Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          IrdyktYh5DkkCmLpN6Kg2U+IX31vlEJkfWIrayox+Wc=
Subject key identifier:   A6:7B:DC:C0:9E:97:BF:93:2D:E3:0D:06:E9:FB:7C:19:B1:E6:66:0B
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       01901EC6D112F9769D9F5C94720C7DD7F730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          1196
Signing time:             Sun 16 Jun 2024 02:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:04 +0000
Files and hashes:         1: BQNe-0iRLM-SGKzI3eTxnPJwAzM.roa (hash: zRnSfbLHDV2kK1s0FW7gq52xtpqTNc6DIGTLUzNLBJQ=)
                          2: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: QfGzr1ouWcmnjOnMhvfZykSjbe9BdT1ESm5CQFiCJUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:d1:12:f9:76:9d:9f:5c:94:72:0c:7d:d7:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Jun 16 02:01:04 2024 GMT
            Not After : Jun 17 02:01:04 2024 GMT
        Subject: CN=a67bdcc09e97bf932de30d06e9fb7c19b1e6660b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:77:34:f8:20:9e:33:8f:8a:a3:a4:0b:dc:
                    72:77:fb:4f:54:21:7e:dc:70:84:d7:5c:0d:e1:a0:
                    f0:7e:4c:d4:6e:40:05:26:8a:72:3c:6e:72:a2:4b:
                    10:18:e7:3e:11:f0:84:b8:b9:36:d0:13:4a:af:29:
                    44:58:b8:d0:cc:21:77:4f:17:00:ad:2e:ee:e1:53:
                    0f:0e:11:95:c7:26:79:9b:d4:9a:3e:15:0a:e9:23:
                    1f:b2:48:54:80:b9:ae:14:ff:c6:1d:6c:97:73:da:
                    da:4d:51:ab:42:e7:63:d7:f0:3a:81:97:b5:1a:ee:
                    0f:18:e3:96:25:de:96:d1:fc:94:ce:3f:42:c8:75:
                    81:c5:8b:55:17:d1:f0:fc:5d:3b:21:1c:6e:73:8e:
                    95:fe:f5:aa:63:5f:6f:06:7d:0e:50:ae:95:47:17:
                    ca:c5:8d:b5:fe:93:be:12:30:71:de:c2:88:43:f5:
                    20:f7:5e:ed:b5:fb:a8:d6:26:93:d4:20:db:76:48:
                    16:c0:32:20:c8:0d:30:85:6a:57:0a:4a:8b:2b:d0:
                    47:da:ea:42:80:c4:e8:4d:be:66:41:8f:0e:0f:53:
                    c6:dc:86:a7:f5:62:76:9f:89:5c:55:ac:b6:4b:5a:
                    d0:fc:1c:8d:e7:86:9f:25:94:cf:f9:35:cc:8e:e7:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7B:DC:C0:9E:97:BF:93:2D:E3:0D:06:E9:FB:7C:19:B1:E6:66:0B
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:34:cf:7a:a3:61:15:cb:db:cf:e8:01:6d:a7:dd:9d:ae:10:
         84:92:a0:93:e9:6e:dd:8e:f0:2b:05:c8:1a:8c:8e:1d:86:85:
         89:08:a8:8e:ae:3d:b3:c1:de:b8:f7:7a:f4:9f:70:c8:3f:26:
         8c:98:11:bd:7f:4b:25:20:32:ee:4f:7a:5e:dd:16:cd:eb:17:
         2b:09:4c:94:d8:31:9b:1b:e5:4e:25:24:23:84:9a:1b:cf:d1:
         04:48:4d:12:8c:ca:ec:1b:83:24:8a:c1:28:63:c9:3c:32:64:
         79:d0:ab:a7:f4:46:54:27:3a:53:29:9d:31:bc:83:15:00:42:
         fc:bf:e8:d8:45:e9:81:51:d9:66:70:46:37:c0:28:d9:73:30:
         30:51:bd:70:6a:73:be:87:03:73:e1:4f:a0:86:b3:85:11:af:
         6e:3e:b9:47:a2:8f:9b:17:9d:54:8e:f7:91:d0:0a:f9:87:83:
         1c:6d:f1:a8:56:53:e8:34:35:cb:5c:1b:3d:66:70:42:51:c8:
         55:a6:71:b3:53:76:fe:ba:83:94:e3:af:20:c7:bb:42:89:ce:
         56:0e:ad:3c:e6:e4:bf:dd:d8:27:85:2e:b7:9f:2d:e1:c1:af:
         83:6a:3c:f9:24:ca:3d:ac:c9:7d:ae:5c:3a:dc:1e:08:eb:8c:
         08:c3:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:46:48 2024 by rpki-client on console-fra.rpki-client.org