Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.mft
File:                     rZ7zxbA__FbdMPwdBg0ViPJksrM.mft (raw, json)
Hash identifier:          xtykwQCkdi/LxPgY6JO3+6FzjkbBkolrmNdSp6SsagM=
Subject key identifier:   6B:20:C8:32:06:EC:8C:6A:78:F6:EC:50:16:74:3C:3F:70:80:E6:6E
Authority key identifier: AD:9E:F3:C5:B0:3F:FC:56:DD:30:FC:1D:06:0D:15:88:F2:64:B2:B3
Certificate issuer:       /CN=ad9ef3c5b03ffc56dd30fc1d060d1588f264b2b3
Certificate serial:       01909502155D8A9E46480B73C16BECA93330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZ7zxbA__FbdMPwdBg0ViPJksrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.mft
Manifest number:          046D
Signing time:             Tue 09 Jul 2024 01:01:00 +0000
Manifest this update:     Tue 09 Jul 2024 01:01:00 +0000
Manifest next update:     Wed 10 Jul 2024 01:01:00 +0000
Files and hashes:         1: l2GuIY_FWphj2gl0U31gEf0g1kQ.roa (hash: HPG98+n1LY4e2Fj73UDLJRgrZeFnoNd+/qMmycP8EO0=)
                          2: rZ7zxbA__FbdMPwdBg0ViPJksrM.crl (hash: uoEv4uMOSvx1/KCDEeulPktaWvDtpngsRzD3FBrqMFY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZ7zxbA__FbdMPwdBg0ViPJksrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jul 2024 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:95:02:15:5d:8a:9e:46:48:0b:73:c1:6b:ec:a9:33:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9ef3c5b03ffc56dd30fc1d060d1588f264b2b3
        Validity
            Not Before: Jul  9 01:01:00 2024 GMT
            Not After : Jul 10 01:01:00 2024 GMT
        Subject: CN=6b20c83206ec8c6a78f6ec5016743c3f7080e66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3b:4c:ee:82:3d:dc:b9:9d:d5:13:b9:6d:ce:
                    fe:14:e1:37:cd:22:15:db:48:9e:f7:bf:02:f2:46:
                    84:16:d1:ad:6b:7e:53:e1:6e:b7:e6:2a:53:e8:f2:
                    1d:7a:f4:84:a4:3f:6a:38:46:0b:b8:bf:52:6f:7e:
                    43:7b:42:2e:3f:e9:b7:86:88:e7:7e:a2:f8:0e:4c:
                    b8:f4:e7:42:b8:36:7e:35:16:35:42:66:98:5f:a7:
                    8c:20:9b:a9:67:2c:a3:29:f3:d0:e6:72:f1:de:6c:
                    e4:54:66:8a:f5:17:65:55:56:21:dd:09:8f:b2:a7:
                    76:75:3c:ce:7f:9e:39:4d:f5:b3:b5:72:fd:48:1c:
                    5c:0c:99:a7:a9:83:8b:5a:07:08:64:46:ce:7c:02:
                    6a:2f:f3:b8:cd:58:cb:5e:3f:f2:54:ad:46:23:35:
                    d2:c5:ae:c6:19:15:50:ba:1d:ca:8b:5d:49:12:14:
                    83:c6:da:fe:1c:d7:ac:cc:89:01:54:fa:21:ca:b9:
                    00:4f:a9:95:55:ef:6e:7d:6d:b2:7a:a3:17:24:17:
                    58:f7:2e:8b:31:39:ca:b5:43:b6:7b:8d:ec:dc:e0:
                    da:e7:0d:ba:1c:30:86:f7:aa:5f:29:0a:d1:09:55:
                    3d:2c:5d:e2:b4:c7:2d:27:64:9c:24:e9:12:1b:47:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:20:C8:32:06:EC:8C:6A:78:F6:EC:50:16:74:3C:3F:70:80:E6:6E
            X509v3 Authority Key Identifier:
                keyid:AD:9E:F3:C5:B0:3F:FC:56:DD:30:FC:1D:06:0D:15:88:F2:64:B2:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ7zxbA__FbdMPwdBg0ViPJksrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/725a6f-0f29-492d-b231-9771b268f0ef/1/rZ7zxbA__FbdMPwdBg0ViPJksrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3a:2f:c3:29:58:26:01:75:90:7e:da:4f:35:c7:fe:5b:c8:
         7b:57:34:ad:65:69:63:0f:69:26:9f:a6:f6:b2:dc:57:e9:4f:
         40:60:ba:f2:6c:03:a2:b8:f4:9b:0c:c8:26:8f:19:09:91:be:
         1f:5d:a7:b8:cb:5b:22:ed:16:fb:7e:ce:24:c2:3d:d2:fa:5a:
         d4:5f:c5:32:2e:00:70:bf:bf:d5:fd:45:62:47:7c:59:8f:92:
         3d:cb:9c:8e:c9:fb:d4:2e:86:37:f3:92:c1:e7:a7:9b:74:27:
         cd:e5:38:73:e8:74:1e:0a:2e:24:14:67:b0:a4:1c:1f:91:7d:
         f8:6f:7d:bf:b0:62:14:d0:01:f3:e4:a0:2d:33:85:9c:0f:81:
         9e:4b:4c:d5:d3:6b:59:a2:e9:d4:a4:9a:02:57:48:2e:d8:6a:
         b6:5e:2e:3c:4d:db:bc:c0:76:de:96:bd:7e:93:b2:0f:2a:26:
         4c:ac:64:22:4f:74:42:05:b4:33:99:8a:49:5e:15:bd:bf:d5:
         e6:88:24:25:d9:12:90:01:78:ac:d6:06:cb:e3:a7:5b:cd:3b:
         26:a0:ab:a1:e6:65:08:98:a0:fc:f0:a5:4e:ca:6f:ff:42:b1:
         de:c8:3d:a3:f6:21:cd:e4:44:5c:a5:d6:f0:3c:72:7a:d6:8e:
         a2:99:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:32:06 2024 by rpki-client on console.sobornost.net