Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File:                     r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier:          GIAtHsD9NcQR+doUpJpy3w51IlFoHr9m9l9rPqf7hWg=
Subject key identifier:   43:73:86:47:32:4F:39:69:63:D1:45:E7:C8:C7:59:01:4E:F7:4B:AA
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer:       /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial:       019040ADD8B542F9A2785AC4EBC249EC112E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number:          0458
Signing time:             Sat 22 Jun 2024 16:00:53 +0000
Manifest this update:     Sat 22 Jun 2024 16:00:53 +0000
Manifest next update:     Sun 23 Jun 2024 16:00:53 +0000
Files and hashes:         1: ITyF61HWwY6zZ0y9iK7N-vpFPbo.roa (hash: MSYgsA8v8475ekBKI1CzSZLgdhHbZUsLOJfzFuYoqDw=)
                          2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: eatogWptRUB/fBvXNFzLbZhKRp9j/uF+phk6MH7QBew=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ad:d8:b5:42:f9:a2:78:5a:c4:eb:c2:49:ec:11:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
        Validity
            Not Before: Jun 22 16:00:53 2024 GMT
            Not After : Jun 23 16:00:53 2024 GMT
        Subject: CN=43738647324f396963d145e7c8c759014ef74baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:6b:ce:13:c1:1f:27:52:71:af:89:45:5e:
                    86:99:06:cc:ed:df:f9:fa:bf:eb:0b:3a:5d:9e:1e:
                    8c:18:15:d1:9a:c5:1b:f0:d4:cc:9b:4d:2b:60:c4:
                    b8:4b:0a:24:49:ea:4e:d1:a7:6a:98:b1:d6:d5:4c:
                    ce:b7:bc:b7:4e:51:64:1c:b9:a0:95:2e:c0:c0:7c:
                    6c:4d:da:e6:28:5d:39:5c:7f:d4:41:dc:a3:a8:dd:
                    7c:8c:30:d7:97:b3:a4:31:0b:d4:5c:c5:d1:e5:05:
                    41:d5:da:58:d4:a8:df:db:88:64:b9:ff:ab:21:58:
                    07:46:51:c7:46:bb:b3:52:7f:0c:1a:24:28:72:bc:
                    c2:7e:b4:6b:82:fd:61:a1:0b:9a:b4:aa:c8:90:b4:
                    80:0c:d9:8a:10:cc:cd:62:49:6c:2d:2d:09:10:29:
                    db:22:ec:d7:0c:13:79:1c:d6:1d:9b:11:53:7e:bd:
                    fb:cb:b3:74:41:8c:0f:95:f4:eb:a3:ae:0d:46:24:
                    f9:bc:4f:f6:eb:38:5d:ad:c0:8b:fc:ad:5f:5a:66:
                    00:09:c5:a6:c9:9f:da:7b:e5:e6:2d:5c:31:f7:56:
                    72:a4:10:b0:19:b5:bd:c1:83:29:4d:f1:ee:8e:85:
                    0f:a9:13:cc:89:f9:25:77:57:d5:fb:6d:30:c3:05:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:73:86:47:32:4F:39:69:63:D1:45:E7:C8:C7:59:01:4E:F7:4B:AA
            X509v3 Authority Key Identifier:
                keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:84:aa:45:a1:54:c1:1b:96:ec:bb:83:4f:54:fe:1c:64:2a:
         3e:6c:1d:be:ea:28:4f:29:89:e5:39:23:f4:d2:e1:c9:9f:1a:
         e0:73:f1:e4:bf:00:f7:12:43:e6:1b:9f:0c:53:5d:95:57:f3:
         73:0f:02:aa:52:a0:2b:1e:e9:83:ef:4b:ca:7c:c3:0b:e5:93:
         ce:30:41:97:fe:f0:48:05:9b:4d:b7:c9:2c:f3:cb:84:24:c3:
         e0:65:2e:e4:03:29:7e:5b:4a:8e:57:1e:52:56:95:5e:d1:06:
         05:0a:21:a6:e0:24:fa:af:c8:9a:d4:48:bc:3c:34:d0:66:5f:
         84:95:53:5b:59:3b:ce:dd:1d:8c:77:f5:38:85:c9:fd:29:c9:
         82:07:0b:5c:9b:18:9f:7b:d8:f8:f6:0f:f7:36:10:dc:6b:5a:
         ba:67:03:82:37:13:a4:09:a5:d6:87:70:0d:cb:f5:00:82:89:
         7d:94:45:a1:10:93:e9:c7:62:fc:bf:f3:3e:5f:85:d2:4c:2a:
         f7:1c:aa:f3:a4:b9:92:b7:33:30:a2:6e:f1:d2:ad:64:4d:28:
         68:da:05:ba:61:8d:f9:4b:21:0c:c4:cc:e5:41:b7:c3:85:11:
         9d:49:4c:d3:72:8e:28:54:05:2d:79:61:34:96:b5:3c:ed:85:
         e4:7e:62:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:07:35 2024 by rpki-client on console-ams.rpki-client.org