Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.mft
File:                     1HzOipfiAqi0Syb1f09wlQIY5Sw.mft (raw, json)
Hash identifier:          YpzTYWrjqUE4yEf9SaF/ShV7LxUEuuCxf+W4BdMMaTk=
Subject key identifier:   1E:F6:86:BC:0E:CE:3B:EE:B7:25:6B:5F:8D:25:C4:A4:C6:11:3D:B1
Authority key identifier: D4:7C:CE:8A:97:E2:02:A8:B4:4B:26:F5:7F:4F:70:95:02:18:E5:2C
Certificate issuer:       /CN=d47cce8a97e202a8b44b26f57f4f70950218e52c
Certificate serial:       01905BB75B242E58F3E1F86999836B1452C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HzOipfiAqi0Syb1f09wlQIY5Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.mft
Manifest number:          11E4
Signing time:             Thu 27 Jun 2024 22:01:01 +0000
Manifest this update:     Thu 27 Jun 2024 22:01:01 +0000
Manifest next update:     Fri 28 Jun 2024 22:01:01 +0000
Files and hashes:         1: 1HzOipfiAqi0Syb1f09wlQIY5Sw.crl (hash: 11n4dkO3EfqARBnm6NsC45j647gTtWuqXo7WjARU82Q=)
                          2: CdGWG0aXiAsGLPUNOk7AhXTL9XE.roa (hash: 3H/RxL9TDxwSfyX3/fSr2GyxuXMODweC7zGhAJGw3yE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1HzOipfiAqi0Syb1f09wlQIY5Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5b:b7:5b:24:2e:58:f3:e1:f8:69:99:83:6b:14:52:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47cce8a97e202a8b44b26f57f4f70950218e52c
        Validity
            Not Before: Jun 27 22:01:01 2024 GMT
            Not After : Jun 28 22:01:01 2024 GMT
        Subject: CN=1ef686bc0ece3beeb7256b5f8d25c4a4c6113db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:2f:c7:00:6c:76:01:08:78:d6:fd:70:e0:
                    51:60:56:15:81:07:a5:ac:46:5a:9c:b6:cb:87:9c:
                    0a:46:23:05:a0:1b:93:8a:3d:8d:f8:58:3b:eb:65:
                    9b:b3:2c:61:db:97:b3:8a:fc:38:4f:7e:a7:fb:5f:
                    a9:a1:92:8f:4f:61:87:df:b7:9f:62:ef:39:f4:bd:
                    d5:3d:05:53:c8:11:6a:77:1f:bc:be:0e:63:d9:1d:
                    50:26:3f:55:51:ff:5f:a3:c1:d3:50:cd:0d:71:00:
                    ff:e3:2d:09:80:a6:c6:0f:1b:fd:71:74:ce:c4:85:
                    b7:e9:fa:ec:30:7d:4c:53:91:c7:ba:3b:28:dc:51:
                    5e:81:c9:a9:ff:8a:db:f1:57:1b:34:27:f2:2a:58:
                    5d:82:8c:84:f8:c5:0d:41:ec:6b:41:5b:75:f9:4a:
                    f4:e3:f1:96:a1:c4:77:8c:41:84:45:fe:2b:1c:13:
                    08:60:60:9e:7c:5d:3c:24:88:7c:fd:3a:09:24:35:
                    7e:43:00:f6:d6:a7:e9:a1:55:97:11:16:95:8c:5d:
                    a2:b1:21:9f:14:ce:7a:bf:f9:bc:f2:3d:2a:86:36:
                    13:8d:e7:1b:7f:b6:f0:68:bf:73:a3:03:5a:ac:a0:
                    b3:ce:24:4a:2f:63:54:f5:2f:e5:91:43:0a:d2:0e:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F6:86:BC:0E:CE:3B:EE:B7:25:6B:5F:8D:25:C4:A4:C6:11:3D:B1
            X509v3 Authority Key Identifier:
                keyid:D4:7C:CE:8A:97:E2:02:A8:B4:4B:26:F5:7F:4F:70:95:02:18:E5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HzOipfiAqi0Syb1f09wlQIY5Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3b27b-d4d3-4904-9fb5-442b18aaf56f/1/1HzOipfiAqi0Syb1f09wlQIY5Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ee:41:3d:07:c5:fb:78:46:ce:c0:c7:f2:67:29:80:74:68:
         4b:a7:cc:46:02:fc:30:41:e1:0b:6c:e8:22:d6:e4:ea:0b:16:
         9e:80:8b:80:bb:10:08:b4:a8:66:53:39:96:21:92:77:db:73:
         1e:23:4c:d6:3d:42:ed:a2:dc:a4:f2:87:12:e8:97:74:91:e7:
         8f:da:61:f6:b5:5a:10:c4:4b:cc:b3:8c:3f:a3:9e:34:75:94:
         e9:a0:07:df:0e:f5:8b:8e:13:64:27:19:21:04:32:d0:61:ae:
         4b:79:ac:73:13:1c:28:13:25:2f:bb:c0:35:49:5c:a8:71:39:
         1d:a0:36:1d:61:bd:48:6d:46:7d:11:f5:c8:13:ba:f8:77:f1:
         67:ce:6d:9b:16:f2:71:a6:ca:a4:f8:1f:87:5a:15:3b:1a:cd:
         71:22:26:a1:a2:6a:41:12:06:1f:6c:2b:09:25:be:b6:87:1c:
         d3:25:66:35:ed:e7:ec:71:88:71:60:c5:b6:50:3e:b5:88:24:
         b3:21:eb:be:3d:69:f1:07:d3:2d:07:7e:89:02:66:64:d4:7f:
         7d:a8:60:c6:52:d8:68:1a:83:c1:75:35:8f:35:7e:c2:ef:39:
         19:c7:b3:f3:31:ad:6b:04:b0:fe:f8:77:d0:63:4a:1f:27:cd:
         4d:ae:da:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 07:31:24 2024 by rpki-client on console-fra.rpki-client.org