Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File:                     4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier:          d4sOhpa4ixDD+OKr2LAz1K/Omsj25dvVjce00lQcmgI=
Subject key identifier:   E8:5F:B7:06:93:94:29:86:4D:D3:35:48:B8:9D:6D:D8:03:CB:0B:A0
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer:       /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial:       019071D11688202542E1A7FB311312988859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number:          0534
Signing time:             Tue 02 Jul 2024 05:00:46 +0000
Manifest this update:     Tue 02 Jul 2024 05:00:46 +0000
Manifest next update:     Wed 03 Jul 2024 05:00:46 +0000
Files and hashes:         1: 1-_w5WwvNCKRAhcLuy-a85g8yLzI.roa (hash: 9hgeLHNaDV3NhlA9gMtct8ApKJRDDDY/zsHAJD8DaAc=)
                          2: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: IJTwf/MYAB+hdJooqNEbE2vQbP6754DDAP4h8N0VUg4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:71:d1:16:88:20:25:42:e1:a7:fb:31:13:12:98:88:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
        Validity
            Not Before: Jul  2 05:00:46 2024 GMT
            Not After : Jul  3 05:00:46 2024 GMT
        Subject: CN=e85fb706939429864dd33548b89d6dd803cb0ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:07:4b:c9:58:c2:10:c2:ec:06:84:9a:b7:
                    92:bc:96:b7:1a:8f:98:f8:90:4a:8f:db:a9:ee:15:
                    af:46:e2:e3:a4:c5:18:26:e5:1a:81:58:ec:39:c3:
                    49:bf:4e:15:3a:0b:c9:f8:05:78:cd:1e:f6:1d:bf:
                    84:15:ef:57:80:11:1f:84:22:c1:ef:fd:9f:ee:79:
                    e3:b1:08:54:21:54:1f:04:0c:9f:3b:76:14:ca:69:
                    74:3b:27:c2:4e:e0:df:80:c2:42:b6:89:91:ad:33:
                    ef:4e:1e:3a:6d:a6:0d:0d:f4:8c:cb:44:9b:7d:95:
                    41:87:3e:6d:bc:b8:73:61:c2:ed:7f:16:57:ed:4c:
                    69:6e:b9:fb:46:e1:36:b6:3c:6e:b2:a4:a0:4e:d2:
                    b3:62:6a:31:35:4f:9f:ed:65:8b:c4:40:ec:f6:c5:
                    83:98:ae:22:38:21:9a:fd:8a:7a:b3:fa:94:c7:cb:
                    73:da:49:5e:56:ef:8e:39:43:47:d8:e9:8d:10:a6:
                    5c:29:64:7f:ed:86:6b:78:3d:e0:4c:02:2e:0e:72:
                    41:44:cb:07:b8:50:e4:7c:80:99:42:34:31:d7:e3:
                    7c:fe:d4:cf:9f:98:ca:e4:f3:e1:a6:0d:39:18:ce:
                    3b:4a:f6:d5:d1:8a:77:da:ac:49:d7:c5:bb:b6:cb:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5F:B7:06:93:94:29:86:4D:D3:35:48:B8:9D:6D:D8:03:CB:0B:A0
            X509v3 Authority Key Identifier:
                keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:63:21:bd:d9:76:e0:c0:40:c7:7e:c0:ac:9c:d1:36:2a:21:
         81:a6:56:79:3c:c6:b6:75:2b:13:36:29:23:db:00:4a:f6:09:
         53:d6:8c:71:78:2c:95:6c:b8:5b:02:a1:fe:8a:5f:b5:de:9a:
         be:2b:67:38:83:15:53:e2:ba:9e:47:a8:cc:a1:5a:2f:e9:b4:
         e6:5d:67:4b:73:1c:2a:65:a9:1a:d1:86:ba:49:03:67:b1:ac:
         d4:aa:35:89:ac:e8:4b:09:d2:9a:17:2d:72:5d:18:08:6a:d0:
         b0:3c:e1:6b:98:93:7a:bf:ca:39:99:ab:3f:3b:b6:76:45:ac:
         9e:7e:6a:93:e1:f2:59:41:fa:03:71:af:0c:39:81:f4:48:c6:
         cb:b8:8c:26:e6:5e:69:c5:d0:6d:b4:93:13:ce:d6:c9:39:e8:
         35:ab:6a:cd:88:0a:e4:e3:ab:9d:01:56:ab:ec:fc:0a:85:15:
         0d:ea:00:a5:84:d7:4e:e7:b0:9b:ba:4b:d9:25:7c:37:7a:db:
         f1:83:a3:4c:cc:9d:c3:dd:7b:f8:47:93:2a:af:a9:28:37:7c:
         0d:fc:2e:33:57:ff:b1:b5:c9:1b:62:b5:92:2b:f9:66:58:72:
         bd:ee:32:1e:3a:67:9b:86:65:89:7d:3d:12:99:0e:72:bf:eb:
         e3:3f:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:12:14 2024 by rpki-client on console-fra.rpki-client.org