Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File:                     tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier:          Al2NrXRTdBWLUPhJT6R61MDKw0DJlljQ485GAyb5yW0=
Subject key identifier:   4A:23:0B:8D:00:69:6B:F4:7D:83:94:84:2A:30:ED:DB:90:CB:5D:BF
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer:       /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial:       01904566220F485EE8C68F0D4B35CF69DF12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number:          11D8
Signing time:             Sun 23 Jun 2024 14:00:39 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:39 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:39 +0000
Files and hashes:         1: X-yUds0raYvMDiXf2mdMuIqhC-k.roa (hash: vZWbCCGOlPwp0UrD6VjjJ1rsH2e2JDL2ni+7691v3B4=)
                          2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: uC1kYnMtFqn5t4usetBWw2738ifzUUZBJKJMzA0Ca+g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:22:0f:48:5e:e8:c6:8f:0d:4b:35:cf:69:df:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
        Validity
            Not Before: Jun 23 14:00:39 2024 GMT
            Not After : Jun 24 14:00:39 2024 GMT
        Subject: CN=4a230b8d00696bf47d8394842a30eddb90cb5dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:b9:92:57:11:ca:d0:2f:8a:8b:9f:dd:75:
                    44:f6:f0:0a:a1:34:fd:e8:7a:79:0a:24:4e:f7:5a:
                    21:40:b9:cd:f4:c9:9e:8a:13:a6:17:ce:f1:2c:85:
                    1d:1d:0d:7b:d9:05:fc:2a:fe:71:65:f7:ef:2c:6b:
                    7c:59:85:1f:3c:d9:b5:db:4e:58:d5:e2:3a:89:63:
                    e4:bc:c4:c3:93:27:b4:84:79:34:0d:99:66:e0:70:
                    4c:a4:c2:1a:5b:57:af:e8:c8:46:0a:a0:54:c4:a2:
                    e5:46:80:c3:d2:ec:e6:68:1c:ed:1a:02:6a:80:9d:
                    bb:8b:3f:e4:8e:96:f6:82:99:93:59:35:6d:6d:8b:
                    b0:85:16:5a:13:4b:5a:5d:ae:5a:7c:64:3b:1e:ad:
                    3c:f4:5a:8b:87:83:93:ad:a8:1d:70:68:f2:35:ef:
                    62:5c:a2:66:6a:ac:d4:27:87:3c:71:c0:08:b2:04:
                    30:f7:7c:51:c0:3e:a3:56:03:75:af:5f:ea:78:e6:
                    6e:0c:6a:8e:67:85:b9:dd:3c:1f:bd:95:d5:d5:2e:
                    2d:46:5d:13:e4:37:ff:e5:25:71:25:58:18:25:fc:
                    fc:e5:1d:d4:c8:d5:a2:2f:ad:47:d1:59:59:13:b0:
                    b5:db:1c:f7:bb:14:a7:8e:ae:42:35:90:73:89:a2:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:23:0B:8D:00:69:6B:F4:7D:83:94:84:2A:30:ED:DB:90:CB:5D:BF
            X509v3 Authority Key Identifier:
                keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:80:44:bf:d2:0c:db:0c:d3:be:d4:04:18:63:52:24:00:b5:
         3a:5b:30:38:95:3d:d7:12:9e:7b:cc:1d:c5:d9:35:69:a7:c1:
         de:ca:c4:c2:b2:fe:30:9c:a2:a3:bc:72:42:c4:47:56:fa:c8:
         b1:a8:be:a5:0c:97:88:29:3c:3e:7e:40:a3:0a:5e:62:d3:c1:
         2e:e4:60:b2:19:df:ab:19:61:ba:b3:ea:99:17:b9:a4:fc:8c:
         ee:f7:76:10:73:a2:59:8e:a1:16:21:61:ba:8c:ad:32:58:fe:
         f7:b5:dc:7d:d7:34:b9:aa:cb:50:70:fe:41:8c:e5:66:92:6d:
         53:70:ec:d2:a5:88:c9:33:15:c3:d3:25:51:67:0e:5c:0c:dc:
         58:0e:1e:76:bc:25:54:a3:7a:1c:c8:59:c5:c6:68:e1:87:60:
         3c:7a:72:c0:32:67:6f:bb:4d:7d:4f:d2:c3:6a:9b:cc:fe:cb:
         12:f9:d3:91:99:77:0c:e4:70:be:53:fe:fb:20:31:34:5d:4f:
         02:fe:08:32:10:6b:5f:90:48:dc:28:73:0e:03:07:29:aa:9f:
         2a:65:4a:5b:d3:27:98:89:01:c7:ac:7b:2b:42:80:2d:a1:75:
         0a:92:16:c1:7b:2b:51:78:ac:6d:95:d0:97:e0:00:db:67:92:
         f2:58:89:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:47:52 2024 by rpki-client on console-ams.rpki-client.org