Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
File:                     5zkzwIr5wC27DT6X8fkJM_U1b8E.mft (raw, json)
Hash identifier:          SdrNZklqGtc0gN38HEnZ/NG6lGX4LG4MmYDl4H64kUA=
Subject key identifier:   75:40:62:2E:AE:A8:50:F1:4F:05:49:91:5B:03:88:97:A9:CB:00:3D
Authority key identifier: E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
Certificate issuer:       /CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Certificate serial:       01901DEB252E8795423D37CF50E5A8DAADEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
Manifest number:          0962
Signing time:             Sat 15 Jun 2024 22:01:07 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:07 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:07 +0000
Files and hashes:         1: 5zkzwIr5wC27DT6X8fkJM_U1b8E.crl (hash: PBkgYK6+tDNO7MSQCdEU+vLIyqNfM26DUQp/UetFnYM=)
                          2: S30qDI0BncgdmTFVvU256kj21m4.roa (hash: kROEOSwoQ6JBFglYHB9oyGiXvGKUCdSBNc+s5BnZH+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:25:2e:87:95:42:3d:37:cf:50:e5:a8:da:ad:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
        Validity
            Not Before: Jun 15 22:01:07 2024 GMT
            Not After : Jun 16 22:01:07 2024 GMT
        Subject: CN=7540622eaea850f14f0549915b038897a9cb003d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:eb:46:18:5c:d0:55:95:af:92:c3:c3:43:
                    5e:b5:91:5d:09:af:75:38:58:2f:55:d8:2d:61:69:
                    00:43:b4:cf:6c:13:b3:c1:8d:54:3d:35:c1:fe:f9:
                    0a:d2:12:3f:5c:24:aa:b2:2b:b4:9c:1d:7e:2a:df:
                    92:2c:8f:d5:1d:ef:04:db:0c:72:ab:74:d8:be:3b:
                    be:69:24:69:a5:68:a1:69:69:4d:a0:5e:0d:58:9f:
                    26:3a:2a:52:31:76:70:77:dc:75:5c:f0:1d:dc:8a:
                    06:eb:c0:b5:d8:28:95:f3:17:d3:37:58:01:24:3d:
                    5d:bb:ae:48:ce:6d:f6:af:cd:6b:52:44:82:8e:12:
                    05:8b:57:fa:7e:7d:a7:e6:37:87:fc:bc:f0:df:4d:
                    53:74:0a:20:5f:03:02:67:41:02:2e:8a:42:60:75:
                    85:4d:3c:79:35:18:12:d1:c0:d5:13:e3:66:40:07:
                    ad:95:ab:07:bb:b7:8d:84:7e:f3:7a:0b:12:b7:50:
                    e2:ab:4a:20:21:29:e8:bc:11:7f:fc:31:38:99:dc:
                    4a:3c:d6:0f:b2:13:76:4f:92:36:fc:2e:a9:76:83:
                    01:de:bb:20:a0:c1:d7:ce:39:02:2e:54:41:c2:23:
                    c9:12:78:41:90:ff:ee:aa:7e:7f:c5:98:be:4e:0b:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:40:62:2E:AE:A8:50:F1:4F:05:49:91:5B:03:88:97:A9:CB:00:3D
            X509v3 Authority Key Identifier:
                keyid:E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:99:c3:39:52:49:d8:59:4d:81:06:63:21:19:14:f5:a9:
         76:ac:76:0f:df:34:c6:23:cd:b9:c7:5a:2e:bf:e8:78:00:d2:
         06:9d:9a:1c:76:7c:01:c6:d3:52:17:b5:2d:28:e4:a4:c0:4a:
         64:13:a2:18:6e:0a:88:5a:f4:ca:42:2d:5c:6d:c4:dc:d0:19:
         17:ae:c3:4d:af:c8:38:68:eb:1b:ec:3c:ab:d3:52:83:eb:89:
         fc:a5:19:22:dd:44:16:69:dd:2f:d0:da:cf:be:fc:d6:6a:2c:
         1a:db:73:c1:e5:6f:09:6f:a7:56:32:1c:06:e9:0b:0e:ef:8f:
         2f:40:5d:29:f8:92:bf:28:e1:94:6b:9b:f4:03:57:4f:2f:41:
         d0:c0:97:1d:09:a3:68:32:a8:f6:58:8c:d9:63:9d:f1:0f:cb:
         a9:ce:be:8b:e1:68:77:dc:a7:c2:b0:04:15:5c:9a:68:40:30:
         bc:ef:77:e0:f1:ab:fc:c9:49:f3:98:6a:3b:fd:b1:d3:42:ba:
         2e:69:c4:52:78:2e:94:bb:f9:08:7b:5b:23:46:d7:42:30:26:
         b7:67:70:42:68:aa:56:1f:ed:5e:69:1a:19:b0:e0:4f:df:d4:
         93:e3:2f:33:1d:9f:5e:53:83:e3:ca:b1:14:b8:b3:30:1f:e5:
         a0:d9:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:40:20 2024 by rpki-client on console-ams.rpki-client.org