Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File:                     0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier:          xWBkCgrlSqu6AnizoQUE50y9YDabpGYy9pIU3ogilpQ=
Subject key identifier:   B4:1C:84:58:88:37:4C:6D:30:9A:68:B6:47:E2:E1:CC:7F:92:F6:51
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer:       /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial:       01901E587F95C16C0FE2C0C2C742410486CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number:          0512
Signing time:             Sun 16 Jun 2024 00:00:34 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:34 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:34 +0000
Files and hashes:         1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: u7V+6lrLqDC9GRAiaqxP7SNDHJY9SppSZw1CaL8jMyY=)
                          2: Ulvl40-jwIkAlBIvkCaF-OyibbE.roa (hash: IJ/wnlhUpehRsgnOjRyD3Fof5LjyHzD92RCdoIKJSr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:7f:95:c1:6c:0f:e2:c0:c2:c7:42:41:04:86:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
        Validity
            Not Before: Jun 16 00:00:34 2024 GMT
            Not After : Jun 17 00:00:34 2024 GMT
        Subject: CN=b41c845888374c6d309a68b647e2e1cc7f92f651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:79:98:8e:d5:ec:6d:9a:87:5a:b9:95:97:
                    4a:10:60:71:6a:74:3c:cc:4d:4a:c0:29:e3:2e:e7:
                    e5:12:da:02:02:32:b2:df:af:a8:82:54:c3:6e:bb:
                    f6:d7:96:7d:c7:0e:c0:8b:e1:8a:8f:46:58:69:5c:
                    55:35:8b:3e:fd:99:b9:0d:df:c3:26:cd:09:28:13:
                    db:4f:cb:01:c8:79:f9:1c:40:2e:67:4f:75:01:0c:
                    18:18:99:d6:ce:3b:d9:b3:2b:1a:ef:5e:80:7f:b5:
                    b2:5f:f8:cc:db:eb:55:1d:af:f1:ba:67:92:be:74:
                    e6:e2:8c:f3:d0:63:92:ed:4d:a7:1e:5e:a5:58:61:
                    ce:fd:c8:26:30:88:81:d8:cb:a4:f0:97:60:62:80:
                    68:43:9e:0b:88:d7:e0:a0:87:f9:8d:4a:32:44:5e:
                    02:7f:73:0d:80:b0:a1:ab:87:02:88:d3:81:c2:79:
                    bf:bf:d0:03:f5:5f:ea:d8:3a:9b:e8:77:00:be:cf:
                    2f:b2:0e:03:0a:39:e0:39:2a:33:99:9c:9f:56:fe:
                    51:fb:7d:05:5f:f0:37:9f:9f:00:78:40:72:e1:ae:
                    c7:be:13:2e:26:3f:7f:9e:38:7b:04:4b:b3:6b:27:
                    bb:1d:6a:8b:c6:e0:1a:67:94:33:0a:a9:f0:25:77:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1C:84:58:88:37:4C:6D:30:9A:68:B6:47:E2:E1:CC:7F:92:F6:51
            X509v3 Authority Key Identifier:
                keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:69:a1:34:e5:e7:9b:63:04:a0:be:32:2f:93:d9:2d:e1:18:
         b8:0b:94:55:bb:12:cc:67:6d:27:2f:80:cf:42:36:64:15:a8:
         05:77:bb:18:0f:59:82:8a:74:f9:c9:7a:b3:8a:69:f9:31:9f:
         f7:d2:79:13:4d:d5:a5:48:eb:61:f9:6c:e1:67:22:13:78:6d:
         54:76:29:51:38:ca:e0:7e:66:3b:67:e2:c6:32:3c:99:e5:ee:
         b0:b0:d8:d3:d0:39:ae:51:29:cd:c3:60:a3:9d:ff:fd:3f:26:
         cb:52:b1:87:f4:0d:2e:b2:87:86:a8:ef:e1:20:bb:4f:53:4d:
         0d:e8:55:dc:69:ce:7d:62:e7:32:80:79:4e:b6:6f:2a:72:0d:
         8d:d4:ff:78:32:22:13:b6:e5:88:2a:66:81:e3:6d:3f:69:e7:
         bc:cb:f9:f8:21:8d:72:de:a1:36:79:3a:e0:13:36:29:7a:af:
         db:9f:1e:9e:1f:ff:98:bd:67:56:6b:eb:95:0a:b0:be:6b:fa:
         a7:2e:6d:a0:34:62:6f:80:37:ba:45:f7:bc:77:dd:9d:5b:ed:
         3d:71:6c:42:73:c4:4e:f8:14:e3:4c:39:9a:77:e0:ca:5c:35:
         ae:88:2b:d9:eb:6a:c4:d2:e3:26:8b:96:3a:04:0a:5f:4c:07:
         16:09:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:51 2024 by rpki-client on console-ams.rpki-client.org