Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File:                     gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier:          pUoKm0DzypTtP8dB+BoCqr5z8bAmtFzLorqo5i0Ll0A=
Subject key identifier:   CE:21:57:A1:08:88:33:F8:8D:11:0A:23:A9:3C:13:6A:6A:6C:FE:C9
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer:       /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial:       01905210EC5808856B7C6A4B45B95EB33C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number:          074B
Signing time:             Wed 26 Jun 2024 01:02:39 +0000
Manifest this update:     Wed 26 Jun 2024 01:02:39 +0000
Manifest next update:     Thu 27 Jun 2024 01:02:39 +0000
Files and hashes:         1: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: u+Qx/HQ/sZ3Mt0nwzDhcTyPO7di+mtMR35zFTO7Ws70=)
                          2: smdfCn23fh8JYRII-Pg0omiSRRk.roa (hash: nbXwbck6glp++Jn4Nwke7XqmGFW2IDd02q4RHxLrm+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:10:ec:58:08:85:6b:7c:6a:4b:45:b9:5e:b3:3c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
        Validity
            Not Before: Jun 26 01:02:39 2024 GMT
            Not After : Jun 27 01:02:39 2024 GMT
        Subject: CN=ce2157a1088833f88d110a23a93c136a6a6cfec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:9a:53:43:bd:4c:8b:aa:37:18:41:76:aa:
                    45:99:af:6d:d0:c8:b9:f6:dc:30:71:d7:bd:48:f7:
                    54:39:5d:0d:63:67:de:cb:de:b7:63:a6:43:2b:46:
                    17:d2:a1:43:08:9b:18:aa:42:58:2f:1c:22:12:d3:
                    a6:15:af:62:d6:71:c8:fd:9e:52:85:3f:06:04:2f:
                    31:7a:7d:92:9f:a6:3b:dc:77:09:72:79:ac:19:44:
                    43:8c:a8:b7:bb:06:16:3d:68:d3:f4:3e:ac:fa:1e:
                    19:e8:9a:b8:31:13:dd:48:d1:67:6a:d5:76:b6:53:
                    88:21:1c:4d:b2:df:9e:a7:da:ee:98:a3:58:d6:6c:
                    7f:02:47:2b:74:b2:56:e3:95:8c:65:9d:f1:c3:e3:
                    c3:6f:d4:8d:a3:c6:7e:d1:04:5f:ff:14:a5:0c:98:
                    5e:34:3c:71:e1:1d:77:96:a5:f1:e9:94:f6:ca:4d:
                    a8:ed:d8:92:72:7d:58:18:b6:55:de:d4:30:7d:bb:
                    73:3d:50:03:5b:79:85:c8:06:c9:1a:26:07:fc:c6:
                    1b:b8:20:13:59:ea:f7:40:7c:76:31:93:56:b1:92:
                    5c:55:3b:e6:70:d0:4e:b8:58:3d:6c:d7:49:79:28:
                    a3:9a:f9:4c:93:16:4a:ad:44:92:80:d0:dd:7c:29:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:21:57:A1:08:88:33:F8:8D:11:0A:23:A9:3C:13:6A:6A:6C:FE:C9
            X509v3 Authority Key Identifier:
                keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:57:0a:f4:27:4a:db:1b:9a:23:81:67:b1:a2:2e:09:a8:8f:
         d9:b9:69:13:a8:1e:52:a0:f9:b8:68:f6:bd:79:76:17:82:d7:
         66:97:5c:9e:46:b7:3a:62:80:94:8d:e0:53:9f:fa:a2:85:af:
         5d:c9:b0:f4:ad:ca:70:fc:24:92:ce:64:57:63:fe:21:19:ed:
         da:3d:e7:4d:e1:ae:7d:eb:5e:1d:d8:71:01:3e:d7:b9:c4:75:
         6d:f0:b2:92:7a:af:ee:f1:1a:02:c7:83:48:1b:43:3c:f1:2b:
         f9:08:9b:77:96:41:40:41:ed:57:38:cd:6c:b2:4b:93:dc:f5:
         0d:ca:ad:50:5f:49:3c:42:69:2d:a2:bd:2c:05:73:83:f3:50:
         65:15:67:78:9f:f5:b6:87:67:cc:dc:64:99:38:f3:94:0f:eb:
         73:c9:98:8f:73:af:45:eb:55:24:83:d6:30:87:41:14:0b:0e:
         6d:12:99:00:d0:59:1c:d3:d4:cc:8c:b8:5a:ec:91:91:18:a8:
         4d:6b:e2:a4:4e:60:41:69:3e:49:a1:c9:f5:a7:08:53:1a:c8:
         b7:79:25:1a:c6:7e:f5:94:bf:61:00:b5:19:68:b5:68:bf:bc:
         f5:b3:64:d8:0a:59:6e:cb:3f:90:13:65:48:b7:d9:ef:59:bb:
         1d:33:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:40:44 2024 by rpki-client on console-ams.rpki-client.org