Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File:                     1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier:          O3V0rvMxgz8rUZvr7RkajxJ20zadHlrYiJqw5yeoQpM=
Subject key identifier:   67:1D:82:4E:8C:FE:AE:59:81:71:7F:05:61:C9:04:51:64:F9:F8:43
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer:       /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial:       019092DC6F8814D560CD7ED9F4705F437D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number:          4A
Signing time:             Mon 08 Jul 2024 15:00:38 +0000
Manifest this update:     Mon 08 Jul 2024 15:00:38 +0000
Manifest next update:     Tue 09 Jul 2024 15:00:38 +0000
Files and hashes:         1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: VIVvYm7tu4e4vU6KbJvI6+r40RyUMiR/fFIuNBSMuUc=)
                          2: uvAID9R39i1wRizeDQrywnPI9tM.roa (hash: dXWWFsozrFUCla9hGKHR+QeGhCEpW3J7kzoWnOfn7Nw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jul 2024 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:92:dc:6f:88:14:d5:60:cd:7e:d9:f4:70:5f:43:7d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
        Validity
            Not Before: Jul  8 15:00:38 2024 GMT
            Not After : Jul  9 15:00:38 2024 GMT
        Subject: CN=671d824e8cfeae5981717f0561c9045164f9f843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:65:24:8d:6c:cb:87:58:0a:fd:87:9f:55:
                    24:b0:94:e0:f3:2e:77:e7:0d:1a:5a:a1:94:ee:e4:
                    e8:5a:cb:06:3d:4d:46:91:3b:aa:2d:47:81:43:55:
                    fe:08:27:a1:a0:d5:32:f7:4e:ae:6a:50:26:4a:50:
                    a4:2f:1b:fd:bc:22:e3:71:a3:63:f9:cb:34:e8:33:
                    02:96:b4:15:6b:dc:1a:c3:41:cf:bc:3a:4d:ec:11:
                    97:c2:ff:fd:ad:43:70:5b:a1:e1:a9:6c:3e:e0:db:
                    c6:35:b6:a5:15:f4:90:77:ff:de:ac:11:9f:73:38:
                    b1:d8:30:68:70:5e:55:6a:43:bd:a6:3a:49:e8:fd:
                    be:b5:96:2c:10:a8:b9:35:87:42:50:51:0f:7b:af:
                    ab:f6:09:c6:b6:91:53:af:70:b0:a7:76:51:73:d6:
                    2d:e2:c0:6e:8d:2b:62:47:f6:8c:61:9e:03:01:b8:
                    ea:24:4b:47:df:66:94:29:07:1a:19:92:11:46:7e:
                    ef:d7:18:0e:e0:41:12:38:bb:5b:38:0a:2e:4f:6d:
                    7b:a4:a3:31:49:c0:b4:9a:21:ca:7c:43:c3:bc:df:
                    d2:5d:77:51:d4:24:0f:09:a5:0c:bb:45:49:47:ef:
                    14:e0:57:88:92:61:75:1b:83:1b:3d:6e:57:82:58:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1D:82:4E:8C:FE:AE:59:81:71:7F:05:61:C9:04:51:64:F9:F8:43
            X509v3 Authority Key Identifier:
                keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0f:05:48:d9:6c:9e:4e:a7:8b:6a:7c:85:ed:22:fd:b9:ca:
         59:5d:b0:59:39:68:74:3c:5b:ad:df:53:2f:6d:06:5a:d2:5b:
         b1:d4:e2:f8:10:06:3f:2a:4a:90:9f:ec:88:5e:61:84:6c:ba:
         cf:d8:64:c3:b3:2e:3d:45:8d:ec:e3:81:d9:ef:6f:fc:de:28:
         ad:29:f6:78:42:4a:ef:dd:99:e3:c9:b6:df:d5:88:0e:b7:af:
         a5:f3:b6:0d:fd:35:ac:5e:96:b5:6b:85:58:dc:75:63:53:5a:
         74:e4:0e:52:b3:cc:b5:bd:66:76:c0:a9:27:cb:1a:a2:21:84:
         14:5a:32:39:b4:d0:10:d6:e2:1c:30:a9:6f:f2:de:71:a6:83:
         26:9c:75:6d:b6:37:6b:9d:94:e6:07:b3:b7:2c:d9:a1:13:4d:
         ff:f9:f0:bb:d9:25:06:1e:84:64:54:1f:34:8f:08:39:d6:ad:
         3c:e3:56:88:1c:ec:68:6e:ea:4a:8c:13:85:97:5f:68:30:a5:
         49:ee:16:09:c7:83:bd:3d:f0:08:1b:ed:a7:46:99:f0:12:7b:
         25:da:ec:79:38:40:3c:d4:62:22:69:50:98:6b:36:30:a3:7e:
         aa:92:b4:e9:2d:09:e7:c7:74:89:f6:2b:66:2c:c5:62:d9:8e:
         e0:59:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 23:25:21 2024 by rpki-client on console-fra.rpki-client.org