Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
File:                     d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json)
Hash identifier:          b8SC3Fc49rRDac1e5Nj6z1OCQ9t5WlXmcC2OsTI+EKo=
Subject key identifier:   31:53:9F:4C:FD:2D:92:C5:E7:20:C0:21:DB:B9:B7:B9:06:56:ED:5A
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Certificate issuer:       /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial:       01901DEB088643C1D6EBCF194113F7E54311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:01:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:00 +0000
Files and hashes:         1: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: 9PVsdxQpmOfK0PM5pPy/s/WXvrcvt89bYsX+EBQCK/k=)
                          2: vh2VO_L3Axuj8Dy1BD-GPw3YDIo.roa (hash: FBM14r3NY4pWxPsIOXDIXATy3c3paLrHscqF9JtLapo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:08:86:43:c1:d6:eb:cf:19:41:13:f7:e5:43:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
        Validity
            Not Before: Jun 15 22:01:00 2024 GMT
            Not After : Jun 16 22:01:00 2024 GMT
        Subject: CN=31539f4cfd2d92c5e720c021dbb9b7b90656ed5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:72:d7:bd:32:3e:57:25:19:53:e5:7c:a1:e2:
                    25:bd:36:0e:9f:c2:c0:2e:bf:32:32:f7:a6:67:d3:
                    ee:a4:1b:bd:cb:03:1b:68:eb:37:b4:ad:3e:bd:cd:
                    b0:63:4c:4c:38:88:57:49:3f:32:10:29:ec:c1:94:
                    e7:19:bd:32:78:c6:85:be:b8:71:cf:32:0d:d0:53:
                    c2:88:76:7b:b2:3e:cf:ac:3d:df:31:96:76:fd:21:
                    51:c4:f6:84:a0:72:a9:84:09:2f:dc:c8:41:25:d9:
                    df:65:5b:69:6a:ec:c7:0e:d7:ce:24:d0:d3:12:9b:
                    c3:38:3d:3a:2a:ef:7f:d5:7f:16:3d:7f:93:01:6e:
                    86:66:a6:bd:df:81:34:e6:d8:c0:6b:74:8d:87:c3:
                    3b:92:d8:1e:3d:0b:e1:6c:9a:c7:db:2b:08:3f:23:
                    f9:0e:a5:0f:32:2c:4c:bf:67:e4:42:11:d4:37:41:
                    09:b5:c8:26:d1:e9:a1:32:3f:70:11:ca:d5:db:6a:
                    c3:ae:81:38:e8:4a:9e:9c:b5:0f:d8:a7:54:d4:3d:
                    a5:76:46:78:0f:3e:70:02:78:fe:34:fd:ac:fd:08:
                    6f:b9:4a:ad:72:e4:fd:e1:f6:01:65:89:a1:de:61:
                    b9:52:b5:03:5d:f2:7c:56:d2:27:2d:ee:5b:8e:bf:
                    ad:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:53:9F:4C:FD:2D:92:C5:E7:20:C0:21:DB:B9:B7:B9:06:56:ED:5A
            X509v3 Authority Key Identifier:
                keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:80:8b:c4:e2:9b:f3:8d:c9:f1:1f:4e:24:a6:a7:c7:62:b0:
         fe:11:35:51:57:80:09:7e:69:0b:4c:0d:90:7b:81:4f:88:63:
         89:b6:3e:8b:9e:e6:3d:d4:18:8d:03:1c:0c:32:48:2b:ea:d7:
         19:14:08:7a:de:af:69:13:ad:b1:e7:6c:5a:12:bb:78:25:5e:
         b6:bd:24:90:db:4a:26:c1:a3:fd:e1:cc:4a:01:ad:6e:62:a4:
         ae:fe:0d:b4:98:0d:a1:07:00:54:dd:97:da:88:9c:f8:35:cf:
         de:b1:3b:91:75:d9:e3:40:b6:71:3a:51:7f:57:0d:77:8d:b9:
         03:fd:15:ba:c0:7e:3b:ac:d0:fb:eb:2e:5f:68:02:de:b9:54:
         f3:a8:95:b8:08:1b:fe:49:e5:9b:a3:ad:17:68:52:5d:09:7f:
         d8:a5:c8:00:c0:b1:76:b3:ec:1d:b2:3d:ff:46:8b:f5:99:27:
         eb:10:47:b6:8f:8f:d5:e2:df:50:24:9b:5e:4b:fe:08:06:96:
         8a:fa:15:68:5e:7f:6c:ae:22:9c:38:02:f4:3e:71:11:99:76:
         94:75:53:57:4d:fb:9f:f5:c8:e8:68:a0:dc:ec:64:40:3c:73:
         fd:0e:52:d3:ee:fe:94:75:ec:98:bf:ae:cc:83:da:1d:3e:c2:
         f9:72:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:23 2024 by rpki-client on console-fra.rpki-client.org