Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File:                     IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier:          tmzuFYg5Nz5qnhQdCa82HJaaGPwlpeQNid3oMYUUobs=
Subject key identifier:   99:8E:E6:A9:6C:AF:73:ED:9C:3F:DA:DD:68:D4:C8:1A:C7:58:B4:DA
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer:       /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial:       01901B57B88448C10B09031154252DDA4868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number:          0B93
Signing time:             Sat 15 Jun 2024 10:00:51 +0000
Manifest this update:     Sat 15 Jun 2024 10:00:51 +0000
Manifest next update:     Sun 16 Jun 2024 10:00:51 +0000
Files and hashes:         1: D4Hoa0tzGdGRNG6sAYU6A4IwDZI.roa (hash: PATt2oq8B7kj3fe9D8wNxdrcGSD3hLlml5nT8wH99r4=)
                          2: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: qPzoeDE9h6HLUlaBZM6mUt8nSsaIRY09es4L0dhU0NY=)
                          3: kXHUW40RIuot8q8-DvmrS-VRl3Q.roa (hash: mX/OknLCQz6UVGlviDe/6BGA8LpNgyWA4U5DuF1dKww=)
                          4: lc9O3_kJzrD2gRTLXGEqn-rR7sU.roa (hash: tvi3vdXKDtp/dNYa+udxpyOe0fphFmbKySFJKOGAonk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:b8:84:48:c1:0b:09:03:11:54:25:2d:da:48:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
        Validity
            Not Before: Jun 15 10:00:51 2024 GMT
            Not After : Jun 16 10:00:51 2024 GMT
        Subject: CN=998ee6a96caf73ed9c3fdadd68d4c81ac758b4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:7a:7a:80:c2:8a:06:c1:3a:eb:6b:19:1d:
                    cf:7d:59:35:55:06:fa:a6:b6:3f:d5:6e:e8:1b:5e:
                    d5:b1:28:f3:96:30:d9:85:4e:9d:0e:92:84:63:db:
                    46:51:64:0d:bc:01:04:98:f3:1b:b0:fe:e4:24:26:
                    0c:6b:c1:87:37:a1:50:58:2b:d7:85:d1:ea:a1:b6:
                    30:ab:be:c8:1d:ba:28:80:a5:65:9b:47:e4:03:3a:
                    d3:c3:93:f5:6b:fc:6b:e3:3f:12:a5:1f:59:0d:6c:
                    ff:fd:cf:ab:00:a0:66:9f:0f:88:16:fc:1e:1d:d9:
                    74:ea:e3:27:32:ac:63:9e:fa:92:ce:be:22:3f:08:
                    f5:e5:fc:d7:23:2c:2c:da:75:83:3b:14:5c:4a:8a:
                    86:97:a6:bd:5e:a3:a6:29:68:7d:13:e6:84:69:e3:
                    f2:f7:ee:7d:ca:13:72:cd:51:2e:85:06:2a:0a:8c:
                    17:58:ed:a8:79:93:7a:61:66:93:bc:ba:b0:0b:94:
                    fb:d5:6d:6f:81:77:67:ad:93:8d:59:00:fb:ae:b4:
                    d7:e4:91:ee:89:7a:18:b4:4e:ee:41:98:c5:c5:58:
                    42:99:54:12:00:e7:ef:35:67:3a:59:41:6a:6b:5b:
                    37:59:15:2e:1b:19:f9:ff:55:6f:66:1e:66:a2:6b:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8E:E6:A9:6C:AF:73:ED:9C:3F:DA:DD:68:D4:C8:1A:C7:58:B4:DA
            X509v3 Authority Key Identifier:
                keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1b:af:1a:e5:73:18:be:f5:14:12:ea:2a:e5:d9:5c:a1:3a:
         32:4b:f0:da:4e:11:e9:75:2f:2b:7f:1b:f5:77:1d:3b:c1:a7:
         c8:ec:65:50:98:1e:67:90:47:d4:9c:24:52:84:99:ef:46:1c:
         43:2e:e0:c0:58:d0:e0:d4:52:a9:4f:7e:77:ed:4b:de:bf:c6:
         4e:ca:f5:5a:84:a3:81:d7:e3:7b:f2:db:03:d0:a4:30:b5:de:
         98:a8:c2:21:37:44:97:80:9c:32:fc:7a:36:b2:75:de:dc:54:
         bf:34:77:e0:08:8a:3e:52:43:b8:8b:f8:f3:3e:18:6a:de:95:
         63:4b:1d:4c:f4:34:96:96:b6:4c:58:e9:f3:81:3e:f5:b3:ca:
         2c:d1:a4:3a:4f:f5:43:14:7f:1e:82:58:a6:04:2f:cd:69:b5:
         f7:d8:3d:aa:58:a9:52:5b:f8:4b:af:90:25:12:f1:7f:4d:00:
         fa:d6:7a:dd:3b:50:b3:60:c9:30:30:91:a6:b3:4d:e2:bf:08:
         56:c6:0e:b0:7f:f3:55:90:9b:1f:d7:c8:6b:93:43:c1:40:df:
         9d:d3:1d:bd:f6:85:0d:15:84:0b:d8:5d:0d:69:8d:16:2d:bc:
         6a:ed:7a:c3:82:f1:fc:14:75:e2:02:4c:40:b5:ae:2f:f5:d3:
         a0:81:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:20:07 2024 by rpki-client on console-ams.rpki-client.org