Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File:                     XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier:          tZ/uWK8WMdK/LvHSZg1bDC34Jgc52DSYOs2GfZayrgg=
Subject key identifier:   20:D9:47:53:E7:68:9A:FB:1D:21:1E:B7:2A:EC:C3:5B:90:89:10:8B
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer:       /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial:       0190456654542D60024C0A31DAF154A9F4BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number:          104A
Signing time:             Sun 23 Jun 2024 14:00:52 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:52 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:52 +0000
Files and hashes:         1: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: qTH7PGVWmebS9Ou3WprX9OmF6RF2t55jMFZOTPiWfso=)
                          2: oDez6TEVUoEvgctcSdpeGk6jrUA.roa (hash: Htcy73my5W7nqRxBPakeI5o1amKZPnkc8bVZiu5glf4=)
                          3: tWv38KFjoQM-_KWFvFMTczJRG78.roa (hash: rP+xZZy+IdHuz3j1zur5ys+SVN3T/wOnPuqWMeAe+4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:54:54:2d:60:02:4c:0a:31:da:f1:54:a9:f4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
        Validity
            Not Before: Jun 23 14:00:52 2024 GMT
            Not After : Jun 24 14:00:52 2024 GMT
        Subject: CN=20d94753e7689afb1d211eb72aecc35b9089108b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:86:a2:22:31:5a:1d:bf:8f:c1:f0:14:d8:b1:
                    1b:1a:fb:d6:80:fd:b4:9c:43:0b:06:8b:24:76:08:
                    b6:cc:9f:69:a1:3f:83:b4:3b:2a:35:bc:ea:b2:5e:
                    bd:17:73:21:18:52:68:1b:ed:2b:e1:c9:2b:f2:9a:
                    86:a2:c3:e5:b2:11:ad:1f:1d:55:ee:5c:e6:01:1e:
                    22:99:1e:71:92:a6:c8:10:4b:23:fe:7b:07:89:1b:
                    04:7f:79:72:9c:e8:e1:84:0b:81:79:a1:43:ec:b5:
                    a7:d8:03:f1:19:64:e0:28:02:8b:6a:2c:86:f6:4c:
                    97:9f:c1:cd:ca:4d:c2:63:8f:40:ff:08:ee:aa:2d:
                    b5:72:72:f1:64:50:1f:5c:ab:11:2c:89:58:58:13:
                    71:a3:a0:14:55:f2:8d:83:0a:b2:00:fb:c1:f6:d9:
                    32:57:cb:b5:4d:a8:3c:09:49:68:3b:01:62:11:ad:
                    a8:58:8d:a2:8b:e5:18:35:de:9a:6d:e0:16:d1:c6:
                    7d:74:c0:23:40:3a:4d:59:22:51:54:f8:52:74:e4:
                    aa:df:86:d4:16:3d:59:4a:55:4b:7a:fc:a4:75:90:
                    4e:a6:8a:9b:9d:97:38:60:90:a7:50:5f:8e:ac:e7:
                    15:7f:4f:60:5d:c2:98:db:ac:69:f7:d9:24:76:47:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D9:47:53:E7:68:9A:FB:1D:21:1E:B7:2A:EC:C3:5B:90:89:10:8B
            X509v3 Authority Key Identifier:
                keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:d7:b8:5d:c0:af:70:2c:01:18:48:27:54:fa:37:85:dd:
         cd:35:e6:c6:3a:ff:01:28:33:f0:35:79:29:b4:24:0a:ee:6b:
         3f:9c:bc:33:40:68:27:ba:59:a8:be:8f:50:22:ab:a4:0f:6d:
         ed:bc:04:c8:de:d5:70:80:7c:0c:d1:33:0b:c3:22:07:9e:f6:
         1e:f7:1d:02:b4:60:ae:7f:fd:c5:97:77:0f:bb:f8:85:9e:bc:
         4a:c7:84:4d:6d:53:19:d5:c3:40:b7:20:bf:10:b6:ec:89:33:
         a8:48:66:46:ee:f6:1a:aa:30:f3:e1:11:0d:88:d6:7d:e5:22:
         df:5b:8b:5d:7d:8e:1c:b6:8f:37:74:34:e1:96:0d:5f:22:5e:
         b4:7a:2e:84:63:aa:42:26:11:73:04:c5:d6:a8:cb:05:b3:87:
         92:74:ee:36:d5:bc:a1:b9:d9:55:ad:7e:b2:76:fd:b3:19:f2:
         fe:de:00:92:a3:a2:bb:e5:94:35:16:64:a4:c2:b0:0a:04:d3:
         4e:20:2e:97:55:bb:a0:bf:e2:d3:30:5e:db:a4:c8:c5:ca:27:
         a1:9e:cf:88:d4:53:26:b6:49:88:54:fc:e6:0b:fe:f3:7d:ea:
         ec:e6:66:52:25:fc:47:aa:25:79:9a:c0:95:b6:db:fb:bc:90:
         d9:f0:5b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:15:08 2024 by rpki-client on console-fra.rpki-client.org