Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
File:                     MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json)
Hash identifier:          qYFN84UfKDBLX/fLVBAdlxkXLqiD4QbpLFvGrU4LBtg=
Subject key identifier:   45:ED:B9:7B:30:A7:30:C6:54:7F:B1:95:82:42:00:7E:04:B7:79:9E
Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
Certificate issuer:       /CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Certificate serial:       01901CA15A54F01225D000F725D212631E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 16:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:54 +0000
Files and hashes:         1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: KJJ5vU311x5F8/AI55Viqhggp2pfMoKc8SQsWHwQ5oE=)
                          2: UHS09csqaObC-HbVNwndlkv1gO8.roa (hash: /dPYGgjMrAFfOP70CGZLnObwIo0lBJ7s0x+VishlSv0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:5a:54:f0:12:25:d0:00:f7:25:d2:12:63:1e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f
        Validity
            Not Before: Jun 15 16:00:54 2024 GMT
            Not After : Jun 16 16:00:54 2024 GMT
        Subject: CN=45edb97b30a730c6547fb1958242007e04b7799e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:b8:f4:b3:90:f0:36:78:2b:82:8f:7e:2b:
                    3f:82:ac:74:96:71:60:a3:03:e9:38:1d:79:b5:6c:
                    23:40:38:2e:aa:b1:e3:8f:93:c3:71:d6:1a:11:7f:
                    11:37:bb:24:46:e1:a6:e8:cd:1a:ac:af:21:f5:e9:
                    e8:90:a9:58:80:ed:9d:c6:a5:0d:6f:17:a2:25:d8:
                    b7:05:e2:a1:5b:95:b1:7c:07:29:09:87:36:42:95:
                    9d:27:49:84:56:83:19:b4:74:7d:1d:cf:e0:c9:b3:
                    4a:c1:22:7f:4f:94:66:66:07:5d:43:e8:06:ed:6b:
                    09:fe:ba:1f:91:81:e5:fc:46:08:2a:20:ef:02:68:
                    cf:ec:c5:4f:47:69:04:e4:28:97:2f:04:ba:6e:2e:
                    23:31:d6:8c:71:ab:68:95:b3:1f:09:29:fe:c0:41:
                    22:d7:0e:b7:63:76:11:ba:d8:be:53:05:85:3f:75:
                    73:9a:bc:1d:19:b9:6e:3b:b8:30:a6:d7:a1:a1:4c:
                    a9:be:08:3e:90:80:62:be:fc:d5:66:9a:3e:e3:d8:
                    fb:67:29:ca:a5:1b:ed:fc:ea:63:ba:79:28:cf:ac:
                    8c:49:8d:ef:dd:7e:8c:b6:f9:3b:ee:96:7a:c7:fc:
                    f8:2a:ef:44:ef:d1:9c:83:34:90:77:0d:9a:9d:b7:
                    04:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:ED:B9:7B:30:A7:30:C6:54:7F:B1:95:82:42:00:7E:04:B7:79:9E
            X509v3 Authority Key Identifier:
                keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ec:56:6d:c9:3e:ab:19:bf:08:99:1b:ee:f9:9a:f8:c7:f3:
         a8:5d:b7:6f:89:d2:e6:69:44:aa:64:5f:4c:d6:a1:7b:74:6e:
         a9:b5:1d:83:00:d5:62:33:b8:fe:12:86:51:86:b0:b6:3d:9e:
         19:44:0d:d3:b4:7e:7d:42:58:b3:cb:85:76:48:d9:61:f9:5b:
         64:c7:e8:e3:b2:0b:fc:54:f4:fd:66:b2:95:ad:8e:82:65:3e:
         bb:e4:3c:30:87:c6:bb:21:be:9a:11:c7:17:a0:27:eb:58:4f:
         ee:0a:5d:fb:8c:76:5b:d4:ab:59:3b:1d:76:3e:b9:1c:86:59:
         fb:e1:c6:6f:f3:1b:98:3c:97:d4:e3:e9:a0:75:75:1f:79:e3:
         74:b9:b4:5d:59:1b:00:9f:66:fd:1b:d0:6c:a6:bb:f3:c7:94:
         8a:fd:85:93:a6:d1:aa:54:e1:3e:e0:45:ed:16:a3:25:bd:62:
         5a:b6:6e:15:32:53:b8:35:d9:c6:5f:d5:87:c4:97:a2:a9:89:
         15:46:36:18:4b:c5:d4:98:85:b8:53:dd:97:64:d7:ce:33:28:
         65:94:3e:cc:bc:44:ad:fd:1f:ee:7e:bb:4c:3e:ef:93:f0:49:
         08:a0:1b:27:57:cb:6b:f4:c0:03:f0:34:22:9b:14:fa:6b:0a:
         5f:76:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:33:09 2024 by rpki-client on console-ams.rpki-client.org