Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
File:                     g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json)
Hash identifier:          NZqR6QvB2tK61M23eTHx2LzLXTKN50Ts+c/PzpcIhGM=
Subject key identifier:   F9:E1:8C:2B:ED:3A:3B:41:2D:AA:18:59:33:5A:B6:9A:58:23:AA:C3
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Certificate issuer:       /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial:       01901DEBD091472585506E6763BC5BCFCCBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
Manifest number:          01D6
Signing time:             Sat 15 Jun 2024 22:01:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:51 +0000
Files and hashes:         1: TSi3LYbdgZa60FzvFpl-6uFF9Xk.roa (hash: d8r3igpj2Hvde2ntRKd7IooHBfV4ue2vsIoscjscreA=)
                          2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: K1ipuoZo0qtMU/cpkA1sB/ldH37iCEzzuQLH0EGTLWs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:d0:91:47:25:85:50:6e:67:63:bc:5b:cf:cc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
        Validity
            Not Before: Jun 15 22:01:51 2024 GMT
            Not After : Jun 16 22:01:51 2024 GMT
        Subject: CN=f9e18c2bed3a3b412daa1859335ab69a5823aac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9c:f8:2e:f7:6c:8b:84:64:4c:8d:01:ef:65:
                    f3:76:c9:ac:29:82:ce:47:43:42:0e:04:39:11:89:
                    16:e5:64:da:de:27:59:8d:71:a0:d8:8c:ad:b4:d7:
                    0e:48:b0:5e:4c:a4:79:aa:17:f7:ca:58:a0:e9:33:
                    c0:86:21:36:49:e5:bd:9a:d8:33:ef:db:d8:de:7f:
                    dc:db:07:8a:8c:9d:ae:46:8c:e0:43:2b:24:79:d4:
                    c5:1c:f7:c7:b1:dc:0d:cb:ad:c4:4f:21:bf:f9:94:
                    69:ff:e7:8f:c5:65:dc:0a:82:4f:75:15:d3:fc:38:
                    a3:c3:08:27:f0:4b:50:36:30:cb:60:f7:05:e1:5d:
                    dd:63:8e:c4:66:b5:f7:42:c9:ba:9b:62:0d:2f:aa:
                    f3:48:57:ed:42:e1:ff:02:8f:c7:34:89:24:74:26:
                    3c:2f:a2:fd:23:3e:91:4e:64:67:da:49:b9:52:3e:
                    42:f1:52:8a:62:23:d7:23:c8:43:26:2d:f1:03:a2:
                    ce:a0:76:53:83:c2:51:40:a3:9b:88:65:ba:eb:8c:
                    9a:da:de:9a:34:7f:70:a1:a1:31:0b:91:6e:2e:6c:
                    01:23:8a:93:68:52:43:25:68:d0:df:6d:fd:41:a7:
                    9c:b7:29:3e:9a:bc:1f:50:5b:a8:3b:c9:a9:cc:cf:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E1:8C:2B:ED:3A:3B:41:2D:AA:18:59:33:5A:B6:9A:58:23:AA:C3
            X509v3 Authority Key Identifier:
                keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9f:8e:a1:95:90:e7:64:d3:47:f5:8d:6a:f3:b8:40:c8:82:
         d7:89:f6:37:60:5e:c1:33:cd:02:86:6b:9e:0a:c0:c4:af:24:
         c5:d4:4a:12:12:0c:4d:c3:cb:91:91:ec:0e:6b:d7:05:2c:59:
         e9:43:3b:60:e0:fb:63:4f:8b:4d:0e:f3:4f:24:cd:23:16:05:
         20:f2:f7:30:74:e3:07:1c:cb:4a:d2:dd:be:27:2c:c5:ab:9b:
         78:4f:d7:80:7e:c0:ba:d1:bf:aa:1a:e9:1a:42:57:99:54:f7:
         e9:c0:00:e3:f4:8d:c3:07:25:5d:7e:77:c2:95:ec:af:9b:b1:
         b8:4b:2f:f6:a2:13:c8:ea:c2:8e:c7:d7:22:e3:49:1b:54:b4:
         bb:27:89:ee:de:ce:45:0d:5c:aa:fc:25:0c:a7:65:a9:f8:93:
         ab:28:f2:e9:f5:07:62:bf:38:f3:c9:a7:fe:ed:ed:55:f9:43:
         7e:3a:4e:10:c1:1a:93:07:85:75:9f:e9:53:d7:15:88:b4:f5:
         f2:cb:b8:fa:0d:28:e2:46:85:9b:38:cb:91:dc:56:92:3a:13:
         e5:1e:c7:b1:93:77:38:84:7e:ec:0c:29:65:3a:0e:71:fb:73:
         7f:7c:59:bd:15:30:54:34:be:2f:12:86:11:09:55:a3:11:a3:
         74:16:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:37:54 2024 by rpki-client on console-ams.rpki-client.org