Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File:                     458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier:          qX64frcWTh3flLqVJgJSTxOIYXkaISSfV7MBlVJUr7k=
Subject key identifier:   F4:F4:CB:B6:83:E5:7E:72:16:22:FA:F2:1D:C5:50:76:FE:D0:55:D7
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer:       /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial:       0190411B957720C0DA110E350CA3A15703C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number:          11DE
Signing time:             Sat 22 Jun 2024 18:00:44 +0000
Manifest this update:     Sat 22 Jun 2024 18:00:44 +0000
Manifest next update:     Sun 23 Jun 2024 18:00:44 +0000
Files and hashes:         1: 458aboTAJ378tW2UKw615FZHESk.crl (hash: nG0Amr8dp/rk3Ej7D8b+Cb4PgiJrQa6lmfjyFTez6W8=)
                          2: JZVOQicSqQ9kZ0L8_JALfXURfRY.roa (hash: lbLC+42djuWZ60UKXlVUGmagjVYOlRMLaKKaBMnRIjg=)
                          3: qaPWFc8W4DHYDBR4lTSF2V3DUE4.roa (hash: xnbDjFAfr5Kvy9hpNdoqK7W1S/GekZWZT8BX+UHZFr4=)
                          4: tJmaU_8MK0aMA95XAsLisvttvnI.roa (hash: Bjr00zJRI9ZW+iHEJNa+a5rA8F8n3/lBrtZFiQ8Wz3g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:95:77:20:c0:da:11:0e:35:0c:a3:a1:57:03:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
        Validity
            Not Before: Jun 22 18:00:44 2024 GMT
            Not After : Jun 23 18:00:44 2024 GMT
        Subject: CN=f4f4cbb683e57e721622faf21dc55076fed055d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:87:01:1d:57:bc:b8:67:fc:53:fd:08:01:
                    94:80:2c:39:77:10:ac:56:d0:8e:60:0e:d2:41:a5:
                    a8:13:f5:23:d0:09:fb:49:8b:8d:73:3e:e6:79:c4:
                    52:32:55:6a:52:fa:bb:36:dc:21:ac:ee:75:af:1d:
                    b1:1a:ce:93:8c:4e:24:d0:3c:17:3c:ba:1d:4d:ca:
                    50:67:99:4c:81:f1:ba:25:8e:fc:e0:40:12:64:f8:
                    3a:0e:1e:ba:e1:53:61:c0:57:ed:4a:cd:db:66:2c:
                    e5:06:48:5c:a4:e2:8d:b0:71:8c:26:69:c0:49:c8:
                    05:3f:ac:a2:8b:8e:ef:57:1a:b4:85:7c:98:15:b7:
                    3a:c7:14:fd:26:9e:0f:16:d6:f3:3d:f5:29:48:ac:
                    b2:7a:91:4c:09:47:e0:6a:31:51:32:44:46:20:17:
                    3a:40:4e:6f:b3:38:f6:77:2b:f1:19:af:60:0d:24:
                    cb:17:89:f2:43:be:93:cb:5d:cd:89:57:77:0d:26:
                    6e:11:80:12:78:6d:9b:ca:0b:39:cc:fc:a2:96:23:
                    65:c3:46:9d:ba:95:93:5d:b9:1e:33:78:e8:b7:62:
                    56:0f:69:b6:2f:06:c0:7a:02:93:d5:47:17:9b:1c:
                    2d:5d:e0:90:e6:1d:eb:98:38:23:b6:43:62:6c:40:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F4:CB:B6:83:E5:7E:72:16:22:FA:F2:1D:C5:50:76:FE:D0:55:D7
            X509v3 Authority Key Identifier:
                keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f3:cf:b2:16:61:9c:f3:76:80:90:d8:bc:8d:9c:3c:82:f4:
         9f:11:bc:66:01:f6:04:4e:30:a2:8f:59:eb:a9:4e:d9:1d:bb:
         70:03:4d:b7:7e:af:9a:49:0c:ca:e9:b6:24:1f:01:71:55:d5:
         98:5d:0b:d9:a4:e2:4a:a5:1e:65:55:1c:38:4e:e8:71:0e:66:
         3f:46:2f:8e:e1:ad:a9:33:90:98:97:19:eb:74:7c:c4:64:80:
         ff:02:86:56:d7:e3:f7:ee:f4:6a:ac:4d:16:b9:34:36:9d:f2:
         f1:49:c6:11:a9:b3:67:ba:ae:4a:47:4e:a1:34:5d:df:5d:3c:
         00:ed:42:6a:a8:31:72:03:95:9c:1c:f7:0c:49:03:35:88:1c:
         b1:15:13:8d:81:86:1b:c1:96:22:d7:f0:fe:47:9a:2c:52:7d:
         ef:81:0c:63:40:7f:98:eb:64:ef:24:cf:e3:77:23:11:27:76:
         f8:72:44:9c:ff:96:9e:47:f2:61:76:b7:c3:8c:2e:b9:51:09:
         ec:05:2a:07:b6:27:a2:86:46:26:e1:af:ee:55:cd:8e:25:a2:
         55:0a:49:27:d2:a8:e1:14:bf:b8:c6:3f:b3:a2:3a:08:a9:42:
         80:7a:68:1a:02:bb:07:49:6c:82:e2:05:44:7a:60:3d:04:f1:
         43:b8:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:23:36 2024 by rpki-client on console-ams.rpki-client.org