Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File:                     INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier:          RQOte1LjI/RQ173i4WjfWlsITbwUtiNHglV2ED49Q3k=
Subject key identifier:   A2:21:3F:9E:10:19:50:1D:16:91:C3:19:97:E0:D8:EC:2B:0D:D8:FF
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer:       /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial:       01901EFD9D3D18D42AD3D43BC554B0B9B9EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number:          1158
Signing time:             Sun 16 Jun 2024 03:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:55 +0000
Files and hashes:         1: Bpc0lpa789Lt-u0hpbkd7L8ep2s.roa (hash: GCDA3BLDxT0IHY6JGFpb9rN58vOZpESDgi/5yB51vp0=)
                          2: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: X02VQrBPRjYZaKdadiEZyaq8KONWz93fURIpLF425OY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:9d:3d:18:d4:2a:d3:d4:3b:c5:54:b0:b9:b9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
        Validity
            Not Before: Jun 16 03:00:55 2024 GMT
            Not After : Jun 17 03:00:55 2024 GMT
        Subject: CN=a2213f9e1019501d1691c31997e0d8ec2b0dd8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:fc:e5:05:4d:ac:79:41:4a:ff:46:50:f6:
                    57:40:12:d5:a9:46:11:d5:0c:85:4b:f8:a6:b1:04:
                    ea:fa:3a:30:c4:aa:6c:bf:10:37:17:9e:52:86:b8:
                    9a:85:40:da:7d:46:57:b0:e6:78:e0:b9:e2:c2:d5:
                    2c:c9:db:b0:b2:60:77:9a:89:f7:0e:f2:64:99:87:
                    19:3e:3f:43:0a:e9:67:da:be:21:bb:d2:29:df:41:
                    7e:32:e6:72:fa:36:b4:83:73:76:38:09:a2:6d:e7:
                    13:1a:13:b0:46:13:dc:8c:9c:7f:6f:54:89:01:ee:
                    7e:90:8b:85:70:99:b6:e3:f1:f3:73:92:73:38:6f:
                    53:80:8f:34:cd:c3:a3:b6:7f:04:87:40:6b:a9:cd:
                    49:c4:5c:c5:07:7c:2f:7a:51:46:8b:77:e4:42:69:
                    ba:18:b4:71:27:85:22:46:16:09:2c:6f:53:a6:e8:
                    22:a6:be:4a:6d:8c:68:05:d8:df:8e:d0:08:fe:65:
                    85:20:40:1a:99:47:90:e3:46:be:33:80:2d:2d:c9:
                    2a:27:93:c4:77:86:df:3b:d0:bd:49:c9:c4:4e:95:
                    e9:95:e6:64:56:4f:e8:83:17:d6:97:30:52:8a:8d:
                    b2:3c:f9:0d:d4:3b:1d:9d:9b:aa:ba:13:fc:be:24:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:21:3F:9E:10:19:50:1D:16:91:C3:19:97:E0:D8:EC:2B:0D:D8:FF
            X509v3 Authority Key Identifier:
                keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5b:e8:da:d2:dc:18:2f:d1:b3:c3:d1:c4:61:f0:60:61:4a:
         a1:5a:47:00:b7:a1:1c:ff:92:81:8e:c1:51:23:45:ed:31:99:
         bd:80:37:69:65:68:b4:3e:1e:5e:c3:43:81:b7:86:a2:b9:fb:
         b7:0c:c5:28:ce:dc:66:b9:87:de:5a:7f:0c:13:56:b1:e7:f2:
         c1:d7:8a:40:07:d3:69:c1:e4:19:92:27:77:db:19:04:3c:9c:
         b4:97:1b:8e:85:6c:21:0c:d0:57:5f:87:ac:c6:22:41:f6:52:
         cf:2c:81:95:15:45:07:8e:9b:70:bb:2f:e6:e1:e6:8c:fd:ad:
         29:cb:68:f8:3a:44:a2:04:3d:7a:2f:c7:eb:f0:1b:e9:1b:93:
         f5:26:d6:0b:73:dd:7b:ed:52:ca:f7:d0:f1:fa:4d:11:8e:f6:
         92:6f:27:02:5d:28:66:ef:98:c8:f7:70:a1:a8:52:1b:f4:52:
         44:d9:86:d7:e0:00:aa:33:6c:7f:29:7d:bd:e3:a4:d5:10:bd:
         91:f3:8e:46:e4:db:97:d2:c0:49:3f:d3:7f:17:98:ec:d8:7d:
         d0:3e:25:ed:04:47:3b:8c:73:54:68:04:bf:5a:bc:84:a1:8f:
         7c:14:ad:2a:55:38:35:fa:2f:62:04:6f:1d:75:d1:7a:1f:9e:
         0c:21:25:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:36:51 2024 by rpki-client on console-ams.rpki-client.org