Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File:                     vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier:          4KAxhFMH/q1CJX9fgl8x9AwnLy8kS7fl8NVCiKsYRdo=
Subject key identifier:   8B:F6:63:4C:42:67:7F:E0:E9:00:5C:21:68:2B:DC:87:39:09:30:8F
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer:       /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial:       01901BFD7899495563F25903E1704F003917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 13:01:54 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:54 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:54 +0000
Files and hashes:         1: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: Kr3mublrxw0JHSwyaad1SBYTrojrYifx8acTfucGiZI=)
                          2: w615yHcEezdQXkk5bJMuXNNGnmw.roa (hash: p0UxBQlYSryqgOgUAQoPwr5CjcDR4gbkF5cznxboiuc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:78:99:49:55:63:f2:59:03:e1:70:4f:00:39:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
        Validity
            Not Before: Jun 15 13:01:54 2024 GMT
            Not After : Jun 16 13:01:54 2024 GMT
        Subject: CN=8bf6634c42677fe0e9005c21682bdc873909308f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:2a:23:21:9a:02:fb:41:dd:c1:4e:5b:fd:
                    6c:f6:d7:a3:9e:76:6d:38:ee:c0:ea:ab:03:e0:1b:
                    61:4b:cb:58:3d:42:f1:88:3f:c8:bd:75:10:68:8f:
                    f9:6f:a5:fa:47:b2:63:99:72:8b:1c:26:f0:91:0e:
                    03:b7:2e:85:3c:2b:f2:38:c9:3d:f0:d2:55:e4:8a:
                    27:75:6f:99:b6:f8:6f:2f:f9:2d:72:83:13:fa:42:
                    35:6a:17:51:98:ff:ec:33:30:e2:f9:ea:2c:d0:f6:
                    89:d9:f5:c3:55:91:b2:18:ed:23:91:08:51:62:5d:
                    4b:66:13:d7:a8:eb:41:d7:28:5a:b4:0e:29:b6:f5:
                    cd:1b:43:aa:71:78:e0:ae:c1:97:c8:6a:c2:b7:99:
                    03:5a:1d:e6:0e:3a:7c:c4:64:01:95:23:42:4a:2c:
                    68:68:21:a8:ad:5b:45:13:c2:1a:e9:0c:78:d2:0b:
                    ef:46:7c:d5:88:aa:a1:d4:46:2a:0d:94:20:8c:75:
                    2b:69:c1:18:bf:bf:4c:29:62:18:59:3d:69:e0:a3:
                    d6:90:ce:70:06:34:89:ed:53:58:3d:73:f2:1a:60:
                    4e:31:0e:5e:5d:05:2f:79:3c:0e:45:88:cd:af:5c:
                    8f:0b:44:3c:d3:00:c4:44:cc:f8:98:f1:cb:25:31:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F6:63:4C:42:67:7F:E0:E9:00:5C:21:68:2B:DC:87:39:09:30:8F
            X509v3 Authority Key Identifier:
                keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:64:32:06:62:d1:51:db:7f:c8:cc:75:f3:04:c3:dc:19:90:
         d3:06:93:ff:15:e7:04:0d:33:60:6e:88:51:a2:56:44:33:4f:
         95:c8:a1:f8:25:42:f8:1a:8a:7e:42:b4:10:4d:13:7d:63:bd:
         7f:3f:ce:06:e4:80:ec:c9:3f:56:36:e0:bc:68:0e:99:91:d8:
         90:c2:2b:65:23:ed:f1:64:d9:28:c0:c2:e3:ab:46:b9:05:3e:
         24:9e:09:08:39:47:7a:64:1c:d8:c6:5d:94:21:7d:67:ff:05:
         0d:70:aa:d1:f6:01:dc:9a:e1:87:c0:dc:69:e5:56:83:48:9e:
         68:f2:79:00:91:5d:b8:51:67:6e:80:c3:99:50:c0:8e:eb:a5:
         e3:55:b8:38:5f:fb:d3:dc:01:48:2b:fc:df:1e:c6:fe:4a:82:
         09:40:5e:a9:92:30:6c:dd:eb:5d:07:13:0e:c2:6c:98:05:9e:
         01:79:0a:90:04:02:87:06:14:84:0e:57:36:a8:77:0e:b0:33:
         05:67:5b:29:b8:16:0c:a4:62:3c:92:9c:f6:92:a8:cd:81:1d:
         ad:97:ec:21:63:39:5d:f6:56:7f:04:f2:e1:b5:61:d9:21:9a:
         52:be:35:44:2c:8b:fb:db:59:84:98:81:bb:37:e1:3e:6e:59:
         db:21:ce:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:09:09 2024 by rpki-client on console-ams.rpki-client.org