 Jun 2024 10:01:20 +0000
Manifest next update:     Wed 19 Jun 2024 10:01:20 +0000
Files and hashes:         1: IvhsguSvRJBn9msutzOif8QTQGw.roa (hash: lc9Q4tSAFqRYBisGAkegcvO3Q2xLC84rQKnj7W9rufU=)
                          2: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: m3K6IFQS1mP4o1dWfDcfEQ4OXdeQr0PvUjnfpgPI7HI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:cb:3a:6b:a3:2e:f4:08:f7:48:dd:b4:46:a9:f2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
        Validity
            Not Before: Jun 18 10:01:20 2024 GMT
            Not After : Jun 19 10:01:20 2024 GMT
        Subject: CN=7e67854afa5bef296fc1e206f8373a20f78644c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:95:ab:44:10:8e:d5:5c:54:17:65:d5:ad:
                    01:86:6d:28:ed:45:1b:7e:11:4f:68:80:33:1f:30:
                    97:96:74:e6:0f:b7:7f:73:14:ee:18:5a:f8:c1:f9:
                    db:60:71:af:ab:22:ed:13:5a:37:5a:80:7b:b2:88:
                    67:96:69:7b:80:10:49:22:d8:8f:a4:23:b2:74:1b:
                    77:39:cc:bb:50:8e:86:ec:ea:bd:3c:b7:93:8c:26:
                    01:e9:de:59:a6:ba:e9:b1:ba:4c:ac:5e:2c:d7:e9:
                    77:20:12:88:b1:8d:87:4c:1c:58:60:03:10:b9:40:
                    8a:3c:da:1a:b9:a7:19:cd:4c:17:80:9b:a2:c4:1b:
                    5b:79:6f:3e:cd:e4:14:41:07:95:ad:a5:87:bc:68:
                    2b:dd:10:b9:00:7b:e5:44:2d:ba:d1:05:f5:3d:3d:
                    0e:84:77:6c:27:f9:d6:87:ab:93:45:c1:4e:a4:39:
                    f2:20:ba:c2:a4:2c:0f:ac:58:62:78:2c:52:f0:4c:
                    d7:10:ec:0f:ee:01:eb:30:98:71:57:78:20:fd:23:
                    b5:00:50:be:9a:fe:6b:89:d9:3b:99:0f:2a:67:9a:
                    3e:19:d0:66:ac:40:4f:e3:22:8a:c1:96:b3:cd:30:
                    0e:10:20:f0:ab:d5:d7:07:5e:b2:7a:86:3b:46:cb:
                    07:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:67:85:4A:FA:5B:EF:29:6F:C1:E2:06:F8:37:3A:20:F7:86:44:C3
            X509v3 Authority Key Identifier:
                keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4c:6d:a5:03:c6:ba:41:f1:d3:a5:ff:3d:0a:3f:67:43:4f:
         11:47:70:d5:d8:ea:b5:b4:ef:cb:96:19:e4:bd:92:f9:36:c6:
         6d:0d:56:37:a3:41:35:80:ef:c5:5c:b5:99:ab:a1:17:0c:0b:
         99:ff:92:23:b9:c3:90:05:1b:0e:3e:c4:c5:6a:7b:81:14:36:
         6e:fb:bc:9b:55:93:09:49:59:1f:9c:e9:03:a7:f0:ad:0a:d8:
         7b:16:c1:43:85:47:08:69:ff:2d:04:b7:c9:2f:88:ab:69:43:
         6c:64:f5:62:ac:d7:e2:3c:14:4b:be:c3:79:aa:a8:52:25:e0:
         e7:c3:b7:6f:8b:fa:e3:76:32:38:bc:5f:23:11:38:7a:ee:01:
         6e:b5:ae:b0:63:0b:7b:cd:b5:b5:fb:38:25:54:dd:47:58:e0:
         83:d5:50:5d:59:db:70:d7:73:c3:dc:55:42:af:76:f6:68:04:
         39:cb:30:8a:f9:6d:48:a2:dd:4a:67:57:7f:60:c8:de:ce:93:
         64:03:89:72:e3:27:68:07:ec:2c:66:71:e9:84:07:a5:1f:3c:
         3a:26:a4:49:84:91:88:e5:b2:55:11:d5:1e:25:d4:81:3f:8e:
         7f:99:e3:5d:81:59:d1:3b:98:69:ac:f5:e8:84:d1:54:3d:ba:
         1b:33:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:41:57 2024 by rpki-client on console-fra.rpki-client.org