Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File:                     RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier:          T9oJobzbnegSGoxu2zkOuHxqJfMdL+FcA2KayuZ/CLY=
Subject key identifier:   1D:A5:22:47:7D:EC:1B:68:33:32:86:FA:17:D3:B7:B5:4E:3A:13:68
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer:       /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial:       01901CD8704A93A4D4D05D126D67B0FDCF9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number:          02AC
Signing time:             Sat 15 Jun 2024 17:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:04 +0000
Files and hashes:         1: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: ZsPneN/M52VZR62rVzFduwa+q052OzJOQ2DR4tHTXDY=)
                          2: heyDeOe_dlplpAZ5OB-3vRJYruI.roa (hash: BCgKidjJhVeIFl1h1ZYfHWnBXYcWEEGEdLTUZOOA6SI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:70:4a:93:a4:d4:d0:5d:12:6d:67:b0:fd:cf:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
        Validity
            Not Before: Jun 15 17:01:04 2024 GMT
            Not After : Jun 16 17:01:04 2024 GMT
        Subject: CN=1da522477dec1b68333286fa17d3b7b54e3a1368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:fd:e5:d3:4c:ab:98:a0:38:18:48:73:63:
                    07:39:d0:84:b4:4b:f3:d3:59:91:42:bf:bb:c7:52:
                    45:61:c7:6f:f5:11:b2:cb:80:86:e9:27:c3:03:88:
                    99:47:23:c1:b9:91:b4:bf:9b:06:4d:6a:33:48:23:
                    79:92:1c:9e:13:b7:b8:09:ce:2e:0c:cf:6b:5c:a5:
                    f6:da:83:c0:99:30:f2:c3:30:b0:35:cb:57:b7:2c:
                    dc:bc:bb:fb:91:4e:12:01:c0:b2:15:78:5d:5b:66:
                    d4:7b:c5:32:5e:0f:45:9a:ae:27:0c:5d:07:48:ec:
                    1d:73:31:10:e4:ed:73:fa:70:66:c9:b7:a6:1b:b1:
                    37:c7:00:e6:6a:79:52:55:a2:4b:4c:c7:eb:cb:4c:
                    c8:ad:44:94:64:6a:0e:10:6c:65:12:e7:0b:e7:77:
                    ee:86:b4:1c:4c:90:22:8e:c5:91:1f:a7:6b:c8:b5:
                    bf:07:a6:64:52:67:69:e3:63:4c:c9:39:71:c4:ad:
                    69:9a:d9:6a:db:f6:a7:bf:d7:af:30:4d:b4:91:09:
                    92:f9:02:c6:0f:cb:32:a5:4d:49:f5:ee:84:ec:08:
                    0e:e0:04:ae:26:ce:76:6c:5b:9c:f9:77:76:71:c7:
                    01:15:89:37:15:25:79:3a:45:4d:f6:3d:7c:78:f7:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A5:22:47:7D:EC:1B:68:33:32:86:FA:17:D3:B7:B5:4E:3A:13:68
            X509v3 Authority Key Identifier:
                keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8f:a9:f2:4c:22:c2:54:b1:29:1c:a7:64:03:4b:4a:9f:62:
         69:3f:c6:c4:11:22:2b:38:3b:8e:d5:fb:e0:19:01:88:37:73:
         9d:c9:f1:12:05:c5:33:7f:ec:87:32:0a:5a:87:c8:2e:54:34:
         7f:2c:c2:e3:25:75:95:aa:3a:65:f8:47:22:05:77:34:01:b9:
         e6:dd:a2:a3:f0:be:d2:2f:c8:aa:61:c7:78:9c:8c:e8:89:94:
         d3:32:a9:45:25:83:50:f0:34:28:e8:2e:25:86:03:ad:d5:41:
         7a:37:d5:d6:0b:55:70:d6:90:75:6d:87:b8:9d:46:fd:c5:fc:
         fa:6d:3d:bb:97:2d:88:7a:41:8c:d2:08:ec:25:e3:86:8f:25:
         5b:24:55:63:2a:78:76:a3:04:59:af:e1:a4:2a:28:e8:ba:7a:
         5c:52:e7:9a:2d:22:18:3e:be:02:e5:59:b1:aa:c1:43:63:60:
         e5:a9:95:49:0e:37:0b:d5:9e:c9:e9:36:42:2b:e0:05:62:3d:
         c9:1d:54:e1:81:66:ca:99:7e:35:1a:7e:b4:eb:59:1f:92:63:
         20:6c:a2:80:e0:53:fd:2d:a2:39:94:b7:84:c7:60:71:6c:e7:
         c2:b0:f1:94:4c:f6:82:71:98:c8:0d:0e:0d:62:06:31:4c:9c:
         bb:38:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:28:34 2024 by rpki-client on console-ams.rpki-client.org