Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File:                     4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier:          BoMOWxj+6FmuTdnhp4nFTKZR92/uJuC7AYkgbVsPo7M=
Subject key identifier:   B1:F6:06:05:2B:06:C5:E6:60:E3:1B:8D:25:62:8C:B9:67:92:A2:9F
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer:       /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial:       01901D461BC5B5DC987B39120F0A1568EC8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 19:00:52 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:52 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:52 +0000
Files and hashes:         1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: h6kF0DFdnt9boJ4yztNjo540MEqw4A7JczFCKRPKbvI=)
                          2: HYIm1daCUpk7vhu5P57SMDIdm24.roa (hash: 20SsFTDAe3meatPDuag2i8G27/zvHBb7ZUqo/lzAWi0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:1b:c5:b5:dc:98:7b:39:12:0f:0a:15:68:ec:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
        Validity
            Not Before: Jun 15 19:00:52 2024 GMT
            Not After : Jun 16 19:00:52 2024 GMT
        Subject: CN=b1f606052b06c5e660e31b8d25628cb96792a29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:4c:97:46:a9:74:66:4e:bd:ce:7d:eb:0b:
                    35:39:bc:40:ec:81:4f:57:23:90:be:71:e2:93:03:
                    c0:dc:a6:ab:b2:c5:5c:32:c7:5d:91:d2:03:d9:b4:
                    e4:98:7e:05:33:1b:89:0a:1d:3b:e1:3b:aa:c4:01:
                    34:85:3e:44:8b:22:b1:01:59:03:59:89:40:c6:fb:
                    de:91:ac:61:d1:aa:4c:0e:e6:ad:52:2f:98:15:dc:
                    5a:0d:53:ff:de:f9:9b:55:7e:49:ae:b9:25:e6:50:
                    ca:12:98:2d:20:99:80:38:19:23:38:8b:51:4b:58:
                    04:54:a6:9b:b1:f8:0b:61:e0:30:a7:68:37:52:2e:
                    c1:a8:e1:1f:77:73:28:ea:8a:dc:56:e1:6e:91:aa:
                    76:8f:b1:46:c9:7f:b4:a7:c3:18:4f:5d:06:d6:f1:
                    e4:76:63:7f:dd:4e:ee:38:a7:05:cf:6b:23:3b:9c:
                    d6:0f:62:ff:57:e2:bb:28:2d:54:e2:af:04:44:a0:
                    46:b8:a9:e0:0e:e6:55:f2:3e:fe:9b:c6:2a:60:4d:
                    f7:02:e4:9c:79:fd:12:8b:57:ee:43:ff:73:27:d1:
                    79:c9:49:0d:17:b3:a9:6e:2c:3a:f3:22:65:da:e8:
                    d3:fe:52:6c:b5:4c:b3:d1:96:d0:5b:d2:2b:df:e4:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F6:06:05:2B:06:C5:E6:60:E3:1B:8D:25:62:8C:B9:67:92:A2:9F
            X509v3 Authority Key Identifier:
                keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a2:f3:2d:fc:da:26:f6:77:68:93:d3:d9:a2:cd:3f:44:ab:
         d4:fc:5a:77:77:e5:c3:82:29:8e:dc:16:b8:a1:c4:cb:1b:8a:
         17:bb:56:bc:e9:ef:86:f5:99:34:31:f9:d6:86:fa:75:17:ad:
         b7:7f:d1:e5:66:24:c1:df:14:56:a8:2c:a6:87:88:5b:23:73:
         64:05:45:da:be:a5:07:2a:44:2c:9c:85:26:25:7f:56:35:1c:
         95:fb:4b:2f:44:f8:6d:3d:0b:cd:a9:32:6a:2a:de:79:94:cb:
         57:65:f3:41:de:57:b5:40:56:d9:f2:49:11:42:d7:8c:30:f3:
         d4:5c:24:4c:4b:5e:2b:7e:fa:7d:df:af:d3:60:8a:47:c4:74:
         91:6d:58:55:8d:ae:66:a9:60:ee:98:e8:9a:33:c4:e9:39:ae:
         0e:97:a8:cd:4c:35:3e:74:1a:2b:f5:9d:9e:74:9b:0d:73:35:
         9d:0c:f2:0c:52:15:e4:53:10:19:0e:43:3a:75:7d:e4:5e:98:
         74:f5:89:4c:cd:8c:ff:5e:5d:26:11:fd:6b:21:a9:eb:fe:09:
         b1:97:f3:ee:b0:6a:84:78:eb:6b:6a:b0:7f:32:c6:5b:78:f6:
         3f:be:e4:72:f6:99:f6:8b:15:d8:98:86:b7:bc:a4:aa:20:88:
         40:ce:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:12:10 2024 by rpki-client on console-ams.rpki-client.org