Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
File:                     R7dw6sinNj9MuKiMLjbi1pSzkGg.mft (raw, json)
Hash identifier:          cJzeCDG7gxmVaa5kW36pbbEDszefujPltNutymk7Qnk=
Subject key identifier:   48:60:BD:5B:72:28:C9:3D:6D:93:B8:AC:D7:2A:BA:B6:69:C2:C7:C3
Authority key identifier: 47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68
Certificate issuer:       /CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
Certificate serial:       019052105804F905EAF7ED92B5255C4A7D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
Manifest number:          11E0
Signing time:             Wed 26 Jun 2024 01:02:01 +0000
Manifest this update:     Wed 26 Jun 2024 01:02:01 +0000
Manifest next update:     Thu 27 Jun 2024 01:02:01 +0000
Files and hashes:         1: R7dw6sinNj9MuKiMLjbi1pSzkGg.crl (hash: zKFh3KLp5s/TCW5DrE3qP2a09yHNnBXxq7bjheSNxN0=)
                          2: as6MxFnsgQJMhgg-T5A7cfc8HbQ.roa (hash: 30x2scjO+6YRqx9FOQkN67odA/VLMtxpTl9Pkk+k/GA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:10:58:04:f9:05:ea:f7:ed:92:b5:25:5c:4a:7d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
        Validity
            Not Before: Jun 26 01:02:01 2024 GMT
            Not After : Jun 27 01:02:01 2024 GMT
        Subject: CN=4860bd5b7228c93d6d93b8acd72abab669c2c7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:f0:84:bf:68:43:56:70:88:bb:2c:ef:21:
                    c2:43:b4:2c:1a:c9:87:89:66:1c:c4:91:67:bc:86:
                    7f:4e:31:c8:76:87:3f:a1:1b:0a:56:62:84:0f:b6:
                    f4:ef:d2:6d:2e:56:d2:1e:6e:6c:44:10:0b:c6:bb:
                    41:e4:c5:15:33:49:d2:c4:f2:b0:26:02:52:d2:50:
                    d5:d0:0b:64:e2:83:66:31:06:ef:fa:73:7c:af:21:
                    67:89:39:e6:56:a4:8e:06:da:0e:8d:65:00:a1:bb:
                    29:94:c6:60:95:b1:26:7c:61:3c:f0:42:19:3b:a6:
                    f0:61:ff:3a:89:9d:68:a4:d3:3e:a4:b4:a1:46:13:
                    02:4a:ff:d3:59:ed:bc:cc:44:e2:a2:24:6a:2f:a4:
                    da:57:10:ee:6f:47:1f:2f:ee:2c:31:0f:39:d2:d5:
                    8e:fb:6b:7f:e3:c4:fe:9a:7f:7c:bd:a0:d5:c7:3b:
                    35:64:2c:86:2d:e3:9c:1a:f8:fc:c9:20:44:31:93:
                    e1:f3:80:cd:21:28:44:b1:67:ac:91:54:41:cf:67:
                    90:0b:c8:e5:74:bf:4f:31:cb:80:4f:b9:f6:01:13:
                    06:54:90:4a:ba:0d:49:99:18:9c:9c:13:82:e5:5a:
                    5e:8f:a9:3f:a9:af:62:71:18:f7:6e:0b:99:5c:2c:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:60:BD:5B:72:28:C9:3D:6D:93:B8:AC:D7:2A:BA:B6:69:C2:C7:C3
            X509v3 Authority Key Identifier:
                keyid:47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0b:d4:54:44:fc:cf:1e:04:3f:c5:58:2c:77:4f:ff:7b:74:
         ed:20:bf:55:a0:0b:0e:e1:2d:65:7f:6c:10:ae:4f:72:97:c5:
         a6:dc:78:9e:b0:98:c7:de:fc:22:c6:26:67:2b:02:d1:60:a2:
         bd:38:49:56:f3:21:77:86:1c:42:46:07:c3:bc:1f:ef:83:b9:
         94:bf:3d:0d:ef:a7:f4:72:89:b4:b0:8d:58:98:d6:af:3c:58:
         e0:97:c9:b9:31:b1:1f:fa:d5:6f:c7:d5:43:2c:fe:c3:60:39:
         44:f3:9f:33:ea:33:66:e0:58:0f:ad:62:b8:cb:46:ae:d1:96:
         98:61:0c:f4:0a:84:28:32:40:9f:14:00:d9:98:ef:5a:6f:aa:
         20:1c:1a:b7:07:ff:ba:92:75:b3:aa:c5:78:f6:c0:c0:9a:87:
         aa:18:5e:04:39:c2:3f:e7:df:45:d1:50:0f:74:32:b0:d7:f4:
         05:c3:3a:ba:6b:1c:29:25:82:43:7a:6f:32:60:c3:6f:e5:df:
         b8:1d:c2:9c:37:61:c3:32:81:5c:1a:61:f2:6b:83:83:f0:cf:
         46:b6:61:74:55:fa:ee:5c:91:14:13:e5:56:a0:5e:99:91:95:
         3f:67:20:87:69:87:b3:3a:af:00:5f:b3:4d:9d:0c:f2:1b:23:
         c2:a2:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:49:18 2024 by rpki-client on console-ams.rpki-client.org