Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File:                     R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier:          hP87qAs1oClO2KtPdPb9fwuOxfew+FqcPKNrZp8wHNI=
Subject key identifier:   95:F0:20:86:7A:63:12:26:DA:CA:96:CB:A3:0A:F9:C3:BF:81:C9:D4
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer:       /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial:       01901DECA6DC8E4C5C9E975EB2CD46772414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:02:46 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:46 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:46 +0000
Files and hashes:         1: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: prjFr2J5o1lK8/w+dLzP+gHHsPLWNILZ5hVKKZgUNI8=)
                          2: TANLdK_v5WugWqP50UzSZADfMwo.roa (hash: b+LGU62TvotFpdpZXLc91F6xOtoiAtR9+oIq6bPwu6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:a6:dc:8e:4c:5c:9e:97:5e:b2:cd:46:77:24:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
        Validity
            Not Before: Jun 15 22:02:46 2024 GMT
            Not After : Jun 16 22:02:46 2024 GMT
        Subject: CN=95f020867a631226daca96cba30af9c3bf81c9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6e:1e:83:86:59:40:0d:1c:6b:03:80:13:53:
                    ed:e3:1c:e2:2b:17:0c:a3:d9:df:36:77:e2:ff:38:
                    25:f9:35:2a:dd:ca:50:2e:da:b2:0a:2f:75:82:67:
                    11:51:77:04:c4:d7:aa:4a:46:7d:bd:3b:5f:67:de:
                    16:9e:c9:ad:1d:04:7c:f6:7e:a7:9c:76:25:5b:9f:
                    ec:d8:55:ba:59:12:b4:3e:7c:68:23:94:b7:0a:42:
                    ff:26:23:22:f9:49:f8:7f:d2:66:7d:05:57:9d:ee:
                    b4:66:b8:bd:b7:79:f4:11:7b:a6:8a:b6:f6:3b:53:
                    6a:7a:e3:db:08:df:54:0f:fc:5f:84:70:ec:75:c3:
                    af:95:7d:c8:43:1b:1a:ee:4f:ca:64:a5:31:4d:8f:
                    29:fa:45:02:95:db:11:2c:17:e4:3c:12:22:5b:a4:
                    5c:71:da:c2:c0:88:13:9f:24:06:a6:23:02:87:42:
                    fd:4a:c5:cd:1a:bf:54:70:63:6f:bb:49:99:7e:b4:
                    56:26:8c:45:12:f2:f6:dc:04:76:f2:b1:a7:14:9e:
                    42:90:05:da:49:56:12:fa:ad:15:2c:a8:07:4a:06:
                    b7:67:da:3f:f9:f6:fc:6a:45:d3:72:1c:ed:a5:9c:
                    66:9d:ee:ae:2c:71:7a:91:b1:41:ba:ba:4e:b6:7d:
                    00:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F0:20:86:7A:63:12:26:DA:CA:96:CB:A3:0A:F9:C3:BF:81:C9:D4
            X509v3 Authority Key Identifier:
                keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:89:bf:e2:ae:58:a7:35:88:a0:a6:c9:21:54:55:83:57:08:
         53:b5:f3:1c:36:3f:b3:8e:1f:6f:06:9c:59:71:89:09:23:d5:
         ca:91:d6:3b:57:78:53:13:af:e8:ae:c2:52:77:da:ad:7e:6c:
         d0:7e:63:e2:3f:dc:1c:16:6d:80:ec:dd:ac:ca:30:70:a3:7a:
         e2:03:14:99:8f:1e:9d:db:ba:de:2a:3a:75:d8:c4:02:51:dc:
         4c:fc:ea:df:d4:d7:c2:cd:37:21:0d:e0:e8:fb:1b:c0:9c:b4:
         f0:d5:54:4a:81:38:da:19:47:8c:7f:6e:38:82:20:12:63:48:
         d5:de:48:5a:e2:b3:24:ec:61:6a:93:53:55:86:34:b8:e9:16:
         15:25:d1:eb:ad:1a:fd:eb:56:99:b7:72:37:05:7f:f5:12:d2:
         4d:b8:56:b3:aa:6c:c8:26:cd:6a:3f:3a:91:3f:fa:18:a6:6b:
         75:b3:2e:d2:62:7b:f2:32:6f:bc:96:03:28:ae:65:c8:c8:24:
         16:f5:d4:d0:a3:23:96:6c:51:5e:0d:87:0a:4e:ec:de:d5:fe:
         0f:db:d5:5c:04:b6:ec:f1:24:18:41:bd:20:81:64:0e:d9:5e:
         13:fd:c8:41:cf:99:b7:f9:12:66:a7:c8:2f:cb:21:4d:be:22:
         d2:06:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:31 2024 by rpki-client on console-ams.rpki-client.org