Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File:                     65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier:          o02ChI3ib6AyI5F/3QEbHNQchIZgEd4F/tR4WJhzAmk=
Subject key identifier:   1A:2D:5E:52:70:82:5D:C0:1A:EF:F1:03:09:B3:36:76:B6:31:18:F2
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer:       /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial:       019060DD5EC37F39338AE1BD0F211BFDE2DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number:          74
Signing time:             Fri 28 Jun 2024 22:00:38 +0000
Manifest this update:     Fri 28 Jun 2024 22:00:38 +0000
Manifest next update:     Sat 29 Jun 2024 22:00:38 +0000
Files and hashes:         1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: k+Y4/MS9coolBEhrSZwLjiwgEgoCtKFi4CPAjLT3xEs=)
                          2: KOXHwZwXOkEl6XTikJWAKunPc5M.roa (hash: WaAT9W3gPWCb4VheN+iicDYoYhDP1RCHMn+Q9BQnEb4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 16:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:60:dd:5e:c3:7f:39:33:8a:e1:bd:0f:21:1b:fd:e2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
        Validity
            Not Before: Jun 28 22:00:38 2024 GMT
            Not After : Jun 29 22:00:38 2024 GMT
        Subject: CN=1a2d5e5270825dc01aeff10309b33676b63118f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:23:16:67:ca:95:16:f5:48:0e:6f:ab:f4:
                    ff:71:e2:d0:c6:14:89:df:8b:04:2f:cf:c8:34:a4:
                    68:35:66:9c:e3:d9:60:ae:97:2a:69:8b:68:9f:e1:
                    38:ef:70:a2:40:5f:5f:17:2d:5f:be:66:06:49:d1:
                    e3:11:bc:ea:30:b5:ef:f4:ee:f2:5b:a6:45:f9:e2:
                    7b:74:47:16:72:36:2f:17:63:89:d9:c9:77:2c:d1:
                    2f:c4:66:5d:8c:67:7a:37:84:a0:59:25:27:55:cf:
                    d6:5e:84:b0:f0:83:10:99:b4:50:71:2e:40:05:4b:
                    06:05:f1:da:d9:0c:45:d9:24:10:90:d2:78:8f:ef:
                    3a:b1:f2:ab:fb:5a:c2:8e:5a:6b:dc:1d:33:93:e0:
                    b1:ca:98:7a:d7:ef:d7:1c:aa:0b:7c:bc:6b:0d:68:
                    34:55:68:7d:51:6c:7d:4b:af:44:0e:13:f2:69:01:
                    17:90:49:85:ea:ed:cf:7e:75:89:63:5d:f2:70:a1:
                    f9:e4:d6:49:0a:dc:6d:87:5f:bf:28:73:01:40:ac:
                    79:fc:8a:ff:90:15:68:b3:3e:3b:cd:80:6a:b0:41:
                    9d:9a:e5:9d:75:c4:e1:7d:fb:c1:be:7a:d2:13:57:
                    36:01:01:b4:0f:7a:e8:55:d0:f7:7e:48:1c:89:1a:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2D:5E:52:70:82:5D:C0:1A:EF:F1:03:09:B3:36:76:B6:31:18:F2
            X509v3 Authority Key Identifier:
                keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:07:de:50:e7:e4:5a:11:0c:7d:bc:ca:67:13:90:84:db:e7:
         f5:cc:3a:72:4b:69:4b:e7:9d:20:a1:86:a5:49:97:7e:b0:ec:
         a6:90:15:2a:fc:b2:10:f3:46:a1:90:74:e3:14:fe:51:1a:ec:
         0c:0c:ce:31:0b:6f:60:b6:ed:e4:e5:f2:00:2f:e7:a7:14:50:
         c6:2c:55:57:3e:28:e1:96:ad:e1:03:a5:bd:ee:24:fa:2e:e5:
         87:33:20:ea:88:cd:25:51:7e:bb:aa:1a:df:23:4e:36:68:2c:
         b4:9d:92:d4:71:6f:9a:f9:a6:4d:c5:63:67:f1:9d:0c:38:89:
         38:7e:81:ff:2d:58:b0:0d:5b:9d:5a:b3:2b:50:e0:da:b5:fb:
         4c:7e:a4:22:b3:1a:20:bd:de:d3:fa:d8:a8:e4:5f:a6:65:6f:
         6f:0b:c6:ef:29:fd:03:95:93:4e:12:f4:d8:4d:ff:6f:d2:a4:
         0d:62:75:91:44:ba:28:0a:44:a5:74:90:6f:7d:2d:05:a0:c9:
         0c:b6:36:f5:4f:bc:e9:dd:df:cb:e8:7c:5a:d5:8b:33:60:9f:
         6c:be:c5:5a:5c:5a:2f:de:a5:9c:1e:7d:1d:b4:72:e7:48:75:
         9b:cc:c1:a9:11:4c:bc:e8:aa:c1:94:6a:cc:86:79:d9:38:f6:
         b3:80:5b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 23:11:43 2024 by rpki-client on console-fra.rpki-client.org