Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File:                     HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier:          byo/wulpkoOm3mJEHT3JU6+Y8dC2lg1G45QWfHIVjnU=
Subject key identifier:   4E:6D:F7:E4:00:42:D5:98:2F:A8:C3:C3:4E:54:00:D9:BA:60:20:CA
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer:       /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial:       01901A10A71A48B8C63618E715ED41125946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number:          0BC3
Signing time:             Sat 15 Jun 2024 04:03:37 +0000
Manifest this update:     Sat 15 Jun 2024 04:03:37 +0000
Manifest next update:     Sun 16 Jun 2024 04:03:37 +0000
Files and hashes:         1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: wjA/n6fuRe8ta58BL1DQtw09Cg78IXnku85cHDjqG30=)
                          2: ncoBLA1HDUTqidFJmrj7JUto9Aw.roa (hash: 9FMViztroUpmlun2KH3GUKCRJy1G+1yGs8243QRCjI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 04:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:10:a7:1a:48:b8:c6:36:18:e7:15:ed:41:12:59:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
        Validity
            Not Before: Jun 15 04:03:37 2024 GMT
            Not After : Jun 16 04:03:37 2024 GMT
        Subject: CN=4e6df7e40042d5982fa8c3c34e5400d9ba6020ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:24:7e:8d:8a:3c:65:3b:25:c6:2b:a4:79:
                    ad:ee:a4:55:7e:51:af:fc:79:7a:f6:d3:fb:f7:79:
                    59:36:71:d4:88:18:5b:85:2f:a8:70:95:27:f1:f3:
                    92:c8:d9:66:06:4c:c7:66:af:bf:a2:76:9d:16:68:
                    17:b5:de:e2:e3:6d:31:c0:af:d6:2f:d1:e9:06:37:
                    e9:34:66:b6:95:ff:74:75:82:43:d1:24:3e:1f:77:
                    b6:b9:95:65:84:9a:24:a0:ea:82:83:c3:a3:ff:aa:
                    4e:08:78:a2:bc:be:d4:67:94:20:5c:cf:99:f4:95:
                    f2:2f:5a:84:d4:8e:2d:ac:56:68:6d:50:d8:a5:cf:
                    36:77:09:48:1b:77:6b:4f:fe:6f:e9:7d:10:0c:27:
                    d6:96:4f:46:1d:ad:a8:e9:ae:3a:4c:47:01:29:b5:
                    8d:d0:7d:d5:0b:08:5d:0c:51:c3:38:2a:03:45:e1:
                    46:76:40:62:7c:fb:1d:64:97:f1:49:ae:81:51:e9:
                    d5:84:8f:f2:91:2a:a3:a0:e0:97:21:ab:31:cb:40:
                    90:f7:b2:91:be:ee:22:50:f1:04:98:98:d1:da:e3:
                    65:7e:61:50:51:99:c8:1b:d4:15:d3:c6:86:8c:ab:
                    02:4c:69:14:85:9b:00:7e:2d:86:6a:6a:05:86:0a:
                    52:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6D:F7:E4:00:42:D5:98:2F:A8:C3:C3:4E:54:00:D9:BA:60:20:CA
            X509v3 Authority Key Identifier:
                keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:73:e3:98:c6:91:17:db:e6:37:6b:30:55:cd:3d:9d:4d:5d:
         1e:40:fe:a3:43:4e:87:94:f5:cb:b1:ac:ae:3e:15:dd:26:bf:
         c4:ca:5f:04:b7:a7:a8:28:d9:9d:b6:c0:2d:62:65:0a:af:7c:
         3c:69:bc:8e:5f:c4:c2:d8:f5:5e:2a:43:f3:e5:b8:b6:8c:46:
         cd:29:39:9b:60:b0:ba:56:69:8a:a7:b1:51:92:90:a5:80:8c:
         cc:70:1c:2e:55:fe:8a:3d:70:1a:cf:c5:0f:c9:b0:e7:84:06:
         94:ca:3a:78:12:2d:91:8f:3b:fb:32:19:c4:48:72:c4:d1:bc:
         bc:a8:ff:01:38:7c:e3:0e:c8:5f:8a:f8:71:5c:c5:38:26:76:
         a7:69:7e:2c:cb:14:0f:41:9c:d5:ec:18:3b:0b:26:dc:40:2a:
         70:36:b0:54:c4:58:12:42:db:87:fd:50:49:e5:02:24:df:2b:
         27:3f:f8:e1:94:84:31:b4:ed:8b:d2:5c:27:c9:44:f1:37:1f:
         ea:11:ca:26:fd:39:1d:79:57:ed:6e:e1:d7:29:27:62:7c:58:
         01:62:9a:24:93:49:07:ca:ca:ac:30:cd:81:4d:f6:1d:32:8d:
         3a:34:13:23:11:0d:8a:bc:f9:8f:6c:19:52:a7:39:a4:60:56:
         d8:2b:b3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:43:49 2024 by rpki-client on console-ams.rpki-client.org