Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.mft
File:                     INYXvbXXaOOV5JtBzYEhe9MWOrM.mft (raw, json)
Hash identifier:          krJcfqPJS7Q5Nc9z+vE/00NEv/c4UlRSQdMHuK/Q9b0=
Subject key identifier:   9D:17:0F:69:72:97:35:C2:37:27:6C:F4:50:E3:08:8A:DA:99:BE:36
Authority key identifier: 20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
Certificate issuer:       /CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Certificate serial:       01901F347A717EFF3FBC8517E43112D269A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.mft
Manifest number:          11CA
Signing time:             Sun 16 Jun 2024 04:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:51 +0000
Files and hashes:         1: INYXvbXXaOOV5JtBzYEhe9MWOrM.crl (hash: kimMYOnhL9okZJDFN2Ra8+C2yG5NmLT3y65SbGpSVE0=)
                          2: f8G5mW9F4NTNvR-ciqR9doELxPs.roa (hash: pRStVUQvssmHho3uLaF/xaQ4mlTT5CnNIo7tUiFVdpA=)
                          3: fXymCcg43rMAKs2mcsEPZsFLWgo.roa (hash: Xv/6UgFRd3Mr3j672h6+YnDJ6G+I38/5fynk5ddKwQE=)
                          4: grz505nrdjgW5a8HdyTkSk9fgY0.roa (hash: QxRCzWcA6nXty7Egh7oq0WwGL6Ksn57uL6+XYj8lc6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:7a:71:7e:ff:3f:bc:85:17:e4:31:12:d2:69:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
        Validity
            Not Before: Jun 16 04:00:51 2024 GMT
            Not After : Jun 17 04:00:51 2024 GMT
        Subject: CN=9d170f69729735c237276cf450e3088ada99be36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:f9:67:06:74:d6:d7:34:ba:20:82:fa:83:
                    7a:a2:c2:5a:62:37:18:44:39:0d:22:57:65:e7:bd:
                    16:eb:ba:b4:a1:83:26:f9:a2:87:69:ca:11:21:22:
                    14:dc:7a:4a:94:0a:90:e3:e6:df:db:56:31:2f:48:
                    22:82:9a:d7:a2:0c:69:72:60:88:8b:fe:95:be:46:
                    05:af:3a:66:22:ae:9d:41:65:b5:b5:b7:04:39:55:
                    81:bf:f2:ee:04:93:39:d0:bf:90:a6:30:30:c2:90:
                    4c:ee:ea:b4:0f:a2:b8:21:fc:54:75:7e:ee:0a:5d:
                    58:8f:5f:9e:46:a2:24:62:6e:2c:cb:93:3f:f2:e3:
                    d2:3f:33:ef:be:f1:f8:bf:be:7b:dc:69:e3:e2:e5:
                    52:ea:b6:0e:46:48:74:1f:3b:47:c2:2d:95:df:7b:
                    98:bd:13:05:f4:be:77:91:f5:b4:38:4d:40:a8:7c:
                    cc:27:0f:43:c3:d4:60:0b:e6:3e:5b:9a:ee:88:15:
                    d5:ff:da:66:a3:25:65:35:8c:5a:98:ac:dc:e2:2f:
                    73:fa:d7:1b:3c:1e:d4:eb:f2:d4:b5:16:b9:22:5a:
                    85:9d:21:cf:91:7e:41:2a:40:9b:90:ea:32:b7:aa:
                    41:a7:ff:d0:4a:e4:e2:eb:3b:19:42:58:4f:04:51:
                    28:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:17:0F:69:72:97:35:C2:37:27:6C:F4:50:E3:08:8A:DA:99:BE:36
            X509v3 Authority Key Identifier:
                keyid:20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:85:0f:2e:56:81:75:bc:0b:8d:03:30:50:4c:c3:95:a3:
         0a:a2:a0:86:1d:8d:4b:97:ec:71:25:51:34:8f:f5:1a:91:cb:
         df:bb:ea:e7:a3:70:96:0c:95:66:78:ef:3a:9b:bc:51:e8:d8:
         82:49:40:7b:20:10:b8:69:8f:20:62:c7:4a:13:5d:8a:0e:a5:
         06:c9:36:dd:e1:59:8f:7b:2c:2b:ab:b8:80:16:11:05:89:42:
         22:19:66:ec:a7:3d:87:3e:9d:bd:64:95:c1:d5:7e:8e:43:2a:
         58:54:da:26:df:7f:a7:da:4e:62:4c:f4:36:66:30:81:7f:e3:
         df:90:0a:d8:c0:0f:d5:68:c2:ac:58:27:bf:0c:2e:14:ff:39:
         06:92:f0:58:37:b9:56:ac:6d:fe:b3:69:f7:cd:aa:58:51:21:
         e9:59:c5:27:e9:34:2e:ab:46:29:bd:2f:90:da:59:b7:07:1d:
         29:3d:c5:04:a6:e5:38:43:ab:b1:de:74:1b:37:ce:ec:73:f4:
         1c:8d:ba:10:92:3b:73:ef:4e:44:b9:f4:ff:d7:a4:19:2d:da:
         3c:d3:5e:65:7e:fc:3f:15:29:17:05:eb:5a:5b:b3:2e:f6:57:
         8e:62:70:5c:8b:56:7f:96:ff:92:73:39:87:9f:8a:f5:2f:3b:
         17:21:c4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:41 2024 by rpki-client on console-fra.rpki-client.org