Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File:                     t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier:          P1MD1pPsr+6aC6t2lQOsI2BI6aQt80ToPJG4cqXh7tU=
Subject key identifier:   B9:EC:55:14:D5:F0:1D:D1:68:84:36:B6:FD:D5:A9:22:E8:A4:2D:98
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer:       /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial:       0190429C9FD5B10A315AE63204F806E38CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number:          0274
Signing time:             Sun 23 Jun 2024 01:01:19 +0000
Manifest this update:     Sun 23 Jun 2024 01:01:19 +0000
Manifest next update:     Mon 24 Jun 2024 01:01:19 +0000
Files and hashes:         1: kwSvI56IlFWybpzO1z-SpKL9Uao.roa (hash: kM6WLK0XXkcxHuk7IYES7eXQU5roKTiPKfln0TDlKI8=)
                          2: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: kslobrjEpLxH7rxXN/m2G2fxbDS3FG7hPgtViKdU3hY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9c:9f:d5:b1:0a:31:5a:e6:32:04:f8:06:e3:8c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
        Validity
            Not Before: Jun 23 01:01:19 2024 GMT
            Not After : Jun 24 01:01:19 2024 GMT
        Subject: CN=b9ec5514d5f01dd1688436b6fdd5a922e8a42d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:d2:82:9c:6c:56:7b:c8:31:4a:eb:91:69:
                    57:34:ae:e6:72:43:cd:ee:06:75:84:d0:d3:39:03:
                    88:c8:03:62:de:bd:97:b1:f9:e8:90:12:ab:1c:87:
                    03:c9:a0:2c:f8:96:a2:70:08:d0:6c:02:74:8c:6d:
                    27:cd:08:81:88:f3:43:31:f6:b6:da:15:46:7a:8b:
                    40:be:b4:49:27:f5:07:66:ad:a6:02:ec:6f:21:21:
                    20:ed:ab:40:30:b6:0e:91:4e:e3:5a:cf:d8:d4:9c:
                    e2:0f:19:b8:3f:68:d4:b8:2f:b0:03:62:b9:6e:6e:
                    3f:c6:4f:6b:76:19:a3:3a:9c:3e:ed:4f:ba:b8:ec:
                    15:68:bf:cc:85:e6:86:11:c2:5e:92:1c:a4:e4:a1:
                    d9:6d:b0:62:5a:e4:b9:80:c3:93:6c:c0:45:7d:53:
                    58:53:4a:a9:8d:6c:ae:d0:cc:be:74:23:4b:f6:45:
                    f3:f2:77:7e:3c:45:bf:98:4e:c7:77:de:03:31:e1:
                    cc:10:3f:f3:ab:ce:ef:98:d2:d7:3f:e9:3f:22:46:
                    0d:30:cc:4f:a1:94:07:1f:3e:18:9e:ac:48:7c:8a:
                    f9:f3:19:55:eb:eb:b0:30:34:ff:0e:12:a0:13:7c:
                    6c:08:0f:86:a6:7d:dd:41:ff:23:59:2f:2f:7b:00:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EC:55:14:D5:F0:1D:D1:68:84:36:B6:FD:D5:A9:22:E8:A4:2D:98
            X509v3 Authority Key Identifier:
                keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:02:eb:6e:7c:da:4f:b8:0f:ec:ae:45:fe:93:4d:9b:dd:ed:
         8c:7b:71:da:e2:ae:c1:53:ac:2f:3c:aa:0f:00:3b:3a:99:16:
         e0:9a:eb:b6:5a:c3:37:77:14:e3:58:3f:0b:d2:bb:d0:9c:9a:
         04:b6:3d:14:65:01:23:7f:8d:a3:96:39:75:ad:41:3f:83:b9:
         17:a0:fc:31:8b:3d:78:f8:d0:12:1d:dd:3b:d4:ce:03:6d:17:
         8c:5d:3f:55:b5:da:41:56:ad:ab:6b:2b:4e:d2:76:b8:e6:9a:
         a9:d8:b0:e4:22:e1:2c:4b:7e:ab:b7:0e:ec:a8:58:27:0c:9e:
         88:ff:37:c8:8e:5d:de:70:7f:d2:3c:ee:ff:47:e4:cf:8a:73:
         4d:da:9e:45:de:fc:8e:1c:3e:2b:8b:f4:01:02:06:0f:92:34:
         ad:d8:6a:81:75:8f:6c:3e:99:a4:15:6d:0a:b6:0e:96:30:9b:
         28:61:e1:50:34:4b:2f:cd:9e:ac:10:6f:36:0f:a2:82:2c:50:
         78:8c:5e:73:c0:b6:88:09:e9:f1:8f:05:4a:61:e8:88:b9:74:
         0c:79:5e:32:13:01:6e:28:82:0d:b6:36:1d:b3:9a:18:d5:db:
         f7:dd:9c:34:bb:d7:5b:9b:55:3b:ef:7d:6d:96:25:21:8d:8e:
         2b:c0:fb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:06:39 2024 by rpki-client on console-fra.rpki-client.org