Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File:                     4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier:          UymTu2433F/VIlCKjZ4WDHYfJFSTZWmV12ojtrPo7Ug=
Subject key identifier:   64:A6:34:64:AA:CB:72:57:E5:69:11:C8:A4:E1:90:F1:70:7F:90:18
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer:       /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial:       01901E901B827A1E8B6035DF5D7F8EA29F99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number:          0A76
Signing time:             Sun 16 Jun 2024 01:01:19 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:19 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:19 +0000
Files and hashes:         1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: eBqXoSjRdeYsRA8/Le+4hUGzlwnuMjy8Xg4droYTkJc=)
                          2: MSaw9NQnLz6kTuyanTxRP0mAGwE.roa (hash: XhH1DiNXVf5mp9fkKhR8TWcE9Gj3Tw2CSJhdH8s+Y9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:1b:82:7a:1e:8b:60:35:df:5d:7f:8e:a2:9f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
        Validity
            Not Before: Jun 16 01:01:19 2024 GMT
            Not After : Jun 17 01:01:19 2024 GMT
        Subject: CN=64a63464aacb7257e56911c8a4e190f1707f9018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b7:9a:ed:de:0d:e2:55:29:cf:45:04:53:9b:
                    db:89:f4:67:d3:43:a5:c1:10:db:d3:a9:3d:8d:aa:
                    e2:9e:24:07:84:6f:57:7d:4e:f9:bc:e9:23:08:61:
                    d8:73:07:9c:f7:5e:b6:61:96:73:dd:89:b4:63:e4:
                    82:8b:9c:e7:56:c5:4b:c4:65:45:d9:4a:95:97:5d:
                    26:4b:24:c2:3e:e4:49:1a:84:fe:75:83:0c:58:a5:
                    6b:0b:3d:32:bc:13:39:6a:71:20:74:b1:60:7d:f1:
                    30:47:55:e2:eb:65:9f:23:93:a1:3c:da:8d:c7:26:
                    fe:89:75:f6:ce:6f:af:14:a5:a6:22:6b:54:24:98:
                    06:a3:02:20:80:1b:32:c4:bb:75:29:4f:08:a0:c2:
                    fc:7a:83:1c:b5:1e:29:84:ea:8a:ce:46:f2:22:74:
                    ef:83:d7:17:3b:66:67:1a:19:5f:15:7d:97:fd:8c:
                    05:c3:0b:f4:1b:f4:dd:30:6d:3c:7d:0f:5f:dd:6a:
                    9a:55:65:7b:e1:a5:1c:27:12:13:41:73:0d:ea:6f:
                    a3:71:b4:5b:0d:b0:da:36:c4:c4:38:fd:ae:90:9f:
                    c9:4f:57:6e:65:c3:09:2e:1b:de:8c:59:af:27:04:
                    d8:8a:6b:a1:06:a0:db:ef:a2:b0:c6:08:47:e8:5c:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A6:34:64:AA:CB:72:57:E5:69:11:C8:A4:E1:90:F1:70:7F:90:18
            X509v3 Authority Key Identifier:
                keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f3:e3:eb:57:bb:e0:08:41:7d:33:08:fa:1e:90:27:7a:44:
         13:8c:f2:53:58:c0:cb:dd:d8:61:ee:38:97:73:9f:9e:4d:69:
         89:97:73:fc:e4:5d:25:e4:c0:b7:9c:ec:9a:50:ab:58:69:2c:
         0b:f9:56:eb:34:d8:81:f2:78:dc:ab:3e:b7:63:6e:11:3d:4d:
         ef:5a:fa:39:f4:c7:af:5d:c0:9b:2b:a6:14:ed:f6:6b:1d:74:
         41:50:6f:c0:34:c7:31:4c:58:a5:47:f7:ed:95:55:9a:5b:4a:
         44:9c:d7:5a:86:cf:83:cd:c7:d3:94:4c:17:01:4d:68:f9:2e:
         20:fc:95:42:cc:f9:6e:5d:44:3f:20:f5:b8:6d:32:62:a4:91:
         10:5a:e5:19:cc:6a:8e:1d:3f:21:b9:08:65:9d:f7:10:8a:61:
         8e:02:23:d3:af:6f:1d:fd:73:5b:1c:cc:fc:72:08:fc:38:84:
         cf:4c:06:6a:eb:35:f5:22:a8:b8:13:88:26:d5:42:f2:b9:63:
         db:96:74:86:64:f2:2b:4c:c5:fc:b8:b5:c3:6f:f5:e3:80:0d:
         c8:9e:d7:63:d3:7c:42:13:c9:f1:2f:ab:8d:3d:5b:3a:b2:f6:
         f8:b1:81:82:1b:bc:d6:16:2e:1e:38:31:2a:cc:23:49:af:cf:
         f8:47:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:09:14 2024 by rpki-client on console-ams.rpki-client.org