Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File:                     pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier:          qfQciZhx8zARSc1Gd7CXuiDHxqkd+z/qwKIZhBHOO6A=
Subject key identifier:   DE:2E:CA:C6:BB:92:1B:EC:E2:DC:C7:59:1A:2B:46:03:2B:C6:92:92
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer:       /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial:       01901E58C1CC2262CFFE40103DBAD1F5F26A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number:          0E67
Signing time:             Sun 16 Jun 2024 00:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:51 +0000
Files and hashes:         1: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: oufqRP5Z+px8el92kABU30vEw7rIjuwduJoD+6ODH5A=)
                          2: ub4OxjYJpzcfpTgkKyzYZu3RSPU.roa (hash: e0dSkfwmxgS7I9SDYqnLA66JuAF8IH2if8pg1z7TcpA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:c1:cc:22:62:cf:fe:40:10:3d:ba:d1:f5:f2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
        Validity
            Not Before: Jun 16 00:00:51 2024 GMT
            Not After : Jun 17 00:00:51 2024 GMT
        Subject: CN=de2ecac6bb921bece2dcc7591a2b46032bc69292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:53:fe:41:ed:c0:20:c1:37:99:10:38:75:
                    17:59:e3:bb:a6:1e:f1:07:fb:bc:b7:51:a2:bf:ab:
                    82:a8:4d:3c:0f:6f:7f:02:49:a6:da:1b:3e:30:72:
                    46:0e:e6:c0:11:4d:b1:87:86:2e:62:ff:0f:9e:44:
                    55:e2:cf:c3:67:7e:c7:d4:27:47:d1:84:90:d6:6e:
                    97:a7:9d:ce:37:db:2f:ae:a6:8e:e7:ed:8b:b7:05:
                    66:6c:de:af:3c:a3:a6:d4:6f:2c:be:b0:e5:16:27:
                    e6:f1:35:f3:0b:b6:ff:51:20:b2:f1:89:f9:fb:a9:
                    52:e6:26:50:72:29:61:95:b7:0c:05:07:48:4e:b0:
                    54:76:4d:c1:b7:fd:17:cf:32:2b:f6:cb:8e:09:c7:
                    9d:28:2e:eb:8f:17:e0:78:9d:3f:cc:f5:f4:9a:9d:
                    0b:68:41:5b:1e:7b:d7:57:47:38:d5:7f:88:64:c5:
                    e6:e4:22:a3:3d:30:bc:4f:28:a7:bd:e6:85:66:cf:
                    99:65:f4:52:e7:99:a3:60:4b:85:17:98:de:f7:01:
                    44:56:50:a3:4e:84:9d:95:2e:53:58:cc:fb:8b:33:
                    a5:74:56:2e:df:4a:ac:99:4c:f1:53:8a:86:c6:ba:
                    11:40:73:d4:73:0a:c8:07:b1:ce:1f:ac:4c:46:6e:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2E:CA:C6:BB:92:1B:EC:E2:DC:C7:59:1A:2B:46:03:2B:C6:92:92
            X509v3 Authority Key Identifier:
                keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:39:83:40:a7:3f:ca:c6:ec:14:2d:d1:28:22:33:81:4d:fb:
         38:71:19:89:32:e2:1e:c2:72:f2:80:28:cd:c7:60:b7:e5:07:
         7b:00:2a:0c:00:37:78:94:72:6e:87:d3:25:b3:2e:f3:19:38:
         96:20:d0:4c:cf:20:71:2f:62:c9:c5:79:b4:75:4f:d4:c1:2c:
         62:16:4c:13:9d:79:5c:9d:50:c7:4d:da:e9:b7:a1:bf:92:70:
         d9:1c:d4:d5:94:20:c8:11:fe:c9:e1:9a:e0:df:95:b7:fd:af:
         18:39:3d:2c:b7:08:eb:f4:22:1d:32:b8:fb:a0:c4:87:79:3f:
         54:db:88:12:ff:b6:7b:b4:dd:9a:42:d4:84:1c:e3:ff:d7:85:
         22:9a:f0:d8:5d:33:67:4f:1b:b8:dc:2b:90:66:5c:dc:83:86:
         54:b2:08:c3:ea:93:59:98:00:a3:34:28:c7:df:9e:df:d4:c6:
         ec:72:e8:57:e1:8d:d1:fd:bf:71:bb:e4:0e:83:fa:5f:0f:e9:
         e3:51:18:b1:58:bd:03:07:5b:14:6d:48:72:02:91:d1:46:95:
         21:47:51:57:58:c0:d3:1d:bf:c6:4b:df:17:ba:8d:59:8b:f0:
         4b:46:ae:d0:bc:a7:9c:67:bd:34:ae:9e:ea:2f:e8:f7:0d:4b:
         e1:f6:35:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:00:39 2024 by rpki-client on console-ams.rpki-client.org