Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
File:                     RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft (raw, json)
Hash identifier:          YocdXZaVFoO3zM7OhtznnqzoQry3COPtApuSpAcfuiw=
Subject key identifier:   52:80:2A:AE:EF:1B:74:4A:9E:91:47:50:8C:D8:CC:27:16:9A:B8:22
Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
Certificate issuer:       /CN=4534cab4450404862b201fe733f2c70a6bf52924
Certificate serial:       019045D4867574EB0BEC5280AF33C59FDF04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 16:01:14 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:14 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:14 +0000
Files and hashes:         1: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl (hash: XltgLWcEuwqyDoljFFeODNSkWxfilEQW4EDVAT/iq6g=)
                          2: erRL4g97SUQTXTKIHJmuTkuZab8.roa (hash: YQSymn+F5eAetzfu8JPySIOoWv/yPq5KGrosA2p6Gck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:86:75:74:eb:0b:ec:52:80:af:33:c5:9f:df:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924
        Validity
            Not Before: Jun 23 16:01:14 2024 GMT
            Not After : Jun 24 16:01:14 2024 GMT
        Subject: CN=52802aaeef1b744a9e9147508cd8cc27169ab822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c0:c5:3d:27:02:7d:88:db:07:e9:62:5c:b3:
                    65:9d:f0:fc:d0:d5:c4:4b:7e:dc:ed:03:1c:70:c1:
                    9a:49:33:b6:0d:78:c2:e3:d7:62:94:00:c6:69:c1:
                    86:6a:14:67:59:3a:33:7d:fe:39:4c:d0:40:a3:92:
                    3f:de:f0:d9:c0:bf:b5:4d:e0:4c:e0:18:69:2c:74:
                    1b:38:9b:63:bd:c8:73:3a:14:4e:76:12:42:a6:cd:
                    48:f0:c3:14:bb:e5:c2:0f:64:c8:12:91:64:c4:85:
                    d4:72:98:a1:14:f2:07:96:a3:62:a9:72:a6:61:3c:
                    6a:38:c6:06:f7:89:d0:78:2d:3f:c4:ab:d3:38:84:
                    94:a0:4b:3e:9c:f4:f8:15:44:a9:fa:02:74:00:84:
                    97:75:94:01:cb:4a:b1:18:ef:ee:01:82:cd:b2:47:
                    c8:f1:b1:5f:21:55:67:9f:72:7e:20:1a:19:dc:47:
                    d4:e2:75:cc:78:57:19:05:43:8f:c9:90:4d:3c:07:
                    2f:19:8d:42:2a:a5:7f:ee:f1:a0:6c:a5:b4:04:20:
                    e7:04:a3:a6:fb:32:f1:85:ef:3f:5b:e3:68:08:ab:
                    4b:63:7f:af:03:11:23:8a:4c:84:8e:a3:0f:d2:7a:
                    ce:62:8c:a5:f9:29:72:70:50:aa:be:06:74:c1:1b:
                    16:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:80:2A:AE:EF:1B:74:4A:9E:91:47:50:8C:D8:CC:27:16:9A:B8:22
            X509v3 Authority Key Identifier:
                keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4e:3d:69:7f:b1:62:a4:75:9f:97:8b:3d:1c:b8:4b:e4:31:
         c2:2e:05:99:65:9e:2e:53:0d:e6:56:d7:8d:e7:fd:b1:ef:d2:
         60:47:54:6d:3b:ff:be:20:df:fa:30:1b:47:cb:bd:f1:46:c4:
         5f:f2:e1:ba:1e:6a:c9:16:10:a4:95:2e:9a:9c:31:46:0e:33:
         29:f8:ba:eb:ab:97:54:97:36:24:83:a3:c9:73:55:25:ae:d5:
         72:94:a8:90:72:f6:e2:5f:d5:af:03:ea:c9:e9:0e:15:64:e1:
         46:93:72:70:5f:fe:95:68:b2:96:cc:f3:df:b5:87:40:20:26:
         b8:b2:f0:db:2e:5c:b4:99:4e:6d:7a:e6:37:c9:12:26:7d:7d:
         1f:3e:99:85:49:ce:e0:32:35:26:56:0f:e4:ae:c0:d6:ce:b7:
         34:f3:f5:34:bb:5c:40:46:fe:5a:01:0c:79:aa:f6:42:32:ed:
         36:41:d3:f4:7b:69:2c:fd:38:6c:66:4c:7e:05:98:3f:f5:47:
         a7:d0:f0:52:d6:68:31:88:da:4e:4b:cb:76:fb:79:df:82:7d:
         3f:d4:56:9a:8a:a0:76:a2:ca:fb:28:9a:1c:93:13:c4:48:63:
         4b:d3:6f:d5:46:64:50:f5:01:f6:bc:73:89:d3:95:90:b9:67:
         a0:b2:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:44:18 2024 by rpki-client on console-ams.rpki-client.org