Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
File:                     4XsQ_WB62ScAbGLONWkeuqjwGLU.mft (raw, json)
Hash identifier:          zqHo/p8z3hD191iaFllXtBk7ztzUaj9x7Ed6epNxp4U=
Subject key identifier:   CA:E0:CA:64:1E:6B:47:DE:46:AF:86:0C:BF:0B:1F:4E:4D:4A:4E:46
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Certificate issuer:       /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial:       01901EFDCE335AF339C9D1FEE978B6F014E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
Manifest number:          11CA
Signing time:             Sun 16 Jun 2024 03:01:08 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:08 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:08 +0000
Files and hashes:         1: 4XsQ_WB62ScAbGLONWkeuqjwGLU.crl (hash: 787wsHsY5xSmKVc2IpvRdnWoBLu4lBGvPcnybwV8sT4=)
                          2: B-VevEOfaxehRWXl1vj3ImIHqn0.roa (hash: Ofe1YYirqemlsn1hn8PmWGsDYPkCXHyJNAtJqaHjlwg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:ce:33:5a:f3:39:c9:d1:fe:e9:78:b6:f0:14:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
        Validity
            Not Before: Jun 16 03:01:08 2024 GMT
            Not After : Jun 17 03:01:08 2024 GMT
        Subject: CN=cae0ca641e6b47de46af860cbf0b1f4e4d4a4e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:db:79:21:f4:d1:59:03:ad:5c:68:9d:8a:
                    6e:03:bd:6d:c8:b1:b2:d8:fa:7e:ca:ba:2f:8d:eb:
                    ed:b1:cd:33:52:cc:1f:82:83:1c:9f:5b:f7:0a:6a:
                    29:3a:28:60:9e:fb:c5:54:bf:d3:73:43:05:08:ed:
                    d4:e6:94:90:80:8f:c7:34:f6:42:31:00:86:ba:f4:
                    d8:b6:0a:83:28:cd:95:fe:07:8c:f8:3f:26:8f:ca:
                    b1:80:b6:19:f3:f0:d4:57:b4:e9:92:c8:dc:51:43:
                    72:e5:c2:b0:cc:e1:bf:0e:7f:7d:68:11:7a:3b:4e:
                    21:9f:21:74:4b:90:ca:f1:7f:81:ff:6e:72:18:c1:
                    fe:f5:b7:f7:58:0c:da:34:f1:6b:84:32:ad:68:d8:
                    a4:08:a9:08:5c:00:6b:cb:ea:07:d7:9c:e1:26:18:
                    5f:03:2b:2a:72:b0:51:9e:8d:69:cc:36:62:89:c0:
                    4a:2f:3b:d6:dd:78:67:01:fc:37:b5:3c:85:a5:ac:
                    94:b4:cd:fb:f3:02:7d:b4:43:1c:88:28:2c:38:8e:
                    31:1c:38:68:15:6f:4f:ec:44:e4:b4:e4:5c:be:8f:
                    f4:43:18:6c:e6:82:23:a3:51:15:04:70:ad:3c:81:
                    aa:db:a3:e3:96:69:4c:1f:76:9e:c8:e0:a7:35:45:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E0:CA:64:1E:6B:47:DE:46:AF:86:0C:BF:0B:1F:4E:4D:4A:4E:46
            X509v3 Authority Key Identifier:
                keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f9:dd:bf:8a:91:2e:c4:96:d3:e9:c7:48:04:c4:36:a3:7b:
         64:b1:a1:91:1c:7f:fe:9a:1c:cc:7b:87:96:96:61:74:e8:0b:
         ef:36:2f:85:bc:47:dc:4f:0f:9c:bd:64:be:bd:05:44:b2:4b:
         95:b7:80:04:3a:c8:1f:6c:21:ac:6b:bb:4f:b0:a6:49:29:e2:
         fd:fe:f4:80:23:0f:17:71:9f:da:fe:70:d3:c7:7e:39:a0:2c:
         b5:4f:91:4b:0d:ed:75:a2:94:9a:5a:9b:f4:4f:47:81:84:84:
         24:2f:a4:6e:c4:8a:cb:8d:ad:af:45:f2:42:1c:0a:0f:b2:8b:
         9c:7c:d7:cc:4a:ae:93:71:4a:a6:c6:49:51:a1:bb:4c:a8:5d:
         a5:0d:ba:16:4a:48:cf:86:b3:f0:71:49:a9:0b:8d:32:b2:d8:
         b9:39:ab:01:96:7c:d5:a7:45:a0:67:cf:94:9b:f9:b2:9f:09:
         3a:9a:13:1d:a3:17:d7:4c:74:e6:7c:5a:58:f0:58:f4:c6:2b:
         91:79:7d:3f:a5:a5:67:8c:3c:11:2c:49:a6:be:f7:50:7b:50:
         ae:4d:b9:b4:fc:10:b4:bd:9c:11:ac:21:c0:98:4a:60:69:d0:
         15:c9:06:99:62:09:b5:bd:66:a9:21:8c:63:91:79:7a:7e:01:
         41:fd:95:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:33 2024 by rpki-client on console-fra.rpki-client.org