Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File:                     7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier:          2cFf8jDJzQ+rTR1CbZM4AOi5V2j0cLdgw3sMOUAmDT8=
Subject key identifier:   44:F3:46:E5:69:AB:D0:5E:8C:EB:D6:D1:34:B4:88:2E:0C:27:EE:21
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer:       /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial:       018F3A0B93D32FF53FB3437044283F1A85B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number:          0F19
Signing time:             Thu 02 May 2024 16:03:08 +0000
Manifest this update:     Thu 02 May 2024 16:03:08 +0000
Manifest next update:     Fri 03 May 2024 16:03:08 +0000
Files and hashes:         1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: SmUjsc/c3cfJZrIgUkhgnYvfvTs8iB6h5naoSlfF1z0=)
                          2: fnUd64RcqArIIMKsWntgqJ5zvvQ.roa (hash: IvC5iacG5hnTqxMgGBc2F7V8HIDDO0UYlxAH9DpLjTE=)
                          3: zTDViT9SoQIFdivu4-5DuLRG1j0.roa (hash: su6Fx7uRT6PnNQz7U0TJNpPXPqGNKQuhI5XJ1u17kFQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:93:d3:2f:f5:3f:b3:43:70:44:28:3f:1a:85:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
        Validity
            Not Before: May  2 16:03:08 2024 GMT
            Not After : May  3 16:03:08 2024 GMT
        Subject: CN=44f346e569abd05e8cebd6d134b4882e0c27ee21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:50:44:ec:aa:d5:b6:9c:62:9f:43:2b:e9:f7:
                    1d:5f:39:3f:a3:c3:9d:ad:2e:03:64:74:fd:56:fa:
                    93:1f:39:3a:d6:25:3b:95:a5:2d:e1:f2:8c:b9:3d:
                    c3:8b:90:ed:ad:73:7e:5b:71:f9:1d:29:c0:68:94:
                    f4:4f:6e:eb:a0:49:eb:ab:b2:fc:6e:96:07:92:81:
                    60:f8:33:93:7a:cb:f7:e3:a4:1f:78:f2:2a:69:4d:
                    d0:90:21:52:41:4f:a9:f9:6c:0b:17:26:7d:1c:76:
                    1c:b9:51:50:75:fe:ea:99:f6:18:5c:fe:68:48:a8:
                    52:e2:5c:23:b2:57:51:b9:16:fe:d6:ed:3e:69:c3:
                    2a:b6:48:25:f8:c6:ca:88:cc:ea:57:78:5d:78:d7:
                    b0:96:45:a1:cd:c7:22:13:70:65:30:0c:40:75:d0:
                    05:38:c8:7b:da:47:75:69:e8:04:68:3d:e7:12:2a:
                    cf:2d:6c:fa:c0:3b:b8:a6:99:2d:26:ba:aa:a8:2b:
                    46:9b:b4:df:fe:ba:d0:50:a3:b6:87:eb:32:f6:2f:
                    a5:e1:d6:cd:c0:53:5b:f8:34:22:77:74:e6:74:7a:
                    cc:e6:1b:a1:ba:af:24:ca:50:24:57:98:65:0d:dc:
                    c9:44:4e:de:7d:93:51:e0:54:08:e3:bd:19:42:60:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F3:46:E5:69:AB:D0:5E:8C:EB:D6:D1:34:B4:88:2E:0C:27:EE:21
            X509v3 Authority Key Identifier:
                keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:72:3c:b7:b5:c3:9e:bd:9c:92:85:99:e0:c5:47:fa:b6:e0:
         5d:8e:13:4d:22:6e:3a:4a:af:8c:97:d5:6b:2f:f4:bd:11:50:
         3d:6a:2e:8f:4d:43:57:0b:76:51:a8:06:42:5c:af:d9:5b:74:
         59:0f:79:a6:70:17:ff:b5:1b:b1:78:47:ef:4c:b3:65:fd:c1:
         c9:cc:20:e7:78:3b:8f:76:e8:11:60:67:58:e5:39:87:44:57:
         41:84:12:ea:4a:d2:a1:14:60:9c:94:42:6d:cc:b6:42:a2:10:
         22:1b:ef:b4:b2:31:e9:c7:e1:a9:29:fd:4c:05:67:d9:06:db:
         17:21:26:6d:24:86:85:65:4d:13:5a:b9:01:3a:21:f4:49:7c:
         25:9c:d3:c5:13:c4:20:e7:ab:59:81:f3:91:c0:30:ec:d5:75:
         2a:c5:5d:49:e1:68:41:1b:cf:4d:91:8c:06:38:db:28:26:b5:
         e7:a6:4f:73:bf:13:48:f7:b1:3b:20:e5:23:56:5e:23:68:0d:
         92:a9:98:19:4b:eb:f2:a1:7b:df:89:4a:e7:1b:1b:88:0c:be:
         fe:75:52:31:df:8a:97:b1:9a:a8:32:50:c0:e1:ee:2a:73:63:
         b7:0c:9b:14:c4:02:31:ad:bd:b4:db:ad:f9:1a:86:5e:5c:7a:
         0e:21:a0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:18:45 2024 by rpki-client on console-ams.rpki-client.org