Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File:                     0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier:          YNdluWvhjOxY6RQVwJbuT5S6KABJkQbDRCJKLE0LDPI=
Subject key identifier:   CA:C0:38:D4:4A:C3:EA:97:91:B0:2C:4C:F3:4D:6C:5A:E1:BC:51:7D
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer:       /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial:       01904152D781C4C7523426DCAA564E1F0A05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number:          0899
Signing time:             Sat 22 Jun 2024 19:01:06 +0000
Manifest this update:     Sat 22 Jun 2024 19:01:06 +0000
Manifest next update:     Sun 23 Jun 2024 19:01:06 +0000
Files and hashes:         1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: U1LCyGaO6eOarywVfU74apmnnvEXZDFsNDxdyCNGSSY=)
                          2: MNCSi_1S4DU2j3oB88CJwA_SMoI.roa (hash: hk7386fkgpuCsd3ixP2jEqkF5BKHvE4gVhsxnSzdmdo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:d7:81:c4:c7:52:34:26:dc:aa:56:4e:1f:0a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
        Validity
            Not Before: Jun 22 19:01:06 2024 GMT
            Not After : Jun 23 19:01:06 2024 GMT
        Subject: CN=cac038d44ac3ea9791b02c4cf34d6c5ae1bc517d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:8e:e4:57:cc:f0:c0:f3:64:38:80:1d:c1:
                    1c:f8:cc:5f:c3:48:58:4b:08:86:29:f2:21:e9:c9:
                    2e:f5:45:87:65:1d:bd:38:5a:25:de:e6:55:d1:fd:
                    a9:7b:7a:93:d9:ed:09:82:3c:bc:7f:e0:56:5e:ed:
                    02:e2:82:bb:94:c9:e0:f8:c0:ea:6a:89:ed:51:93:
                    6f:05:f5:8d:25:7f:50:2f:9f:74:e6:9e:f8:27:12:
                    d2:ad:8c:88:40:a2:52:37:88:fd:42:98:36:33:a3:
                    b0:ee:f7:16:cf:f1:3c:1c:10:7f:38:0e:27:92:06:
                    b5:da:d6:37:9c:ca:10:de:98:b1:77:16:de:cd:7d:
                    15:99:7c:4a:92:1f:6b:9d:a3:3b:8a:73:0b:ba:08:
                    f4:fc:c5:3b:be:86:fe:03:98:da:cf:47:46:23:57:
                    ef:e5:e9:e1:0e:6a:65:53:6f:2e:5d:63:a0:2f:26:
                    7a:fd:ac:0b:f7:5e:e5:e2:fb:b8:f6:ab:af:58:ba:
                    62:df:83:4c:eb:49:de:9e:d5:f8:97:50:b3:1b:39:
                    89:12:04:14:17:af:13:dd:88:1f:97:55:6d:70:0c:
                    4b:7c:cc:cd:2c:fb:94:2c:83:72:54:3b:b9:08:56:
                    4d:2e:74:55:b7:45:9d:2c:b6:20:7b:48:64:6c:63:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C0:38:D4:4A:C3:EA:97:91:B0:2C:4C:F3:4D:6C:5A:E1:BC:51:7D
            X509v3 Authority Key Identifier:
                keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:15:d9:82:c9:80:d9:06:ff:ec:f6:96:96:65:ce:30:07:c2:
         21:8d:bc:e6:e1:f2:55:7a:e6:0c:49:b2:f1:63:50:18:41:02:
         a5:b2:98:a7:0d:1b:c4:ac:2c:a5:c5:c4:61:a2:22:7d:8d:9b:
         40:9d:c5:4d:3c:e2:bb:c3:29:b0:59:e8:d1:e4:ea:9c:f1:d6:
         7e:af:82:4e:98:f2:77:11:18:ea:36:a4:78:6d:2b:5c:2a:1b:
         64:fe:ce:62:91:1f:48:0c:8c:01:da:db:11:c1:b2:68:6f:6a:
         7f:af:35:f0:8e:e5:67:3f:2d:eb:4b:1a:3f:fa:67:50:dc:69:
         b6:33:9d:2e:f8:a0:b8:2b:4b:36:d4:94:0f:b1:92:c0:33:e1:
         5a:11:4d:9d:57:ff:17:c6:0a:94:08:35:6e:77:aa:d2:cb:10:
         88:1a:38:10:67:36:32:93:2e:8d:df:2b:39:6f:fe:87:fc:b5:
         ad:1c:19:cc:cb:8e:3a:e3:36:b6:95:4c:5b:9a:78:67:72:88:
         5d:8a:e8:87:f4:8b:3b:b7:c9:56:95:be:65:c2:80:51:05:d5:
         06:8f:ce:f8:50:4f:d4:02:bf:24:87:a1:b8:bb:c6:f2:55:51:
         18:f6:9b:a6:16:fe:33:05:1e:fc:90:9c:f8:83:2a:5e:1c:c0:
         50:4f:3a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:06:42 2024 by rpki-client on console-ams.rpki-client.org