Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
File:                     4npTBThB5i83hzAr07PcF66DR6M.mft (raw, json)
Hash identifier:          WRhuSE7IGm4mn9npiHSuMvHdu/1OberbrRKDQieHWes=
Subject key identifier:   91:04:11:B5:70:24:9B:D1:7B:24:94:35:9A:5C:DE:85:67:6C:F3:AE
Authority key identifier: E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
Certificate issuer:       /CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Certificate serial:       01901DEB5E5DDDCF8E9A1DE82E023096960E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
Manifest number:          0525
Signing time:             Sat 15 Jun 2024 22:01:22 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:22 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:22 +0000
Files and hashes:         1: 4npTBThB5i83hzAr07PcF66DR6M.crl (hash: KVZXc95ome/4J4JWWI3vZX9JVmYy3oXaONGfdH5OkjU=)
                          2: micTPlmNj-YitEVk0mo3whydCKA.roa (hash: X1vt3MCAXoi3FR5hhk4aoaMi+A+Y9nfZknAZ7Ivw3EQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:5e:5d:dd:cf:8e:9a:1d:e8:2e:02:30:96:96:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
        Validity
            Not Before: Jun 15 22:01:22 2024 GMT
            Not After : Jun 16 22:01:22 2024 GMT
        Subject: CN=910411b570249bd17b2494359a5cde85676cf3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:6f:a0:bd:40:32:46:98:c1:41:16:88:71:
                    20:e1:fd:8f:44:4f:8f:31:9a:86:28:c5:50:1f:f7:
                    be:12:4a:52:10:fd:2f:49:62:5d:92:14:11:e8:f7:
                    cc:2d:37:bc:81:c6:ae:3d:36:30:0b:33:82:09:98:
                    53:61:c7:4e:63:6a:74:03:2b:da:2f:89:07:cb:a3:
                    5c:f3:c4:10:53:12:b4:11:86:18:88:5e:fd:cb:4e:
                    b2:b4:57:5b:0e:c2:73:84:0c:e3:d3:ea:35:4f:51:
                    7c:6c:7b:3d:cb:ec:6c:90:b3:42:58:c8:dd:3e:b0:
                    49:1e:9b:f5:ba:c2:cb:01:c0:4c:ab:e7:58:70:90:
                    96:1d:75:f2:ca:e9:19:4e:a6:80:16:4b:0c:db:25:
                    1d:43:ac:d5:53:51:6c:ca:07:37:6a:65:e7:c4:16:
                    f7:64:0e:cd:d8:a8:78:a0:7b:b1:5c:26:68:e8:ae:
                    45:e5:e5:bb:8b:31:72:ae:ae:fc:ea:ec:86:9e:c7:
                    e0:a8:d0:f7:9a:85:8c:48:6d:8b:34:77:1d:bf:e4:
                    6f:7d:af:60:24:4e:8b:23:7a:e5:b1:22:64:3b:e5:
                    e5:b7:54:59:b7:39:7f:79:62:f2:34:57:f7:a9:3b:
                    f5:c9:6f:61:a6:f6:40:de:29:ff:d9:b1:c8:f5:d2:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:04:11:B5:70:24:9B:D1:7B:24:94:35:9A:5C:DE:85:67:6C:F3:AE
            X509v3 Authority Key Identifier:
                keyid:E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c0:d2:be:72:df:e2:19:e2:db:43:f1:31:5b:49:45:c5:e1:
         08:81:f6:e9:79:37:2c:3d:02:a3:eb:f5:f5:e1:7d:22:c8:bc:
         ce:a0:0e:87:56:8a:7e:c9:9b:09:67:e9:82:50:2d:71:52:6f:
         6f:2b:ac:7d:aa:95:e9:6b:09:6b:02:5d:9c:e7:57:6b:4e:3a:
         62:1e:25:07:20:60:3b:7c:bc:e2:37:15:d3:7a:8a:78:07:44:
         cb:a0:de:46:1c:67:6d:a0:17:bf:d9:32:4a:ac:de:5d:f5:54:
         cc:93:f2:ad:81:8b:17:da:48:36:28:1c:5e:ae:64:8a:a1:29:
         60:05:ee:0e:d9:6f:ab:82:a8:4f:e5:74:63:f3:67:24:13:11:
         62:05:47:79:89:83:98:2d:8d:f9:e2:17:f0:1d:eb:37:b4:f1:
         e1:6f:44:e3:08:2c:2e:cc:03:cf:ae:a8:f2:51:26:c2:af:69:
         5c:a7:d6:be:3a:e9:c2:2d:c9:d9:69:4e:72:44:d1:eb:1f:c7:
         4a:ef:94:e1:9c:0c:f6:5b:12:99:13:36:4c:84:18:4d:4f:1e:
         01:6e:5f:3d:5f:93:7e:50:18:51:ce:eb:a4:ba:dc:b5:f3:bf:
         e2:fd:61:b5:c4:5f:98:e8:17:a3:6d:23:b1:f9:c2:27:71:11:
         df:18:a6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:18:52 2024 by rpki-client on console-ams.rpki-client.org