Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
File:                     VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft (raw, json)
Hash identifier:          tiGQ/O9fkR6VaZzZxw21nMIVRyoDv9GG322gkfrfLLA=
Subject key identifier:   96:1B:E6:CE:1C:F6:7F:4B:A0:23:CB:B4:71:A5:5F:41:C1:19:74:26
Authority key identifier: 55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
Certificate issuer:       /CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Certificate serial:       0190486864A0CDA0ACA5A18C93869E1670F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
Manifest number:          0A45
Signing time:             Mon 24 Jun 2024 04:01:59 +0000
Manifest this update:     Mon 24 Jun 2024 04:01:59 +0000
Manifest next update:     Tue 25 Jun 2024 04:01:59 +0000
Files and hashes:         1: Fzq4BtXo74qTLXMQOS7z3Wskf-o.roa (hash: LfLoBf6CM3k4S8M2Scrs7YPUMNqgckQlkOdpUyi03SI=)
                          2: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl (hash: 6oTHHK4dOOgJD0C61968U3jZJaDXUFVpnCTmRj7VCTY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:64:a0:cd:a0:ac:a5:a1:8c:93:86:9e:16:70:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
        Validity
            Not Before: Jun 24 04:01:59 2024 GMT
            Not After : Jun 25 04:01:59 2024 GMT
        Subject: CN=961be6ce1cf67f4ba023cbb471a55f41c1197426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5a:3f:a8:4a:19:45:90:10:ac:66:59:e3:30:
                    36:74:f2:55:53:51:e7:75:68:28:35:48:db:f9:7d:
                    c1:af:35:9f:81:53:56:f8:a3:a9:b4:40:15:6a:0a:
                    36:73:f4:38:57:e0:75:88:28:b2:64:97:06:a2:22:
                    53:a6:88:ac:3c:08:23:8e:72:d0:93:95:79:02:22:
                    fb:50:6a:8a:e3:33:64:2a:22:e7:e4:09:06:ba:fc:
                    56:4f:89:0c:f3:08:39:5f:b8:ff:ef:7a:b2:88:44:
                    21:13:dd:95:72:94:b4:5c:ea:4b:0a:5c:64:f2:7f:
                    14:3a:a2:48:44:45:83:f1:41:eb:ed:20:af:9d:01:
                    17:2b:3b:0b:9a:66:84:de:8d:3b:0f:39:d9:c1:f5:
                    e7:a4:06:60:df:08:0c:d5:22:ad:32:0f:f2:c4:88:
                    31:b8:bb:b3:64:ad:e2:04:7d:c2:b6:bf:3d:66:0d:
                    1f:c0:d0:40:34:b9:5c:ca:d9:e8:5b:a5:2b:f0:0a:
                    dc:55:65:08:f5:96:64:14:3a:b6:56:b2:64:2c:56:
                    a8:e4:4a:45:a6:a9:41:42:99:2d:fc:a7:62:bb:f2:
                    e5:8a:f1:49:f2:65:a8:e8:1c:2b:83:e8:f1:b7:54:
                    41:94:dd:c3:b8:79:01:c3:5f:90:f4:d6:ee:fa:94:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1B:E6:CE:1C:F6:7F:4B:A0:23:CB:B4:71:A5:5F:41:C1:19:74:26
            X509v3 Authority Key Identifier:
                keyid:55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:b5:41:d6:05:66:df:cf:78:83:ee:0b:8a:92:04:be:18:
         48:f4:4c:2a:63:c1:ee:20:31:49:5f:f1:cc:a2:85:f4:e7:ce:
         59:e1:40:4a:dd:21:9e:a1:1b:9a:4b:66:1f:b4:67:cc:33:09:
         5b:6b:da:da:a3:bb:36:23:4d:b1:bc:dd:5e:08:cc:56:ec:01:
         a3:f1:3a:96:de:a4:dc:cf:84:f8:a8:d0:f3:02:7c:be:7f:22:
         15:ec:0e:5b:b3:21:42:d9:a0:f5:40:dd:52:c0:7a:99:63:ce:
         29:3e:2f:51:bc:aa:f9:79:95:58:63:6e:ed:e0:77:35:a4:c8:
         9e:c0:2f:e7:3c:a6:b8:f1:21:db:1f:2f:48:d2:77:72:06:61:
         1e:4d:26:99:29:e5:91:4a:fd:30:d2:11:67:74:2a:44:d4:d0:
         9d:b2:45:cc:c6:e6:67:16:d0:03:d6:84:65:34:e3:2a:6a:4b:
         d2:99:2a:b3:9a:92:3a:68:00:8a:74:dd:b9:e7:6f:12:e8:9a:
         e5:98:d9:b6:8c:62:87:7a:44:d5:c0:32:5a:6b:61:cb:2c:9e:
         31:c2:35:2d:8c:8f:a1:9e:4e:89:da:18:fb:bc:d6:96:be:98:
         50:c5:46:ce:f5:51:3e:b5:a3:a8:b8:af:6b:fd:83:b8:6c:60:
         7e:f5:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:46:14 2024 by rpki-client on console-fra.rpki-client.org