Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
File:                     4YVsMIKrL8jdGzWaezmRNoU4tNA.mft (raw, json)
Hash identifier:          cZdJK3Nwk6A5Wpve10W5DvmbN5Kd7p1vKsEt0wK69bE=
Subject key identifier:   1B:DB:7A:BE:29:97:24:25:76:42:0F:80:95:9C:A0:9E:22:AA:94:BA
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Certificate issuer:       /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial:       01901E8F8C3DFF94E65472101A0678A3E8C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
Manifest number:          0659
Signing time:             Sun 16 Jun 2024 01:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:42 +0000
Files and hashes:         1: 1kHHMke9hWLQr3qEEbQGWg4EIPQ.roa (hash: k8JYUYuRySnYAwh2TRsTdaUGtsjPT1QkKMbbDEMkOKU=)
                          2: 4YVsMIKrL8jdGzWaezmRNoU4tNA.crl (hash: MPE6LaR8EIl8Ha0j/wCckw292MFRiwIJmNxI+RC97uI=)
                          3: IitFlexYZfX-UU71f3XpZrGvWsM.roa (hash: tylWdlOxFACp9bND59PH/ucvG9vvleDVIVW12I3eErQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:8c:3d:ff:94:e6:54:72:10:1a:06:78:a3:e8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
        Validity
            Not Before: Jun 16 01:00:42 2024 GMT
            Not After : Jun 17 01:00:42 2024 GMT
        Subject: CN=1bdb7abe2997242576420f80959ca09e22aa94ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:e7:39:30:4f:9e:1f:70:08:62:bc:2a:6e:
                    d7:96:3a:cd:3e:51:0c:e5:c5:dd:e1:74:a2:2a:10:
                    27:3e:8a:6d:20:80:60:aa:9a:73:fe:11:c0:57:42:
                    6d:6e:81:de:77:e9:68:a5:f1:bd:b2:27:11:df:8b:
                    db:1b:de:bb:d0:05:87:00:8c:a2:07:70:4e:db:0f:
                    5a:92:5f:9b:bc:d9:3b:bc:fa:d5:27:31:91:b5:1f:
                    94:9c:18:21:d0:b2:26:0f:8d:3d:0d:88:b7:68:31:
                    38:a0:08:81:df:1d:b5:b1:d0:72:37:19:6f:6d:0b:
                    14:6e:fd:fc:6b:81:d8:73:33:a1:05:02:3e:11:cc:
                    cf:39:49:c7:77:c3:48:8c:17:8f:c0:47:e6:63:24:
                    5f:3a:0c:87:f0:68:32:40:06:61:ab:6d:f9:58:ba:
                    65:65:4b:b4:24:0b:ed:c2:c4:cb:55:b5:2a:fe:de:
                    39:ac:27:c3:20:ea:32:01:11:fa:29:1e:d4:cd:2a:
                    72:39:63:ef:20:8e:01:e6:0c:e5:7c:0c:b3:33:7e:
                    db:a1:00:05:18:74:74:57:3a:b8:06:ad:3a:06:ac:
                    bf:a6:52:81:15:88:70:2d:3a:31:30:e0:e3:7b:24:
                    a2:51:0f:c7:f1:b0:f4:66:63:fe:92:e4:5a:4a:85:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DB:7A:BE:29:97:24:25:76:42:0F:80:95:9C:A0:9E:22:AA:94:BA
            X509v3 Authority Key Identifier:
                keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:54:92:74:1d:b7:24:4c:ef:a2:3e:fb:a4:d9:72:47:c4:2d:
         f6:ed:2b:bf:be:ae:f6:61:fe:33:eb:78:5c:d8:02:9e:4c:92:
         46:3c:aa:dd:51:46:79:bb:bb:34:b0:10:4a:92:ae:47:da:3c:
         bc:3a:29:d5:89:4a:0d:3a:60:1b:53:59:1c:8f:b8:2a:54:c0:
         4c:13:b8:3a:43:b8:f9:a3:e8:86:94:3c:19:4d:ce:ef:17:4c:
         63:df:7f:f7:d2:80:94:93:56:e8:ba:5b:eb:a7:26:7b:62:c9:
         fb:11:3d:f7:37:d9:97:65:0c:f7:d5:a5:d9:47:80:2e:aa:6a:
         3a:88:6d:ee:cb:42:2a:c8:88:f6:c5:92:a9:d7:25:29:30:ab:
         9b:be:cd:45:39:c0:25:2b:11:6f:c9:b0:6b:92:14:41:45:e3:
         bc:77:2c:c3:2c:a3:fc:0a:76:f6:dc:f9:fe:c0:5d:8e:ab:eb:
         e9:27:59:24:c8:b2:4e:8d:b2:12:dd:29:98:27:4a:83:b2:3c:
         40:68:b8:28:79:77:b1:da:a4:64:43:e9:4e:5d:fa:10:30:53:
         19:d5:ab:37:e8:1e:fe:ac:14:39:5a:ba:2a:39:12:db:15:5b:
         03:e7:58:aa:04:42:06:eb:a6:3d:db:08:1c:c2:b7:79:1f:ed:
         2d:49:44:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:08:21 2024 by rpki-client on console-fra.rpki-client.org