Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
File:                     ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft (raw, json)
Hash identifier:          fBiheEDWAIwhHuaUkVHspMZFoymW0OxKsNGk6trA0qE=
Subject key identifier:   4E:B3:F1:3E:2C:3D:FF:90:09:FC:24:4B:11:1C:50:50:BD:82:66:D5
Authority key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
Certificate issuer:       /CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Certificate serial:       01901E21A4F1D99780D4CCE2CCABEC5EEC46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
Manifest number:          05AD
Signing time:             Sat 15 Jun 2024 23:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:39 +0000
Files and hashes:         1: 0a8FN8FTIEbSVMU9dR7kj1MMHSU.roa (hash: G4EOAkoERx1fOcRd2uiBPN9D/u0llTSpzQXBwIz0iqQ=)
                          2: ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl (hash: IyYJWGEaH6w0O153GsxawENIexfrp2QdFkJFPhpVuLM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:a4:f1:d9:97:80:d4:cc:e2:cc:ab:ec:5e:ec:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8af7f32d33f6646779a51fb23201c6442d1451ca
        Validity
            Not Before: Jun 15 23:00:39 2024 GMT
            Not After : Jun 16 23:00:39 2024 GMT
        Subject: CN=4eb3f13e2c3dff9009fc244b111c5050bd8266d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:71:b3:c3:36:14:3b:2c:d8:98:aa:01:87:
                    62:9b:0a:e8:9d:45:1b:70:aa:bf:88:80:2a:88:0d:
                    66:fa:e4:6b:25:5e:c8:ab:50:69:d0:2e:c3:fd:74:
                    2d:bf:b0:0b:07:bd:cd:f5:2a:02:fb:d7:8b:58:78:
                    7f:ff:52:ac:bf:c4:4c:83:b3:2e:b2:05:3c:67:94:
                    4f:68:49:75:7d:a8:56:68:8e:be:9d:a1:42:b9:67:
                    2d:2c:ae:26:80:a7:e1:99:cf:b6:ba:4b:a0:ef:2e:
                    2f:6b:b0:11:eb:2b:ad:cb:9d:70:c9:8d:21:83:0f:
                    46:97:95:6f:87:21:ab:10:6d:2b:73:b3:31:3e:ab:
                    fc:e4:dc:8e:41:71:d8:73:27:98:1e:00:2c:91:0a:
                    d3:cb:b8:0d:ec:74:aa:e7:d1:a3:c4:14:97:14:51:
                    f6:6e:3d:48:cb:be:8c:37:8e:f0:a6:5c:47:3f:d8:
                    1e:49:89:cf:b6:fd:0f:97:b3:0a:d8:ba:19:48:a1:
                    8a:6f:57:29:4f:e8:cf:a7:12:8b:91:d5:f7:de:b8:
                    4a:26:47:1b:5a:ab:e2:ae:16:3f:ce:aa:b1:4c:ec:
                    64:86:2a:bb:17:66:50:0a:88:1a:23:9c:98:55:b9:
                    dc:10:7b:c2:11:5b:3a:09:8b:07:ea:92:fa:97:ec:
                    bd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B3:F1:3E:2C:3D:FF:90:09:FC:24:4B:11:1C:50:50:BD:82:66:D5
            X509v3 Authority Key Identifier:
                keyid:8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:62:47:00:d2:00:f7:bd:3c:77:96:b9:1e:db:86:ac:2f:12:
         1a:fc:56:60:6f:e4:60:65:c2:26:1d:29:00:7a:af:03:a4:f2:
         73:03:39:02:83:41:5a:3e:79:83:21:4a:a1:9b:f6:42:80:a1:
         41:86:be:fe:08:0d:e3:7f:9d:83:4f:1d:f4:7a:40:0f:1e:23:
         9f:3f:6b:80:13:5d:c6:35:9e:22:9e:2b:50:4e:e1:66:3b:bf:
         36:3c:a9:20:cb:d3:04:18:aa:a4:fa:e9:a3:e5:c0:5b:4d:72:
         7b:cc:bb:1f:f2:21:53:f0:4e:2f:52:dd:55:89:6d:f3:72:df:
         43:db:70:08:08:b3:d6:a9:cd:86:8d:47:d9:11:d2:c3:75:6c:
         c5:ba:0c:2e:48:3c:ed:1e:23:d5:fe:6b:79:17:d1:08:56:6b:
         bd:c8:64:b7:61:53:df:3c:0d:d5:82:91:ca:28:8d:1e:49:c0:
         84:83:c8:4a:5a:0f:78:57:9a:a0:75:dd:3b:e4:7f:73:e8:6a:
         19:c2:2a:20:2a:05:b2:c4:d5:23:e7:98:32:8a:e3:d1:09:51:
         22:cd:60:11:01:dc:3a:8f:56:01:38:6e:2b:85:d1:d0:7e:18:
         a4:10:e2:91:4f:26:03:22:9b:cb:1f:d1:2a:66:ae:fe:bf:e3:
         76:9a:da:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:14 2024 by rpki-client on console-ams.rpki-client.org